Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
File:                     0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft (raw, json)
Hash identifier:          qxxMRzwc1tlA81EXWZE8PbgplqrdhvtA8UzUd3LA3r8=
Subject key identifier:   DE:5E:FC:AB:B2:52:7C:72:95:B5:A7:F5:11:B7:A1:48:4B:BF:54:6D
Authority key identifier: D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
Certificate issuer:       /CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Certificate serial:       019E1D59B62B9F79ACCDAA60B52A17D2109F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
Manifest number:          1018
Signing time:             Tue 12 May 2026 18:01:19 +0000
Manifest this update:     Tue 12 May 2026 18:01:19 +0000
Manifest next update:     Wed 13 May 2026 18:01:19 +0000
Files and hashes:         1: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl (hash: Y4gogTQ/aCIDKFVc4pW9vwc20svR1Aw4UkO1eKGJ9VY=)
                          2: jZT-rA7xXgV9ISXMAJBVRKLq758.asa (hash: 1yFM7L3x3s5BQ7YW45Q8MwC00LEtrcdpmLfR0GtoPSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:b6:2b:9f:79:ac:cd:aa:60:b5:2a:17:d2:10:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
        Validity
            Not Before: May 12 18:01:19 2026 GMT
            Not After : May 13 18:01:19 2026 GMT
        Subject: CN=de5efcabb2527c7295b5a7f511b7a1484bbf546d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:16:16:91:b8:f6:5f:6e:97:80:31:77:d2:6c:
                    c7:64:b1:c8:38:e6:ca:e2:69:53:c4:53:d9:3d:4f:
                    f1:eb:25:ee:be:21:7c:34:48:37:ae:46:31:56:7f:
                    08:e7:68:a5:ff:b8:2a:f4:80:10:63:0f:dd:f4:75:
                    9c:f4:0c:d0:fb:51:49:e8:39:6f:95:00:58:5d:97:
                    c0:a6:e9:a2:3f:f3:a8:54:b7:54:54:4b:99:00:29:
                    18:30:fd:1a:42:79:7d:44:0a:f5:74:28:aa:60:d4:
                    28:ce:83:c8:40:c1:04:ac:e8:9e:93:69:d6:e9:db:
                    d4:a8:3e:36:c2:22:51:6d:eb:28:0b:d5:25:ae:ee:
                    13:9d:16:70:d8:f3:3b:2a:47:9b:58:41:e9:5c:59:
                    be:03:e5:4c:f6:c8:5e:94:3d:69:e9:fa:47:b4:04:
                    1e:07:b5:b8:72:ca:9f:cb:21:59:2c:9b:f4:cb:1a:
                    83:27:cd:ae:9d:e9:67:f2:99:0c:59:7f:a1:67:f7:
                    a9:f8:86:15:9c:6f:28:6d:0f:c4:63:21:e3:6b:bf:
                    88:23:e0:ab:e2:5e:3a:8c:20:c5:cd:28:ec:75:c8:
                    cd:ca:ea:50:0b:1c:d1:00:e5:c2:35:4a:b6:fd:1e:
                    cf:d9:80:20:db:b2:8a:27:d8:07:9b:f6:fd:b5:bc:
                    96:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5E:FC:AB:B2:52:7C:72:95:B5:A7:F5:11:B7:A1:48:4B:BF:54:6D
            X509v3 Authority Key Identifier:
                keyid:D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:81:4d:4e:d8:40:c6:e4:82:15:92:e3:02:39:61:6f:c9:74:
         0a:f3:ea:7a:a2:fb:05:ec:43:32:01:d2:af:c3:62:ba:2f:40:
         10:b2:59:e5:37:ea:6f:46:78:7f:26:7f:43:2d:6f:06:98:d2:
         ec:d1:7d:87:16:56:a6:43:42:b4:9f:8d:d8:f8:58:75:57:67:
         23:76:6e:6d:16:e9:3e:93:ea:37:89:cb:a2:37:64:48:a8:a7:
         60:ee:c7:51:d5:bd:24:6c:7c:7e:94:20:fd:00:66:9a:30:b5:
         b5:43:4d:f3:35:48:d6:7c:81:fa:2f:5f:30:3c:24:8c:ac:58:
         a7:b2:7f:3f:8e:6c:18:e6:34:ce:19:7b:30:c3:c1:8f:98:06:
         d1:4b:fb:1d:b6:1f:33:2a:ea:6c:59:97:00:c0:91:80:2c:29:
         d7:97:64:d6:cf:44:46:00:a1:b3:c1:77:cf:28:19:7b:c0:9f:
         41:c8:51:c9:7e:d6:5e:3c:aa:57:3d:5c:73:17:7a:2b:fc:5e:
         d7:18:21:ad:a2:cc:27:1b:c1:d9:25:a9:d1:f7:39:ef:10:94:
         a5:72:22:bf:ea:13:c2:b6:43:73:8d:c3:da:1f:67:a7:e8:92:
         b3:6a:67:ab:75:3c:0b:64:14:0f:1b:74:52:c3:fe:a6:2e:d2:
         ba:bd:4d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:36 2026 by rpki-client