Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
File:                     DoVoAb747TroEOfmejH9AStE0ww.mft (raw, json)
Hash identifier:          RbwbW9AF8z1M6tQSMiT51yXBHb/PQTkugcA5FGNqmWg=
Subject key identifier:   7B:08:BD:E4:24:3E:09:CB:27:AD:E1:F5:34:12:82:3B:FD:94:2F:7B
Authority key identifier: 0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
Certificate issuer:       /CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Certificate serial:       019E1D229549511DC0F9A3FE8EF7A41DAD98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
Manifest number:          1857
Signing time:             Tue 12 May 2026 17:01:06 +0000
Manifest this update:     Tue 12 May 2026 17:01:06 +0000
Manifest next update:     Wed 13 May 2026 17:01:06 +0000
Files and hashes:         1: 4hFvzV4WrmiLIBpFJw9jPUjsv-0.roa (hash: SOzlsBSFn/lFTeVqU71MsP/XA8RfCBYPDkl2dtb8tLE=)
                          2: DoVoAb747TroEOfmejH9AStE0ww.crl (hash: sb2UmAvTlFUYXzW6LdI+FDMlZkMvwhngrwb6WILVNvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:95:49:51:1d:c0:f9:a3:fe:8e:f7:a4:1d:ad:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
        Validity
            Not Before: May 12 17:01:06 2026 GMT
            Not After : May 13 17:01:06 2026 GMT
        Subject: CN=7b08bde4243e09cb27ade1f53412823bfd942f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f4:1c:7b:3f:74:65:ec:8e:c0:6e:74:60:3f:
                    24:98:57:99:40:4f:4e:b9:dd:e4:7d:f4:37:98:21:
                    0f:58:0e:61:4f:0a:07:38:ea:50:27:d1:ea:d4:20:
                    46:bf:50:20:96:48:d8:9f:42:4c:7b:de:2d:1a:d6:
                    e8:08:41:df:e9:8c:8b:52:7b:b3:4a:57:0a:0b:ac:
                    5c:c8:70:64:ae:ec:9f:a6:ef:27:f1:ce:d0:27:5d:
                    b4:ab:03:6e:a3:8c:5d:b2:95:37:25:e6:7f:fd:f9:
                    6d:0e:24:aa:de:69:83:4d:21:5a:23:72:52:96:42:
                    24:ff:e4:9a:cf:db:f4:4e:9c:ae:ac:16:53:a8:45:
                    23:f2:2a:49:1e:b6:13:05:9d:a2:bd:c7:ff:63:a5:
                    85:f1:d4:9d:05:3a:e5:65:6a:a6:f3:a7:ad:d8:4a:
                    1e:90:09:02:fe:bc:53:f0:54:67:fc:c1:ec:f9:31:
                    4e:bc:9d:7d:77:c0:03:d9:c6:7a:0b:1d:a5:64:55:
                    62:f0:ec:9c:2b:91:cd:ab:ff:49:48:76:98:87:1f:
                    b7:22:53:57:52:73:b8:63:b7:03:b5:7f:40:6e:c0:
                    06:8e:7c:76:9e:f4:9a:7b:61:46:99:c2:73:6c:c4:
                    e2:03:5b:61:ad:e6:5c:73:50:64:4f:8d:a1:4e:f4:
                    c4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:08:BD:E4:24:3E:09:CB:27:AD:E1:F5:34:12:82:3B:FD:94:2F:7B
            X509v3 Authority Key Identifier:
                keyid:0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:40:d6:5d:15:ea:64:75:eb:aa:d1:a4:26:f5:54:e6:91:f2:
         fc:ba:5c:4b:e2:7c:7d:0c:66:5c:02:5e:0f:61:6c:b1:db:c3:
         64:1e:56:6e:86:d6:6a:3e:48:27:72:89:1a:fd:0e:11:0b:c0:
         9d:04:e7:61:04:94:b4:8e:ad:04:32:37:4b:ea:6f:25:f3:39:
         0b:78:1b:37:71:73:d3:2e:ae:a8:13:c5:30:c2:ff:ca:f5:9f:
         97:d2:d5:20:fe:7c:7c:f9:48:5a:de:d0:fa:f2:cb:16:b1:2b:
         23:d7:31:77:18:14:62:1f:86:23:12:08:94:bf:8a:46:3f:a9:
         5c:21:8b:ef:85:46:b5:48:1d:62:20:1b:97:45:7c:c6:8a:c0:
         ba:8d:c7:68:0f:6b:20:c0:e1:1b:3e:16:b3:2c:06:cd:7b:58:
         3a:55:ef:f1:fd:c6:65:03:80:ae:bc:ef:fa:eb:91:97:e0:06:
         e6:87:1f:a8:06:08:1b:0c:00:a3:7a:6c:ae:ed:20:b7:f8:3b:
         b2:d3:9f:bb:53:30:36:01:a9:79:5e:c0:70:28:8d:37:1c:b7:
         23:1c:68:15:e4:ad:a1:27:90:ff:ac:a4:1f:98:58:b9:90:5b:
         f2:cd:7c:98:56:84:d5:a3:66:2a:d7:d4:ca:d6:ee:21:ed:c2:
         93:24:53:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:35:20 2026 by rpki-client