Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
File:                     Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft (raw, json)
Hash identifier:          W5Y4m/N6ivKsfdoHty30gEgNfCHhQDTNBxe25eYc6zI=
Subject key identifier:   0C:F5:84:74:8B:A0:27:AC:99:60:59:26:C5:1D:A8:83:F4:F2:09:71
Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
Certificate issuer:       /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Certificate serial:       019E1EA34B273D3843FB70049E69A1077412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
Manifest number:          1905
Signing time:             Wed 13 May 2026 00:01:18 +0000
Manifest this update:     Wed 13 May 2026 00:01:18 +0000
Manifest next update:     Thu 14 May 2026 00:01:18 +0000
Files and hashes:         1: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl (hash: ik+IAxvvQj2Abfnwxt+zezL9XED7dSdaAsZrAqN4ZoE=)
                          2: b85PS3H30eMs5XV1Zj_5kBi4YS8.roa (hash: ADteCFtgyfMf5jEQhYpSnrBciRI5sXi17xBqTjm3R+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:4b:27:3d:38:43:fb:70:04:9e:69:a1:07:74:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
        Validity
            Not Before: May 13 00:01:18 2026 GMT
            Not After : May 14 00:01:18 2026 GMT
        Subject: CN=0cf584748ba027ac99605926c51da883f4f20971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:68:d4:47:65:fd:4c:42:5f:3f:82:8a:2e:
                    12:fe:52:4c:2d:10:c3:13:70:e0:0e:55:d4:4a:bc:
                    42:a5:ec:28:e2:19:c8:c2:98:2b:12:df:35:7c:f6:
                    55:a5:f0:0c:9e:fb:f8:33:a6:a4:bf:59:04:61:79:
                    a7:8d:55:45:da:a4:37:cc:5a:9f:7a:3d:09:d4:1b:
                    cc:4b:73:2a:f7:c1:96:57:00:2c:fa:65:d1:08:1d:
                    ea:e7:e7:3e:52:c9:22:df:02:95:8e:14:e4:02:c0:
                    44:89:39:dc:26:1a:f3:30:8c:c8:54:cf:fa:e3:3d:
                    19:84:06:cb:ce:64:66:4c:86:c1:ef:60:ec:88:9a:
                    27:56:cf:b3:2e:46:3e:12:77:68:dc:38:1f:76:75:
                    72:06:16:60:c8:9d:83:77:58:47:a3:8c:bb:71:47:
                    0b:b3:29:46:ee:50:12:9b:ec:fc:87:f7:f1:3c:9f:
                    b6:c7:e7:ee:9f:1e:84:20:f2:fb:23:bc:0a:02:dd:
                    7a:37:75:00:b0:fb:c5:db:88:75:fe:d6:f1:1d:18:
                    ad:25:0a:54:6b:4b:00:38:5d:71:d9:40:30:ae:7a:
                    9f:e3:e7:e3:48:bc:09:ce:97:f9:1d:c6:28:8e:a6:
                    f6:33:eb:d3:a0:ec:cb:a2:92:b2:0f:d4:9e:dd:bc:
                    02:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F5:84:74:8B:A0:27:AC:99:60:59:26:C5:1D:A8:83:F4:F2:09:71
            X509v3 Authority Key Identifier:
                keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:27:64:3d:1c:45:5c:c2:d6:72:3b:70:09:14:1a:3b:c9:7d:
         c1:5a:57:43:b8:75:58:91:c8:6c:cc:e0:53:17:38:11:c5:36:
         46:af:46:9c:b3:67:d7:25:6d:5c:5f:71:79:d3:83:15:f7:3f:
         7b:f4:28:5b:86:f6:ed:d6:f9:5b:34:a9:78:ab:cb:e8:a3:86:
         66:68:fb:8d:28:65:89:00:ff:47:3a:82:29:f7:8f:5f:a8:fd:
         62:6e:9c:58:e8:29:2f:42:26:68:4b:69:93:4f:df:f7:2a:a2:
         75:e4:dd:65:8c:6d:50:e7:63:9c:73:bf:97:8e:fd:2e:a7:af:
         26:59:2f:6a:b2:d3:ed:e1:56:93:21:1b:7b:b6:af:ce:a7:9e:
         50:fd:cc:d2:4b:e7:34:3d:51:86:05:a5:3c:2d:48:a2:fc:3e:
         06:94:1e:73:45:1e:17:f4:57:21:e5:0d:99:91:25:7a:3c:3c:
         e0:20:75:c3:60:95:c7:4b:2f:60:38:38:9b:28:76:e9:e4:0b:
         bb:4d:13:1a:30:bb:3d:c2:44:4d:57:33:4b:87:c4:f1:25:a2:
         87:41:a2:03:b9:f6:ad:e8:2c:c9:80:c6:63:18:78:42:f2:1f:
         14:a0:d6:14:74:e7:40:62:1c:2f:14:57:8b:bd:6c:e6:63:3c:
         72:4b:55:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:01 2026 by rpki-client