Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
File:                     Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft (raw, json)
Hash identifier:          7u5hoymPaHeBrd4C5rtTzZHhd9yHG4LJMk/oV7WpNSc=
Subject key identifier:   E2:C0:42:8F:EC:EE:79:08:34:6F:89:6F:30:FE:A9:02:72:3D:9A:5D
Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
Certificate issuer:       /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Certificate serial:       019E20C812E11A54E90D03CF03A6219BA165
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
Manifest number:          1905
Signing time:             Wed 13 May 2026 10:00:43 +0000
Manifest this update:     Wed 13 May 2026 10:00:43 +0000
Manifest next update:     Thu 14 May 2026 10:00:43 +0000
Files and hashes:         1: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl (hash: uTnaOuiiIgTrIFlX0LYZc6lmEWHyNRP5Ro/X2hCVS8M=)
                          2: pUIM7v10t5OGFrSPmfiKdj44TIc.roa (hash: Oo445ykGaPumhWQXMGT+U7KwU/ygHDEsLqsafB1c140=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:12:e1:1a:54:e9:0d:03:cf:03:a6:21:9b:a1:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
        Validity
            Not Before: May 13 10:00:43 2026 GMT
            Not After : May 14 10:00:43 2026 GMT
        Subject: CN=e2c0428fecee7908346f896f30fea902723d9a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:8f:3d:57:07:a7:a0:3f:fd:ea:26:5e:16:
                    52:42:0c:f0:eb:79:e7:3d:31:f7:bb:31:f1:55:7a:
                    8b:8b:24:52:85:f7:bd:ae:5f:44:55:38:95:04:e0:
                    da:3d:e5:7a:ba:d9:d4:8f:d4:4a:ce:a0:5f:c9:1b:
                    00:8d:8f:26:a3:a4:23:0a:7a:fa:13:15:e1:8f:8d:
                    ca:1e:f7:31:cb:23:e6:f9:0d:f7:75:3b:65:60:63:
                    fa:2e:ff:a8:ad:64:2f:39:de:6e:36:92:9f:63:51:
                    55:cb:49:59:18:6b:1d:a9:31:fd:73:1b:0e:4e:20:
                    77:e5:00:ff:fb:c2:2a:0b:52:b5:2b:cf:52:03:d3:
                    97:d9:74:da:6e:53:1b:ee:c1:4f:f0:e8:11:4d:ec:
                    6b:94:ff:78:aa:69:c7:b5:3d:1b:bf:2b:cb:dc:3b:
                    bb:38:5b:25:81:3b:5f:e6:94:a3:22:25:85:d8:53:
                    30:56:51:18:b5:29:5b:10:79:bd:8d:21:ad:f1:1f:
                    9e:44:a0:50:c2:8b:e2:c5:5a:90:fa:48:5c:9c:af:
                    ec:25:b8:d8:04:97:43:25:05:07:8c:ef:04:00:07:
                    4d:35:1c:df:62:8a:4f:66:6f:49:43:80:8f:c4:5b:
                    35:b1:70:4a:26:5f:0d:b7:5f:2e:0c:a8:42:98:0e:
                    85:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C0:42:8F:EC:EE:79:08:34:6F:89:6F:30:FE:A9:02:72:3D:9A:5D
            X509v3 Authority Key Identifier:
                keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d1:69:07:7c:b0:9a:cf:8f:f8:2d:f4:ea:cc:7f:f6:aa:21:
         42:3c:17:0d:f8:4a:b3:be:0c:0d:ba:de:0b:e2:87:7e:d9:d7:
         28:5b:8f:b7:19:02:d1:cb:47:94:86:26:1f:7e:d2:78:b5:90:
         42:84:95:5f:5f:d1:c9:53:54:4b:fa:55:ba:8a:fc:96:44:07:
         d7:c5:19:78:95:ed:d9:53:80:c8:86:df:87:e0:81:0b:ce:8f:
         f2:7a:f4:29:59:37:ae:b1:b6:a2:d3:04:60:fa:93:0a:ff:85:
         db:1d:0d:af:42:5c:65:37:d5:1f:e2:e9:35:6c:7a:ad:94:3a:
         b4:ea:78:51:ac:9b:80:cc:40:27:7f:10:f3:fc:d6:45:e4:6c:
         17:a5:84:62:e5:16:25:33:be:89:f6:f0:b1:64:83:4f:8e:50:
         e8:f1:fc:58:de:c3:fc:ed:0d:9e:f4:c6:97:1a:f1:6b:f2:3b:
         c4:f7:38:0f:7f:e9:7e:68:aa:0e:60:cc:cb:b3:4d:fa:9e:01:
         0c:85:58:cc:43:73:63:36:2c:a5:9f:89:28:4d:71:97:28:bc:
         53:c6:74:b4:24:7f:dd:a5:37:5c:c8:88:34:03:37:ba:68:b6:
         ba:59:5d:df:a1:7d:90:db:09:35:d4:0a:43:81:60:4c:10:a0:
         80:fa:08:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:40:09 2026 by rpki-client