Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
File:                     0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json)
Hash identifier:          mloBqckr/eLn55hMPzLl5uKnNEGQZ2Eu7CCps+l/+lc=
Subject key identifier:   4B:46:FA:62:BD:23:24:C9:07:3D:A2:15:91:94:D0:C6:43:33:92:9B
Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
Certificate issuer:       /CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Certificate serial:       019E1F119631C42B6EA72FA607FA3438979D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 02:01:46 +0000
Manifest this update:     Wed 13 May 2026 02:01:46 +0000
Manifest next update:     Thu 14 May 2026 02:01:46 +0000
Files and hashes:         1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: RIw/dU4zHnHm4EzdesBbWnG2KWlZcviFYC2CH9mDbQo=)
                          2: qyL4pyAcBGjJOHJM0EvmdF4KW0w.roa (hash: 27Zjq50aqFTh0F3x/N5hr5Co5n5KTC4C5HqzL3GDGGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:96:31:c4:2b:6e:a7:2f:a6:07:fa:34:38:97:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d
        Validity
            Not Before: May 13 02:01:46 2026 GMT
            Not After : May 14 02:01:46 2026 GMT
        Subject: CN=4b46fa62bd2324c9073da2159194d0c64333929b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:13:ad:95:2e:7d:3c:ec:e3:88:a4:2e:b2:27:
                    85:9a:e2:e3:d3:63:cc:a5:6e:bd:0a:55:42:7e:4f:
                    2b:d5:d8:e8:77:71:22:96:a5:73:ac:d2:21:b8:fb:
                    25:35:e9:20:8d:e4:2a:ca:5c:7f:2b:9a:84:2c:eb:
                    38:73:65:1f:bf:e3:16:d5:6d:82:12:cd:18:b1:c3:
                    7d:4d:f4:6f:8c:07:38:f3:13:0e:e7:16:c8:4e:62:
                    d5:3a:58:63:f5:a5:92:c0:0f:68:69:75:3d:93:fb:
                    08:f6:a7:92:5b:29:84:05:ad:8e:2c:ad:c6:a2:c7:
                    a9:dd:9d:9b:10:de:04:84:53:5a:a5:85:ac:66:32:
                    67:ea:bf:99:05:b9:3c:26:fe:e4:c8:d1:93:82:b2:
                    43:ce:c8:de:4b:9d:ac:f1:e0:45:53:c7:f8:60:f7:
                    c3:e2:53:53:2f:00:f7:11:f1:01:07:59:f7:a7:fb:
                    67:fc:76:f9:64:36:b6:a6:43:47:14:48:75:42:42:
                    64:1e:ae:b4:40:30:86:3f:1e:d4:b1:e5:3a:a7:49:
                    61:dc:78:83:b0:e6:66:3c:a6:e0:fa:dc:96:ec:40:
                    1a:d7:1d:8d:0f:ac:ba:c8:d2:0c:ac:1d:43:14:48:
                    b1:37:a6:88:3b:dc:db:e5:0e:3f:c2:32:8b:a8:74:
                    e4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:46:FA:62:BD:23:24:C9:07:3D:A2:15:91:94:D0:C6:43:33:92:9B
            X509v3 Authority Key Identifier:
                keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:bf:95:86:db:d1:6f:8f:50:83:3c:9d:ec:64:03:65:c3:21:
         34:cf:5b:fa:0a:67:1c:cb:84:68:b0:17:26:f0:ff:ee:a8:70:
         fb:b7:0d:12:be:3f:0e:ff:93:1c:57:13:4a:2e:e6:a0:a7:19:
         d4:e0:9e:b9:6f:9f:e6:63:9e:e4:15:cc:83:fc:1a:16:4f:3a:
         37:07:29:02:fc:18:86:3d:99:a9:41:11:77:03:24:93:38:19:
         65:fd:73:bb:ba:5f:94:a1:7f:e4:f4:99:a2:72:05:78:5f:b3:
         04:84:c2:3f:0d:2a:d5:67:19:14:7f:30:96:5a:02:eb:60:b2:
         95:d4:eb:71:29:60:3f:96:0e:23:28:16:fa:49:fd:5c:a4:9e:
         63:29:35:b9:ea:dc:e2:d1:96:b9:bf:b9:f3:5e:ed:cd:1e:01:
         22:4e:0c:f1:a3:0a:f9:62:b5:86:1a:9a:fe:10:b5:92:13:a9:
         bc:d1:b0:21:24:2c:7b:04:86:b9:60:7b:72:6f:03:4e:ed:82:
         a3:1a:32:5d:13:e4:87:88:69:5c:36:d3:f4:ff:b4:6f:af:a4:
         42:6b:8e:cb:c0:6c:5a:a0:eb:f8:b9:62:91:f8:80:c2:4f:0b:
         1b:ba:d8:a0:6d:00:fb:bf:86:73:43:cc:f2:c9:2c:49:32:84:
         c8:bd:11:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:18:39 2026 by rpki-client