Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
File:                     cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft (raw, json)
Hash identifier:          vE2j9OyYyawQie10yYsX0swf4+Xx7zHEvQSQ0R7TD5Q=
Subject key identifier:   B7:9C:82:98:77:E9:5C:4D:1A:D1:4F:6D:29:C3:CB:4C:49:7D:7A:42
Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
Certificate issuer:       /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Certificate serial:       019E1F1158A4CF8A78AA92E9E53426FACEF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
Manifest number:          0769
Signing time:             Wed 13 May 2026 02:01:30 +0000
Manifest this update:     Wed 13 May 2026 02:01:30 +0000
Manifest next update:     Thu 14 May 2026 02:01:30 +0000
Files and hashes:         1: B8t2bBTkaLAR5TIW9fbMzDeK7wM.roa (hash: rEfJvzviw6ozBNoCBXd6KOO7hAZ89y6wXkNGYhrBaG0=)
                          2: HMrz0ooKEJFXKSO4vlLH3tqjuoY.roa (hash: Q44eqltej8ZT7IIY9L9uJnTiWZ7q0wvG++yznZV8P2Y=)
                          3: Jcrw5wdlUSTT6uVPSFxR6-NSOq4.asa (hash: dR4oTJ5jqBavqgY9Rb82c5VxF/eMWWjkNxBxJE8/VHA=)
                          4: OAwjmIJKIKdPAQbPLOFqI6tUMQc.roa (hash: ptXr3wrI9Ua3HiNsZCwM7CEtOaXWpO5fScxHniZRFZ8=)
                          5: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl (hash: IEM/1+d1RkSgvpM5QmYGTb424QOVXhpo5/M9Su0zjPk=)
                          6: gtP2-qjZ9BceWm37CevDo-CjXzY.roa (hash: VlU69I3hb/G6/wyrp9pzGaxb3Tpi8AUBli1dWDbRaNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:58:a4:cf:8a:78:aa:92:e9:e5:34:26:fa:ce:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
        Validity
            Not Before: May 13 02:01:30 2026 GMT
            Not After : May 14 02:01:30 2026 GMT
        Subject: CN=b79c829877e95c4d1ad14f6d29c3cb4c497d7a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:16:31:e9:b3:10:e9:54:79:50:3e:6f:0a:a2:
                    a3:11:2e:ee:7e:7d:6a:1a:60:d9:6d:5a:6f:46:c1:
                    11:81:1c:ce:00:f8:eb:9a:1d:f0:3b:51:4e:98:30:
                    87:4a:a1:24:76:49:f9:b4:07:c6:95:2a:b0:d5:f0:
                    70:6c:06:aa:72:e6:a5:b0:7c:30:35:7d:5f:49:a0:
                    a2:89:89:e3:48:39:b7:d1:2b:a6:e8:42:f6:25:dd:
                    3b:68:42:07:ab:84:03:cf:2f:ae:74:ff:09:e0:ce:
                    e9:67:78:a6:50:e0:3e:a9:7b:40:06:8c:60:20:2b:
                    ee:89:c7:71:8b:b8:e1:9e:07:3d:5d:6b:44:20:e5:
                    c2:11:e2:fd:94:0c:a4:b4:9a:3c:b9:93:09:30:f4:
                    3a:85:d9:f6:b9:ed:e6:62:30:46:e5:6a:5d:ad:b1:
                    d1:6a:ec:c3:6f:12:c4:af:19:80:0a:d0:ce:45:6a:
                    76:78:f4:c7:16:82:2c:62:10:53:47:61:cc:7b:90:
                    48:c2:d2:db:fc:d0:dd:f2:56:8c:29:b6:cc:d1:5e:
                    50:f6:fc:7e:fe:c2:7e:a5:1e:53:5e:4f:29:90:2f:
                    6a:1c:4c:60:51:44:cf:f2:bf:e1:be:c4:6d:02:10:
                    42:7e:a2:92:c6:ad:99:79:01:ee:a8:95:97:c6:ff:
                    cd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9C:82:98:77:E9:5C:4D:1A:D1:4F:6D:29:C3:CB:4C:49:7D:7A:42
            X509v3 Authority Key Identifier:
                keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:11:78:9c:c0:9d:34:e6:1e:4b:93:51:d7:4d:8e:50:07:92:
         80:72:a2:27:c3:04:c1:20:95:cd:88:ec:69:48:24:6a:ba:d1:
         92:b5:e2:7b:8a:8e:49:56:1f:84:e0:3b:05:69:1f:d2:4c:4a:
         12:d6:19:51:63:aa:b4:66:74:4a:00:d0:3c:54:e4:a3:81:8b:
         41:59:dd:5d:5a:af:f4:95:1f:60:8e:61:65:c5:e9:77:e4:73:
         b9:4a:30:4e:69:a4:02:f8:f3:8a:fc:3d:19:af:ed:60:d0:6e:
         9e:ef:bf:9f:b6:f4:75:bb:5c:6a:dc:98:b5:05:18:ad:c1:41:
         ec:08:14:7b:0d:ff:16:40:3f:70:4e:2e:37:fe:b9:df:bb:92:
         93:aa:fc:6e:c5:0d:99:b5:71:8e:a4:4b:b0:42:19:62:a9:d1:
         d8:e0:b8:ae:e3:95:e8:a0:58:bc:8f:91:c1:fe:46:1d:d6:bd:
         ed:f5:40:66:21:cf:7a:80:56:4b:5c:16:65:ae:53:ca:7d:29:
         36:8e:a4:7d:92:20:6f:69:01:87:eb:c6:8a:a5:b4:4c:1b:dd:
         d6:1d:05:85:df:92:98:9d:08:10:1a:44:c4:62:ee:d4:ea:3d:
         2e:1e:21:60:e5:8c:c5:fc:fa:14:8a:f6:93:bc:ff:6c:33:87:
         ec:83:66:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:41:16 2026 by rpki-client