Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
File:                     d8pTqKWgOwVcs_NA_L64XXrUh6g.mft (raw, json)
Hash identifier:          lP7e6UBx3X0UmGb1syt2YojYVPIwHgZrK9gQzbvUZEs=
Subject key identifier:   0A:B5:FA:D4:1B:7D:44:B4:31:75:1B:1D:5B:50:35:EB:1F:B4:0F:D8
Authority key identifier: 77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8
Certificate issuer:       /CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
Certificate serial:       019E1D90CC130E77644CEC47C8D59EBF6340
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
Manifest number:          0D30
Signing time:             Tue 12 May 2026 19:01:29 +0000
Manifest this update:     Tue 12 May 2026 19:01:29 +0000
Manifest next update:     Wed 13 May 2026 19:01:29 +0000
Files and hashes:         1: Kr3YNIOZuTADRy89OqB1M7GiF_A.roa (hash: KV4JFAX9LmQEN4ylvhyFAZOy/rrjX27pdPNOLsJgnUs=)
                          2: d8pTqKWgOwVcs_NA_L64XXrUh6g.crl (hash: lWyYFstTsUNpoQvEO2sNR2fPRAI05pdcEtZ453zAFwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:cc:13:0e:77:64:4c:ec:47:c8:d5:9e:bf:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
        Validity
            Not Before: May 12 19:01:29 2026 GMT
            Not After : May 13 19:01:29 2026 GMT
        Subject: CN=0ab5fad41b7d44b431751b1d5b5035eb1fb40fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:62:93:90:13:ea:fc:ef:62:82:5b:14:9b:68:
                    cd:e4:0d:a9:f5:16:91:b4:15:00:d2:31:77:a9:58:
                    b9:79:36:25:19:dc:8a:9b:cd:4e:a0:07:56:71:b0:
                    e6:a5:89:ec:57:0a:32:7f:82:bb:1a:b5:42:f0:bd:
                    ea:47:e4:2f:13:14:9c:51:7d:37:dd:ef:8a:8a:66:
                    63:0a:a8:26:fb:80:c1:c7:d1:de:e2:3b:e5:4e:72:
                    97:5e:1d:e1:e2:7e:ef:5d:d1:08:e2:72:e8:ee:34:
                    34:66:75:00:b6:51:92:a1:07:bb:56:0b:cd:ac:f0:
                    9c:c1:3a:89:5e:b9:3a:5b:0d:83:e5:95:79:8d:06:
                    2b:dc:41:e6:55:ba:5f:63:93:18:0f:73:64:1e:f6:
                    20:e4:fa:70:ad:fe:90:8a:c9:ea:57:49:80:f1:f8:
                    d3:6b:bd:b0:26:48:83:4c:37:ec:83:60:69:03:a0:
                    3e:67:96:fc:ba:6d:69:a7:f2:43:1f:3f:fc:93:6d:
                    31:34:89:76:70:17:5b:6a:68:20:6a:9b:e2:e3:e5:
                    b6:8f:6d:39:36:7f:5c:9d:e2:d1:ae:21:81:b2:64:
                    11:bc:72:4b:2c:ee:92:c3:df:38:a2:37:d7:41:f8:
                    fe:be:b4:d7:3d:9c:53:31:75:31:ee:d1:26:00:4f:
                    80:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B5:FA:D4:1B:7D:44:B4:31:75:1B:1D:5B:50:35:EB:1F:B4:0F:D8
            X509v3 Authority Key Identifier:
                keyid:77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:fb:e0:05:7f:b3:43:16:81:36:53:a1:83:69:61:66:43:a1:
         92:5f:de:09:1d:80:16:eb:b9:24:24:88:b4:7c:71:5a:cb:ac:
         69:b6:c4:88:4a:9f:16:fc:48:b4:55:01:28:5d:c0:8f:01:20:
         f8:f5:59:31:0a:92:42:6c:81:49:96:4d:80:ee:e3:a7:e1:31:
         3f:87:8d:f8:b3:ff:9e:ec:94:9d:6b:81:00:c1:ff:b6:61:92:
         85:e9:8f:0b:28:20:9a:9c:98:e2:a9:46:d0:2c:e4:d3:15:f1:
         c4:54:c4:3d:b5:33:ae:92:90:8a:da:0c:71:29:43:89:71:ef:
         2a:73:d0:32:74:4b:34:2e:af:2d:be:ea:79:ed:e6:27:15:a0:
         b4:50:0c:fa:0e:82:19:2e:ff:77:66:9c:3b:47:4a:5a:7d:04:
         0f:b0:6b:3f:83:95:52:b5:f2:e3:87:86:ac:8e:7e:33:b9:52:
         f7:f7:f3:0b:46:e4:e9:ab:c9:13:52:1d:a0:f5:58:62:47:ba:
         2f:ff:15:32:0d:64:4d:47:3a:c5:9b:2a:26:8f:99:68:96:d6:
         c6:29:d5:bd:81:79:d8:df:3e:49:a5:5c:96:00:45:d9:3d:f6:
         c1:b3:35:0c:89:13:80:39:d1:db:1d:b7:98:97:00:f2:ea:e8:
         9e:b0:8e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:41:06 2026 by rpki-client