Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
File:                     ldn8gV6QyoeSeQfF6rP-ecohXqo.mft (raw, json)
Hash identifier:          g+kOFi0iZUK0dURfDrsXp7O1y3gkMbsnN/sspN2eObk=
Subject key identifier:   DB:37:88:EA:EF:F6:57:D9:4C:0F:C9:4C:16:39:44:6E:54:C4:50:F9
Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
Certificate issuer:       /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Certificate serial:       019E1D90FB97050943F20D64988DCF45349A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
Manifest number:          0608
Signing time:             Tue 12 May 2026 19:01:41 +0000
Manifest this update:     Tue 12 May 2026 19:01:41 +0000
Manifest next update:     Wed 13 May 2026 19:01:41 +0000
Files and hashes:         1: LUonv2RCWvu1zL14QrHsu9P2rS4.roa (hash: sYEwbsM2ctHv6cNHrCxgkHRsQW+if3GIsRAYyp3V97Y=)
                          2: S8keSl8NDHVc6KPmbXVZh56DkMo.roa (hash: gehjFU9x+RbJrI179PzTfPP1zreMHK8V8b0riuey5sI=)
                          3: dXBxqg2WRY0bNZSrjzenz8d7Y10.roa (hash: bonkDkqWKImRRfgE/vT3fEawIKDM/g7JC3uJ3coEEKE=)
                          4: ldn8gV6QyoeSeQfF6rP-ecohXqo.crl (hash: opdSXg84lfThXr1TpSM7nqxkQD2BW6g3yZiDuQEsZSY=)
                          5: rNttweQh2PLctodsZ8mGF8Xdou4.roa (hash: RnrUAyBZsGmfOkyGXTt4MMRoQ1xT0nGSE3thOB+UT3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:fb:97:05:09:43:f2:0d:64:98:8d:cf:45:34:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
        Validity
            Not Before: May 12 19:01:41 2026 GMT
            Not After : May 13 19:01:41 2026 GMT
        Subject: CN=db3788eaeff657d94c0fc94c1639446e54c450f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0e:71:66:c7:e9:f0:ab:87:0d:85:50:21:28:
                    27:28:dc:8f:18:5b:6e:76:a2:4a:e2:6b:c4:b9:e4:
                    0a:77:aa:52:c9:03:62:94:02:1a:5f:fb:a8:35:dc:
                    76:8a:e0:b9:ef:19:91:70:68:26:cb:3d:a4:19:5f:
                    35:45:12:5c:0e:e3:00:9f:c8:13:8e:5f:a7:f2:16:
                    5d:90:5d:08:00:9b:ce:6e:2f:80:2f:56:70:2f:f4:
                    15:6b:f0:87:32:86:19:ed:6c:92:ab:ae:51:40:39:
                    62:ad:4a:09:15:27:95:27:dc:c8:fd:d4:43:f4:9d:
                    00:06:0a:c9:6f:6a:10:86:f3:7b:6c:fc:eb:6c:d7:
                    2e:96:ed:41:96:aa:54:fc:b3:ce:2f:4e:3d:b5:fd:
                    f6:4c:95:95:04:32:64:df:9f:55:04:51:12:65:65:
                    42:47:43:56:1e:5a:93:36:b0:85:d0:ad:ab:92:c4:
                    90:4e:d6:04:a5:c7:4d:bb:1b:e7:3a:54:8a:3d:18:
                    0a:c0:2d:98:1d:2d:e7:f8:fa:8d:ab:fa:ed:0b:33:
                    75:7e:ef:1d:0c:f4:c3:c1:59:68:67:c5:74:6a:fb:
                    b5:38:99:6d:7a:ee:ba:33:12:0d:a8:f5:ac:85:17:
                    9b:37:bd:eb:2a:af:a8:84:ac:af:22:a5:e6:96:ca:
                    21:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:37:88:EA:EF:F6:57:D9:4C:0F:C9:4C:16:39:44:6E:54:C4:50:F9
            X509v3 Authority Key Identifier:
                keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:da:a3:7e:00:c9:b1:16:7c:ca:26:d0:10:fa:8f:91:4f:16:
         2b:15:bf:13:ff:bc:a1:81:a3:db:d2:27:05:8a:fa:ad:cb:01:
         75:b7:02:21:f2:21:5a:c5:df:7d:28:98:94:d7:db:2f:ed:6b:
         03:33:18:a6:25:ab:82:e8:48:35:df:8d:26:a5:0d:ac:87:7b:
         80:90:64:d4:cc:f3:aa:6c:a0:ba:9f:f8:b2:78:e5:aa:61:56:
         b2:7b:44:f9:a2:3c:dd:17:ec:0f:ae:cb:6a:b4:ad:14:c2:bf:
         4e:63:b5:16:8b:f1:53:09:a1:fa:fa:31:cb:e3:9d:e1:90:28:
         93:16:10:02:6e:3a:c9:46:46:9d:b4:7b:63:d8:f2:72:90:77:
         8e:fc:8b:90:fa:38:7a:92:4c:f6:98:25:b4:ee:c9:b1:55:86:
         1d:9f:14:5d:2f:ec:17:8f:68:88:36:9c:3a:90:3b:55:ac:e8:
         02:78:ae:d0:19:63:bd:6d:d9:6a:1a:c3:32:79:b9:be:df:25:
         41:0c:e2:bc:d4:98:df:53:6a:32:9e:bb:e1:05:f7:27:a9:72:
         e3:55:5e:dd:84:74:46:be:21:df:5a:c1:e1:fa:86:ca:40:13:
         ef:47:27:50:f9:6d:69:e0:6c:38:94:a3:a6:c3:e6:f0:48:9f:
         5e:f0:c6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:17:52 2026 by rpki-client