Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft
File:                     0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft (raw, json)
Hash identifier:          Z8xwU0x1SwSzCengSJx6QO1Z0uSZxENtG3BMzCPGWxg=
Subject key identifier:   2C:8E:92:B2:DF:A1:58:F6:B6:6E:CD:AC:8F:3C:AC:AD:A1:C0:8A:C2
Authority key identifier: D0:42:5D:25:4D:FF:F3:E1:2A:96:72:93:08:43:FC:0E:9A:BC:90:62
Certificate issuer:       /CN=d0425d254dfff3e12a9672930843fc0e9abc9062
Certificate serial:       019E1DC6EFB5BACEAD7E506FAE51D45C973F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft
Manifest number:          10
Signing time:             Tue 12 May 2026 20:00:37 +0000
Manifest this update:     Tue 12 May 2026 20:00:37 +0000
Manifest next update:     Wed 13 May 2026 20:00:37 +0000
Files and hashes:         1: 0EJdJU3_8-EqlnKTCEP8Dpq8kGI.crl (hash: DHP43WjfbZnTuFP5AB6Fa/s+zExDE4oUR1AgflXh76w=)
                          2: IaPceu7VrN0Ci4QLf1Y22DXK38c.roa (hash: DDTyYVit6V7bbPxJ+s9WJ7GGlOrY5GhIJkW0KajJFr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c6:ef:b5:ba:ce:ad:7e:50:6f:ae:51:d4:5c:97:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0425d254dfff3e12a9672930843fc0e9abc9062
        Validity
            Not Before: May 12 20:00:37 2026 GMT
            Not After : May 13 20:00:37 2026 GMT
        Subject: CN=2c8e92b2dfa158f6b66ecdac8f3cacada1c08ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3b:d6:26:01:72:b8:3f:98:b7:0d:2d:67:3f:
                    d5:82:7e:51:49:ca:09:97:cf:d3:8e:7f:12:fe:3b:
                    2b:96:5c:75:63:30:0f:13:4e:53:5b:98:24:12:be:
                    c4:9d:3d:f8:fb:5b:17:fe:1e:e6:33:d4:10:b2:0e:
                    0a:d2:92:ea:29:91:5c:5c:fe:8f:a1:21:d1:61:03:
                    99:50:24:23:1a:01:0d:48:ec:4e:4f:d2:54:8f:05:
                    a2:19:c7:67:5a:f1:e8:e3:2e:bb:65:0a:3f:59:a1:
                    31:b1:1e:12:8f:29:e7:89:26:82:33:d6:d7:3b:fe:
                    ea:26:f2:56:25:67:75:9e:bb:c6:eb:2d:56:5c:6e:
                    03:2d:e5:c3:1c:3f:ad:f8:c2:20:98:fc:7c:68:e2:
                    91:81:a1:63:9f:42:ee:79:06:9a:16:93:88:d9:60:
                    2a:6b:93:ee:f3:de:ad:58:68:55:3a:57:d8:9f:1f:
                    db:f7:ce:4d:5c:e5:54:04:52:f5:5b:90:e0:cc:ed:
                    4b:5f:0a:f3:5b:ff:d5:60:9b:4d:a2:a6:4a:ad:a8:
                    5c:32:0f:36:2b:84:a5:ba:48:34:c3:f3:87:13:82:
                    a6:6a:3c:54:0d:69:0d:20:e5:1f:03:7b:27:78:34:
                    45:0d:0b:50:2d:93:8f:7d:18:fe:a6:29:27:5c:17:
                    1f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8E:92:B2:DF:A1:58:F6:B6:6E:CD:AC:8F:3C:AC:AD:A1:C0:8A:C2
            X509v3 Authority Key Identifier:
                keyid:D0:42:5D:25:4D:FF:F3:E1:2A:96:72:93:08:43:FC:0E:9A:BC:90:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:74:03:26:8c:d4:25:16:cd:05:36:6e:25:f6:ea:47:61:7e:
         68:40:29:f9:b3:f8:a8:cc:bf:9e:08:ff:fd:c6:bd:70:72:22:
         da:f6:ac:85:91:05:82:ed:78:1f:e7:9c:bb:bc:fe:15:3f:4b:
         30:06:dd:23:7e:25:e5:38:e4:53:97:4a:1c:fa:5f:9f:91:be:
         a1:47:48:61:ae:69:f9:d8:eb:ac:25:41:3d:d9:f8:61:48:ae:
         90:44:13:00:5a:8f:d9:23:01:f1:47:0e:93:06:e2:e7:19:44:
         fd:9b:b2:36:47:b1:5b:85:74:30:09:36:24:95:3e:6e:71:7d:
         4a:ce:99:d1:f0:bb:84:c7:f9:25:c5:2b:28:64:eb:11:a3:3b:
         dd:86:cf:1b:4a:99:82:65:55:36:27:a0:0c:f1:9e:ac:93:a9:
         d0:b0:a3:be:f9:1c:c5:fa:01:d6:ad:54:5d:4f:e3:2f:22:b4:
         54:bb:60:15:bd:e4:9d:ed:d0:d6:61:6b:6f:c2:52:cf:aa:a8:
         23:74:5b:8c:45:3c:7b:ad:ea:29:ba:31:fc:74:44:9c:1d:e2:
         2d:bf:4d:d1:8f:a9:1e:8a:51:ef:ad:c3:9c:45:8b:3c:d5:ff:
         3b:e0:85:48:6e:34:f5:af:c2:f0:c4:da:3e:f7:9a:88:51:ef:
         0f:c4:15:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dxu+1us6tflBvrlHUXJc/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNDI1ZDI1NGRmZmYzZTEyYTk2NzI5MzA4NDNmYzBlOWFi
YzkwNjIwHhcNMjYwNTEyMjAwMDM3WhcNMjYwNTEzMjAwMDM3WjAzMTEwLwYDVQQD
EygyYzhlOTJiMmRmYTE1OGY2YjY2ZWNkYWM4ZjNjYWNhZGExYzA4YWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDvWJgFyuD+Ytw0tZz/Vgn5RScoJ
l8/Tjn8S/jsrllx1YzAPE05TW5gkEr7EnT34+1sX/h7mM9QQsg4K0pLqKZFcXP6P
oSHRYQOZUCQjGgENSOxOT9JUjwWiGcdnWvHo4y67ZQo/WaExsR4SjynniSaCM9bX
O/7qJvJWJWd1nrvG6y1WXG4DLeXDHD+t+MIgmPx8aOKRgaFjn0LueQaaFpOI2WAq
a5Pu896tWGhVOlfYnx/b985NXOVUBFL1W5DgzO1LXwrzW//VYJtNoqZKrahcMg82
K4Slukg0w/OHE4KmajxUDWkNIOUfA3sneDRFDQtQLZOPfRj+piknXBcfsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyOkrLfoVj2tm7NrI88rK2hwIrCMB8GA1UdIwQY
MBaAFNBCXSVN//PhKpZykwhD/A6avJBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEVKZEpVM184LUVxbG5LVENFUDhEcHE4a0dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8zMTUwZWUtNzBhMy00NTY5LWE3MzIt
NTNiZTczNThlMjUyLzEvMEVKZEpVM184LUVxbG5LVENFUDhEcHE4a0dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8zMTUwZWUtNzBhMy00NTY5LWE3MzItNTNiZTczNThlMjUy
LzEvMEVKZEpVM184LUVxbG5LVENFUDhEcHE4a0dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXQDJozU
JRbNBTZuJfbqR2F+aEAp+bP4qMy/ngj//ca9cHIi2vashZEFgu14H+ecu7z+FT9L
MAbdI34l5TjkU5dKHPpfn5G+oUdIYa5p+djrrCVBPdn4YUiukEQTAFqP2SMB8UcO
kwbi5xlE/ZuyNkexW4V0MAk2JJU+bnF9Ss6Z0fC7hMf5JcUrKGTrEaM73YbPG0qZ
gmVVNiegDPGerJOp0LCjvvkcxfoB1q1UXU/jLyK0VLtgFb3kne3Q1mFrb8JSz6qo
I3RbjEU8e63qKbox/HREnB3iLb9N0Y+pHopR763DnEWLPNX/O+CFSG409a/C8MTa
PveaiFHvD8QVcw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:09:10 2026 by rpki-client