Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
File:                     Dj8xyerObwpezNuN8rAcc1FWhoY.mft (raw, json)
Hash identifier:          F7F3tDLXS3RWp/BlZVTtG9wxUiUDIYAP9qFXaP66PCo=
Subject key identifier:   4E:03:E0:90:91:E6:B3:FF:28:85:CA:9B:22:58:BC:CA:E8:B4:E7:2B
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Certificate issuer:       /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial:       019E1DFEA7DD0522E21BD31308F31BC864B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
Manifest number:          18D0
Signing time:             Tue 12 May 2026 21:01:28 +0000
Manifest this update:     Tue 12 May 2026 21:01:28 +0000
Manifest next update:     Wed 13 May 2026 21:01:28 +0000
Files and hashes:         1: Dj8xyerObwpezNuN8rAcc1FWhoY.crl (hash: tPO2nQLTDQkWOC1DtEcGEwM3YTvOPsVeEIwq/4dCzgw=)
                          2: H_7ICe9bA6bKL6KxaXlnbRtE9DQ.roa (hash: myn2XXBsyfDvjK8OtF68llJ02gjDW6IloTyqRTy6l4w=)
                          3: P36bForyKz3A1xYxUt5uRvnbjGo.roa (hash: CVAU2pcmHNPpR0Ea2g62GxYoWi/yJ4n8I1Gjfyzzm7o=)
                          4: kTAGdAP94XB_eZK0C7vAHDqzJI8.roa (hash: CuJkjxQNxfp3wO54mRyTZ1oYxOazwRwfQjI9X+1M5ho=)
                          5: oveUA1uBv2ehHsokfHtBlO5t1OM.roa (hash: qHYZMnXE/ptQNsblCotL5I56Q3u2k4i1sIRc61QdOc4=)
                          6: uZHn0r02l2agjVRMRfZ3xICbMLw.roa (hash: YR/6cl0OhmlwCiQwg5TQ7bSWNguLPLl/GP2GOc23T+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:a7:dd:05:22:e2:1b:d3:13:08:f3:1b:c8:64:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
        Validity
            Not Before: May 12 21:01:28 2026 GMT
            Not After : May 13 21:01:28 2026 GMT
        Subject: CN=4e03e09091e6b3ff2885ca9b2258bccae8b4e72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:a1:dc:fb:04:a8:5a:15:d2:97:59:74:8d:
                    0e:b9:fa:09:2d:ee:83:b7:6b:a9:c9:bf:58:34:83:
                    63:8c:cc:82:b7:2e:f0:c8:c1:72:6b:d4:10:df:05:
                    b7:32:c6:d9:be:f9:59:24:ff:ea:69:86:33:05:64:
                    8f:e2:91:a5:0e:c6:01:ce:69:95:20:8d:7f:3f:ad:
                    3a:17:ec:0f:52:fb:7f:fb:48:47:1c:2c:83:ac:c8:
                    66:d9:80:89:ab:16:4b:00:59:bf:38:11:b8:69:c1:
                    d0:7a:48:d8:3a:21:ba:fc:c9:5d:e8:50:91:a5:63:
                    66:c0:95:ca:6b:a7:52:0d:11:88:06:9e:75:e0:ee:
                    28:69:66:94:aa:0d:e5:ab:52:ef:80:31:1e:92:ea:
                    c5:d4:39:cb:27:0f:0f:b5:cb:a5:ef:a5:97:61:29:
                    bb:ac:8b:14:b4:c8:cf:b8:a6:80:f7:21:db:6f:29:
                    b0:4d:53:b0:f9:6b:57:2a:2b:37:c7:ee:39:36:2d:
                    ed:56:4d:d0:a2:75:8e:27:e6:55:f4:26:10:30:dd:
                    a7:e4:fd:c3:c7:16:db:a7:ca:ac:ac:e8:57:96:df:
                    e0:95:ea:be:5e:29:a9:06:b5:a1:e1:bf:47:31:a8:
                    b6:07:f5:45:ea:e0:35:87:99:53:b5:bf:58:85:37:
                    bb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:03:E0:90:91:E6:B3:FF:28:85:CA:9B:22:58:BC:CA:E8:B4:E7:2B
            X509v3 Authority Key Identifier:
                keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:c0:ae:4f:cb:97:cf:8f:c3:7f:90:4f:b3:d7:8d:d5:68:f0:
         eb:a5:9f:98:a1:65:e8:48:b6:3d:ed:a5:de:84:f9:38:91:03:
         88:4e:77:96:6b:d8:56:8b:61:ab:90:4e:b7:40:11:59:a7:07:
         fe:31:70:53:86:1d:07:e7:a6:dd:84:68:f4:57:7c:38:61:c7:
         a4:1a:fe:7b:af:fa:73:04:ff:59:a0:34:bc:ea:f1:fe:85:36:
         ce:5b:0c:aa:5c:bc:60:41:23:96:99:8b:0f:59:8e:5f:cf:90:
         97:2c:54:dc:6c:6c:6e:02:41:63:0f:ef:12:73:af:dc:43:90:
         fe:b2:83:cc:69:22:b6:0c:e1:a0:6a:2c:16:ae:2b:75:81:44:
         de:f5:4a:23:e2:dd:45:d4:92:61:4c:fe:4a:09:0f:33:af:7a:
         87:21:0b:90:70:e1:aa:22:3e:7f:3e:b5:e3:a8:07:a7:3d:20:
         c6:61:e3:8c:39:51:e7:10:bb:53:1b:af:e9:59:8f:6a:2e:18:
         01:47:2b:90:c1:2d:d5:fe:bb:c3:23:aa:5e:2b:c6:4a:7b:8b:
         36:a1:2f:80:cc:c6:fa:26:74:fa:68:d7:c1:42:40:61:a6:45:
         d5:33:c8:5b:e4:e9:89:dc:23:e3:a3:aa:6e:6e:bf:21:77:e4:
         6d:08:4c:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/qfdBSLiG9MTCPMbyGS5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlM2YzMWM5ZWFjZTZmMGE1ZWNjZGI4ZGYyYjAxYzczNTE1
Njg2ODYwHhcNMjYwNTEyMjEwMTI4WhcNMjYwNTEzMjEwMTI4WjAzMTEwLwYDVQQD
Eyg0ZTAzZTA5MDkxZTZiM2ZmMjg4NWNhOWIyMjU4YmNjYWU4YjRlNzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVCh3PsEqFoV0pdZdI0OufoJLe6D
t2upyb9YNINjjMyCty7wyMFya9QQ3wW3MsbZvvlZJP/qaYYzBWSP4pGlDsYBzmmV
II1/P606F+wPUvt/+0hHHCyDrMhm2YCJqxZLAFm/OBG4acHQekjYOiG6/Mld6FCR
pWNmwJXKa6dSDRGIBp514O4oaWaUqg3lq1LvgDEekurF1DnLJw8Ptcul76WXYSm7
rIsUtMjPuKaA9yHbbymwTVOw+WtXKis3x+45Ni3tVk3QonWOJ+ZV9CYQMN2n5P3D
xxbbp8qsrOhXlt/gleq+XimpBrWh4b9HMai2B/VF6uA1h5lTtb9YhTe7DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4D4JCR5rP/KIXKmyJYvMrotOcrMB8GA1UdIwQY
MBaAFA4/Mcnqzm8KXszbjfKwHHNRVoaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYt
ZGQ1ZGRkMDVkYjBiLzEvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYtZGQ1ZGRkMDVkYjBi
LzEvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkcCuT8uX
z4/Df5BPs9eN1Wjw66WfmKFl6Ei2Pe2l3oT5OJEDiE53lmvYVothq5BOt0ARWacH
/jFwU4YdB+em3YRo9Fd8OGHHpBr+e6/6cwT/WaA0vOrx/oU2zlsMqly8YEEjlpmL
D1mOX8+QlyxU3GxsbgJBYw/vEnOv3EOQ/rKDzGkitgzhoGosFq4rdYFE3vVKI+Ld
RdSSYUz+SgkPM696hyELkHDhqiI+fz6146gHpz0gxmHjjDlR5xC7Uxuv6VmPai4Y
AUcrkMEt1f67wyOqXivGSnuLNqEvgMzG+iZ0+mjXwUJAYaZF1TPIW+Tpidwj46Oq
bm6/IXfkbQhMRw==
-----END CERTIFICATE-----
Generated at Wed May 13 06:36:23 2026 by rpki-client