Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
File:                     0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft (raw, json)
Hash identifier:          m7MByvxBrdLp5INd6lTUJ03DC7ec4rsGdh/MzbyXs5g=
Subject key identifier:   7E:CB:11:BB:D9:3C:AD:3F:1C:4A:3C:C6:FC:64:8E:8D:45:A4:3E:3F
Authority key identifier: D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32
Certificate issuer:       /CN=d09da99a73ba7202418f73718932dc8d7c153e32
Certificate serial:       019E1D226E1ACD2C16E037E2814EE2C6878A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 17:00:56 +0000
Manifest this update:     Tue 12 May 2026 17:00:56 +0000
Manifest next update:     Wed 13 May 2026 17:00:56 +0000
Files and hashes:         1: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl (hash: mum6s90+mQCZuDv35q336bM4fMMui8qC/nfGUWNX9m4=)
                          2: 2bJ2chGfdjROmt484R3iaMkBv5s.roa (hash: qIi6O0mX3eNR+7L75XDWNrvKkZYX8S4LP3pHsAXc7mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:6e:1a:cd:2c:16:e0:37:e2:81:4e:e2:c6:87:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d09da99a73ba7202418f73718932dc8d7c153e32
        Validity
            Not Before: May 12 17:00:56 2026 GMT
            Not After : May 13 17:00:56 2026 GMT
        Subject: CN=7ecb11bbd93cad3f1c4a3cc6fc648e8d45a43e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fd:0c:e1:a2:72:ca:cb:f2:0b:ec:04:10:ce:
                    71:8b:c1:6d:9d:ba:92:b9:db:e7:df:bf:97:6f:6c:
                    b4:59:74:59:fc:55:52:f3:8b:f8:e2:2a:6f:08:85:
                    99:ea:69:90:4e:9a:aa:ac:49:96:38:08:89:39:a3:
                    d2:28:c0:03:fe:29:d8:1d:f1:66:5f:67:1d:8b:9f:
                    2a:bf:fb:2e:42:ba:f9:e9:e0:2d:35:1a:1e:17:27:
                    29:c2:09:5d:6d:9f:0d:ff:41:0d:35:28:cc:36:c4:
                    1e:24:c2:34:9c:6d:13:44:11:89:88:fd:d7:e8:c6:
                    59:00:79:21:65:3e:13:57:bb:63:4b:7a:96:c0:ae:
                    2f:e0:42:5d:9f:63:18:7d:06:98:1f:89:31:ca:ed:
                    74:c7:f8:0d:35:ed:48:60:17:68:a6:e1:b3:28:8c:
                    b3:a0:13:e2:cd:9d:60:91:44:a6:fb:9d:93:66:89:
                    ac:9f:85:ae:f3:33:8e:30:0b:35:ff:47:b5:80:90:
                    8e:56:67:0f:f6:fb:da:8b:95:cb:f8:c3:4d:96:5d:
                    0e:05:47:bd:bc:af:a9:b7:17:f7:1b:5b:56:fc:01:
                    10:6e:3e:b4:a9:16:ef:8b:51:fe:c3:ef:ae:a8:c9:
                    85:ac:14:fc:43:f5:6b:58:39:7a:e1:07:39:c5:6b:
                    68:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CB:11:BB:D9:3C:AD:3F:1C:4A:3C:C6:FC:64:8E:8D:45:A4:3E:3F
            X509v3 Authority Key Identifier:
                keyid:D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:37:69:7f:cf:ee:ff:1d:2f:b0:b9:e8:60:67:d2:f6:c0:7f:
         77:d6:03:3b:b9:ee:17:af:44:f9:98:7f:e5:da:dc:67:66:e3:
         d8:d1:49:73:3d:9a:9b:0c:82:00:1f:6c:b1:68:a8:ce:3f:ad:
         f8:7c:dd:74:f0:86:eb:12:f6:05:b7:9a:43:4a:27:ee:2e:b9:
         f2:28:4b:58:96:39:e7:5a:cd:d2:d8:cc:57:99:1b:b6:31:b4:
         a3:9e:25:0d:a9:96:d0:c7:be:c4:70:b8:32:ce:99:d0:59:df:
         3d:2d:9b:ad:b5:41:ee:7e:fe:4b:9f:25:40:ff:57:2e:27:78:
         76:54:50:7d:ca:3e:96:f9:28:3a:14:4e:15:59:84:01:b7:e8:
         22:82:54:90:19:2b:ca:2a:d3:e7:3b:3a:c9:6e:9a:c0:fc:21:
         c7:b5:e9:f5:70:10:ad:a0:36:5d:7c:ae:12:17:3d:11:bc:81:
         e7:65:86:fc:43:44:44:b9:56:43:5d:06:22:d2:b5:cf:4e:01:
         ba:53:c8:f7:34:e2:a4:43:7c:65:41:28:5e:47:da:cd:a0:e8:
         05:9b:88:13:58:c3:67:44:46:6f:6c:fe:29:81:30:89:97:11:
         d1:9b:85:f3:77:0a:2a:f5:ef:8e:eb:78:6f:93:0c:51:62:9f:
         55:f1:51:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:24:09 2026 by rpki-client