Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
File:                     DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json)
Hash identifier:          pVgG+9Pag4MvjdWyyq2Y+eP0DVM/05EtQPK5ryJNwqg=
Subject key identifier:   EC:36:13:4D:77:83:AE:00:A6:30:B1:D8:36:E9:E5:F9:11:BA:AC:53
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Certificate issuer:       /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial:       019E1F10A304A7E1A79206961CF718914A58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
Manifest number:          16F7
Signing time:             Wed 13 May 2026 02:00:44 +0000
Manifest this update:     Wed 13 May 2026 02:00:44 +0000
Manifest next update:     Thu 14 May 2026 02:00:44 +0000
Files and hashes:         1: 7yB2yDJ-HgimpHgTLA1aufvYXvA.roa (hash: We/Y2EIgK33DNG81UZmPRyHMQRU13Wzwkuo+kvc15gs=)
                          2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: LtcISly7WlQUxTHBT6gN1Ux+txcDbT8qbmjH10mNMYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:a3:04:a7:e1:a7:92:06:96:1c:f7:18:91:4a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
        Validity
            Not Before: May 13 02:00:44 2026 GMT
            Not After : May 14 02:00:44 2026 GMT
        Subject: CN=ec36134d7783ae00a630b1d836e9e5f911baac53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1d:43:f6:dc:02:6c:68:95:84:77:16:0c:7a:
                    85:14:00:f3:d1:0c:01:72:cf:91:67:87:fe:e1:eb:
                    fa:76:fc:47:2c:51:20:c8:88:15:53:ee:83:b5:06:
                    3f:07:cd:df:00:8c:b3:ef:f4:a9:71:6c:3a:27:d3:
                    ec:d2:e5:d4:69:ae:bf:97:72:9c:5d:69:44:84:b4:
                    2b:41:8f:e6:9f:7c:0b:20:e6:de:d0:be:01:18:88:
                    ef:99:55:70:a5:7f:49:37:ec:2f:81:a8:f6:1d:16:
                    e1:a3:f1:17:09:dd:89:53:64:db:65:ec:5a:87:38:
                    df:10:61:90:7e:04:76:6c:65:d3:85:d2:49:65:04:
                    4c:e8:73:1d:25:88:54:2c:11:07:66:b0:e1:38:be:
                    ea:78:4a:fa:b0:88:37:7d:88:7f:64:78:fd:eb:57:
                    8b:d3:17:74:12:6b:29:37:c0:23:35:21:86:d7:9e:
                    5e:c7:00:a2:41:e8:0e:03:d3:59:c8:7e:a6:68:aa:
                    24:3c:2a:6f:55:9e:77:73:e1:4e:6c:4a:b0:a8:03:
                    41:e9:54:21:8c:08:bd:41:94:a6:3f:8a:ac:25:56:
                    6b:87:c3:a5:8c:80:06:1e:1a:e0:4d:9b:96:51:a1:
                    6e:28:5f:6e:ca:72:5f:c6:08:8d:9d:fa:3b:2b:d1:
                    79:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:36:13:4D:77:83:AE:00:A6:30:B1:D8:36:E9:E5:F9:11:BA:AC:53
            X509v3 Authority Key Identifier:
                keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f3:d1:e0:72:67:73:e5:7f:f0:22:f6:ec:55:9a:a4:67:ff:
         5c:23:9f:30:3f:c6:06:4b:7b:50:31:29:0d:76:04:cf:5b:5e:
         c2:f7:6a:c7:83:4f:2b:72:da:84:b3:a2:0c:88:62:d7:25:cc:
         66:f1:13:54:3e:1b:4f:c7:2b:9a:a5:17:0e:ac:d0:a3:44:49:
         00:38:8a:fa:62:42:8c:cc:ea:d4:ba:dd:62:4f:b4:a7:68:9a:
         d5:de:35:c8:bc:8c:90:9b:f0:fc:05:8d:28:08:c8:aa:b8:ef:
         1a:a1:d2:2d:2e:ff:f6:bc:9d:ba:6d:cd:91:fa:18:d0:e0:74:
         0d:e9:c1:d7:42:64:fc:95:66:ba:3c:90:21:67:98:f6:8e:e6:
         2d:88:19:ec:b1:79:bf:0b:74:24:3c:5e:b9:3e:7e:54:d3:0b:
         ce:6a:40:b3:f1:0a:c8:a2:51:c3:89:b6:a6:6d:ac:d1:e1:c5:
         f5:2c:49:eb:d2:95:72:1f:9d:70:24:51:a6:ef:66:e9:92:6d:
         6b:df:9e:39:79:44:2a:be:80:ca:13:30:23:8e:30:e9:98:af:
         42:1b:b2:24:44:e5:ae:51:5f:4b:71:71:a1:b1:ca:e8:89:da:
         f6:16:51:de:f5:32:2c:de:f3:fd:7e:d4:cc:6b:e5:32:cc:f7:
         44:ab:10:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:11:58 2026 by rpki-client