Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
File:                     0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft (raw, json)
Hash identifier:          ByfTmQknhkspAOVvMJAeudQJBSKzXFQ/UPAVlcB0NGU=
Subject key identifier:   DC:17:4A:81:9C:F9:CF:70:8B:C7:DE:55:B5:DD:07:DB:1B:46:5A:7A
Authority key identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
Certificate issuer:       /CN=d03046d16cfc391b028b88743773ce005cf97b1d
Certificate serial:       019E1EDA631F7F1151361BFBDA3F60D1AB39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
Manifest number:          1905
Signing time:             Wed 13 May 2026 01:01:29 +0000
Manifest this update:     Wed 13 May 2026 01:01:29 +0000
Manifest next update:     Thu 14 May 2026 01:01:29 +0000
Files and hashes:         1: 0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl (hash: mW75JQEprcbrzPrxitmq0r+GSnZKrYCLWH3vsFT5fog=)
                          2: 6sIpurMyf7U7cVjfDtGf65yWDwA.roa (hash: cZnmgrrB6eUg5rHF2CdbgLHSyI5RnOe61koYU+5dDnA=)
                          3: NZSg7hN5dj36ijrS0iZ916AKsoM.roa (hash: VS2r3z5DpXErRLlghndtWldrsOM22Uv0cqCOqDvPp5M=)
                          4: _EXzGZ6mIohQTkOQklm2HctGpf0.roa (hash: d5WVsZmAqKJyYsnjGKZS29R+h6TCBV39mM8GYttnuxM=)
                          5: aTt1lDOQ__4_BOzrJWRmWq2_g_I.roa (hash: v57HfwpPj2JAqIcZD1AamnQQx8/Wn9ebUoCosyKqGs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:63:1f:7f:11:51:36:1b:fb:da:3f:60:d1:ab:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03046d16cfc391b028b88743773ce005cf97b1d
        Validity
            Not Before: May 13 01:01:29 2026 GMT
            Not After : May 14 01:01:29 2026 GMT
        Subject: CN=dc174a819cf9cf708bc7de55b5dd07db1b465a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1a:57:89:c6:0b:3d:fa:d1:34:3a:61:10:8a:
                    93:7f:92:c9:2b:59:04:7d:06:12:6f:ec:ae:fb:bd:
                    dd:47:67:11:9b:be:bc:1e:42:56:e3:c4:c6:1a:2e:
                    66:ce:68:13:9a:49:cd:ea:41:49:f0:f0:13:3a:d7:
                    5c:85:0b:b3:3e:4c:1f:f1:71:d2:42:ef:fe:01:f3:
                    dc:eb:57:c0:40:43:da:a7:45:af:0e:d4:92:20:01:
                    36:9a:a1:3e:de:ca:a4:e8:0d:f9:60:b3:bb:ba:a9:
                    20:14:c5:66:39:3b:33:a7:16:59:6e:d0:0e:78:8b:
                    28:99:f7:d5:99:1d:74:ad:6d:f2:4f:9a:2f:6e:63:
                    88:7e:80:ac:5a:66:4e:e2:a4:bd:cc:00:3a:c9:90:
                    18:fa:8f:b1:03:5b:94:2e:31:9f:fe:04:89:7c:26:
                    85:01:73:c8:20:3e:fb:a5:f8:b6:14:f8:f1:41:b1:
                    c9:48:85:ed:7b:d1:ab:13:b3:f2:3e:e2:67:85:a2:
                    b3:c1:30:04:fb:ac:e0:43:43:13:5a:36:f6:72:c0:
                    91:52:9e:21:28:cd:29:e2:e2:f8:f6:10:28:7c:92:
                    d4:a5:12:b8:f6:e8:f6:98:7c:af:09:e3:e6:e4:81:
                    9e:08:b2:7e:88:4f:65:96:0f:b3:18:8b:ee:b2:67:
                    d5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:17:4A:81:9C:F9:CF:70:8B:C7:DE:55:B5:DD:07:DB:1B:46:5A:7A
            X509v3 Authority Key Identifier:
                keyid:D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:2a:0f:95:5d:04:dc:42:b6:54:98:42:4b:f5:d9:a8:c8:4d:
         18:b3:06:c3:ee:4a:29:6a:9f:41:fd:e0:d2:b7:c3:1e:99:14:
         9c:54:66:0f:2b:a6:ec:b2:d3:73:10:b5:dd:65:90:f5:e3:90:
         19:b6:c8:3c:69:6e:d0:04:5d:ad:c0:0f:03:fd:46:54:e1:7c:
         36:1f:1c:d3:85:9b:c4:6d:cb:97:de:df:16:07:50:fd:77:57:
         91:7e:e0:0f:e6:fa:ee:8d:cc:d1:3e:ec:7c:e8:5b:79:0d:c8:
         b7:ac:65:0b:49:dd:b4:b9:82:37:d9:0b:89:e5:90:78:1d:42:
         ad:f1:f8:1b:03:3c:66:3d:2e:eb:15:92:55:2e:85:53:91:1e:
         0b:0c:7d:c8:40:34:da:02:c3:38:16:70:b4:2f:2f:dd:6b:d6:
         9d:dd:4d:72:e1:72:ab:37:e6:04:26:e9:9a:96:ae:95:14:cd:
         bc:66:30:3d:e1:8a:05:4d:ff:97:8b:23:d9:aa:fc:57:8b:b4:
         5a:29:b2:75:31:4f:cb:19:d5:d8:92:45:c5:34:96:17:c6:af:
         26:cf:b7:a7:e4:c8:99:4d:74:6d:bc:6e:94:25:93:a6:9e:a3:
         ec:06:b2:ce:43:d6:39:0a:15:fd:3b:d2:9d:a5:36:79:47:2c:
         33:ab:21:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:08:57 2026 by rpki-client