Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft
File:                     DpMafPLalMzUoq_OI_OS1AYdVvk.mft (raw, json)
Hash identifier:          VTmnjbTYKYHyB5fKNKABbpXBJWGZDMtfkMjYvpCT5aI=
Subject key identifier:   8B:97:D3:D8:1E:E8:4B:DB:7B:A1:E0:6E:68:39:5C:7C:D1:36:AE:EB
Authority key identifier: 0E:93:1A:7C:F2:DA:94:CC:D4:A2:AF:CE:23:F3:92:D4:06:1D:56:F9
Certificate issuer:       /CN=0e931a7cf2da94ccd4a2afce23f392d4061d56f9
Certificate serial:       019E1F478594975CB48BF81B1413AF941C24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 03:00:41 +0000
Manifest this update:     Wed 13 May 2026 03:00:41 +0000
Manifest next update:     Thu 14 May 2026 03:00:41 +0000
Files and hashes:         1: 5bnhJYFPOsYDLyzjgUMjNOoQVxk.roa (hash: 4/9Kwtc7pVMZkf2C3AcfJB/4wzcdsheoGFzOOPKCvXs=)
                          2: DpMafPLalMzUoq_OI_OS1AYdVvk.crl (hash: LphB8SUU8mJwtx3AKnKGJevPpEjlZ+71zSMQR7Thr0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:85:94:97:5c:b4:8b:f8:1b:14:13:af:94:1c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e931a7cf2da94ccd4a2afce23f392d4061d56f9
        Validity
            Not Before: May 13 03:00:41 2026 GMT
            Not After : May 14 03:00:41 2026 GMT
        Subject: CN=8b97d3d81ee84bdb7ba1e06e68395c7cd136aeeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:47:fb:87:96:2d:06:b5:9a:70:86:af:7b:
                    8c:38:77:26:ae:75:20:18:18:51:ac:5d:c9:e3:c6:
                    00:e1:ad:cd:2b:1d:7a:62:0c:e2:8b:3c:66:95:30:
                    38:3c:d1:c3:36:28:55:1a:e0:88:43:d9:21:41:38:
                    8e:10:de:58:cc:8b:d9:68:b6:3d:85:e3:2d:e6:19:
                    df:52:2b:03:24:6f:69:44:47:3c:57:4c:5d:02:39:
                    53:2e:7d:d0:37:7e:f5:07:19:8d:2e:79:9f:2b:a2:
                    44:21:0b:c2:97:39:dd:65:3b:ad:10:12:7f:8d:be:
                    6c:f8:78:78:11:de:6c:d4:81:db:b5:d1:2b:1b:ca:
                    95:db:f6:f9:dc:9f:94:b5:0f:f5:e4:a8:86:0e:c7:
                    e9:a6:91:00:00:bd:aa:d5:61:15:43:a7:c7:c2:1a:
                    ef:33:54:0b:e7:32:59:8f:4b:62:0d:2f:93:b2:87:
                    99:c7:f2:c7:ea:47:7c:b8:85:14:23:06:9f:41:fa:
                    f2:69:d9:1c:6f:57:ac:b1:fb:d3:fd:1c:61:7e:da:
                    0e:86:d2:eb:2e:4f:12:71:4f:98:4e:ef:14:e6:d8:
                    49:cd:4a:a0:c7:7f:48:60:fe:f0:b1:6b:2a:4c:08:
                    24:ff:58:c5:36:35:aa:fb:b8:a3:99:29:76:aa:87:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:97:D3:D8:1E:E8:4B:DB:7B:A1:E0:6E:68:39:5C:7C:D1:36:AE:EB
            X509v3 Authority Key Identifier:
                keyid:0E:93:1A:7C:F2:DA:94:CC:D4:A2:AF:CE:23:F3:92:D4:06:1D:56:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ac:80:95:ef:3b:ca:f0:ed:92:9c:5a:1d:96:d5:7f:0b:8d:
         c5:1a:c8:d8:40:5d:c6:e1:f8:53:57:eb:d0:29:0e:d3:59:a1:
         be:d6:42:37:eb:4c:61:a5:3f:2c:2d:58:ac:8c:46:b2:b0:64:
         b9:e5:f0:fa:48:6c:fe:65:1b:2e:32:1d:f5:75:9c:ef:05:2f:
         95:04:68:81:13:63:a1:d7:be:9b:02:c7:ec:72:f4:13:82:9a:
         a3:a0:aa:b4:b3:26:15:b4:9a:34:20:73:24:20:af:c8:c3:0c:
         38:a0:66:ff:15:8f:bb:1d:3f:58:c3:d7:83:d4:26:05:36:b8:
         c5:12:0d:99:93:a6:1d:c4:95:4e:28:5a:b8:00:07:50:5f:00:
         bf:91:2a:27:a5:ee:af:d1:59:32:1f:dc:ca:89:46:59:e5:ce:
         f0:aa:c4:16:ac:ea:63:b1:44:82:4e:fb:8e:df:2e:27:34:59:
         a7:2d:b9:3d:f8:85:81:a6:98:45:be:3f:68:08:9f:23:fb:d5:
         f4:38:7e:ec:33:8a:7d:e8:25:47:f8:c5:ec:62:c3:60:a8:8d:
         51:c3:34:a7:0a:80:9d:2d:fa:16:74:8c:10:b9:56:1a:6a:d1:
         22:46:7d:e2:7a:b9:8b:12:57:39:49:b4:10:ee:25:1f:42:89:
         f5:64:f3:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR4WUl1y0i/gbFBOvlBwkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOTMxYTdjZjJkYTk0Y2NkNGEyYWZjZTIzZjM5MmQ0MDYx
ZDU2ZjkwHhcNMjYwNTEzMDMwMDQxWhcNMjYwNTE0MDMwMDQxWjAzMTEwLwYDVQQD
Eyg4Yjk3ZDNkODFlZTg0YmRiN2JhMWUwNmU2ODM5NWM3Y2QxMzZhZWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApopH+4eWLQa1mnCGr3uMOHcmrnUg
GBhRrF3J48YA4a3NKx16YgziizxmlTA4PNHDNihVGuCIQ9khQTiOEN5YzIvZaLY9
heMt5hnfUisDJG9pREc8V0xdAjlTLn3QN371BxmNLnmfK6JEIQvClzndZTutEBJ/
jb5s+Hh4Ed5s1IHbtdErG8qV2/b53J+UtQ/15KiGDsfpppEAAL2q1WEVQ6fHwhrv
M1QL5zJZj0tiDS+TsoeZx/LH6kd8uIUUIwafQfryadkcb1essfvT/RxhftoOhtLr
Lk8ScU+YTu8U5thJzUqgx39IYP7wsWsqTAgk/1jFNjWq+7ijmSl2qocS4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuX09ge6Evbe6Hgbmg5XHzRNq7rMB8GA1UdIwQY
MBaAFA6TGnzy2pTM1KKvziPzktQGHVb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHBNYWZQTGFsTXpVb3FfT0lfT1MxQVlkVnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lYjg0NjEtYWIwNy00NWM3LWI5ZDYt
ZDQxYTFhMDg0YzM1LzEvRHBNYWZQTGFsTXpVb3FfT0lfT1MxQVlkVnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9lYjg0NjEtYWIwNy00NWM3LWI5ZDYtZDQxYTFhMDg0YzM1
LzEvRHBNYWZQTGFsTXpVb3FfT0lfT1MxQVlkVnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKyAle87
yvDtkpxaHZbVfwuNxRrI2EBdxuH4U1fr0CkO01mhvtZCN+tMYaU/LC1YrIxGsrBk
ueXw+khs/mUbLjId9XWc7wUvlQRogRNjode+mwLH7HL0E4Kao6CqtLMmFbSaNCBz
JCCvyMMMOKBm/xWPux0/WMPXg9QmBTa4xRINmZOmHcSVTihauAAHUF8Av5EqJ6Xu
r9FZMh/cyolGWeXO8KrEFqzqY7FEgk77jt8uJzRZpy25PfiFgaaYRb4/aAifI/vV
9Dh+7DOKfeglR/jF7GLDYKiNUcM0pwqAnS36FnSMELlWGmrRIkZ94nq5ixJXOUm0
EO4lH0KJ9WTz9w==
-----END CERTIFICATE-----
Generated at Wed May 13 12:31:55 2026 by rpki-client