Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
File:                     DmmmfUshWj8x_EYvDqU074P471c.mft (raw, json)
Hash identifier:          kTNJzCYrwbT5anr+LwRJ7x21LlJrA6TAETPvJlcuk+Q=
Subject key identifier:   D0:CA:B4:07:77:BF:8D:24:86:42:4F:31:82:F8:00:42:BE:28:0D:23
Authority key identifier: 0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57
Certificate issuer:       /CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57
Certificate serial:       019E1DFE26E85B794888E13D76C3A2C0A2EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
Manifest number:          0B27
Signing time:             Tue 12 May 2026 21:00:55 +0000
Manifest this update:     Tue 12 May 2026 21:00:55 +0000
Manifest next update:     Wed 13 May 2026 21:00:55 +0000
Files and hashes:         1: 8svsIgn5tq4TwLZ8CqIwk9q5WfI.roa (hash: R7ukUl73bf88vyaN/XaccoEI8iCFq1NpX9UxV6nC/GE=)
                          2: DmmmfUshWj8x_EYvDqU074P471c.crl (hash: oQuWr1mxtTiheT69V5w/tNYQuiTlE57QMPxh9AedTB4=)
                          3: eJSu2mwqjv-QqXPa-b6GRUSD3rQ.roa (hash: 8Xp/LdoxCaTuezyx5QRMEAVFrFHA3obUardNQYSwraI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:26:e8:5b:79:48:88:e1:3d:76:c3:a2:c0:a2:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57
        Validity
            Not Before: May 12 21:00:55 2026 GMT
            Not After : May 13 21:00:55 2026 GMT
        Subject: CN=d0cab40777bf8d2486424f3182f80042be280d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:7c:b9:da:52:74:52:97:b5:68:0d:e9:95:
                    9d:24:87:69:be:6c:83:1e:c4:59:a8:32:0c:33:0c:
                    ce:1a:62:02:e7:68:b1:e3:97:bd:09:bf:48:22:1c:
                    f9:ba:ac:15:6a:f2:bc:2f:e0:59:fc:7d:1a:62:4d:
                    09:d8:e6:77:26:75:64:a9:60:37:0b:b7:01:d9:0a:
                    32:c5:c5:d2:13:64:61:91:25:08:ca:14:ba:9f:39:
                    be:f4:ff:53:7f:ed:df:47:7a:a5:96:2b:6c:fc:42:
                    3d:89:bd:bf:57:97:6a:01:75:69:db:89:c1:76:fb:
                    3a:e9:19:9a:f8:1b:db:c1:78:70:41:8e:ef:d2:55:
                    f3:a3:71:8b:1f:69:7f:98:bf:fc:88:bd:d1:be:42:
                    70:2d:fe:56:8a:c6:87:e7:c7:5f:22:26:6f:b8:76:
                    6c:30:af:5c:14:46:ea:88:a3:16:10:a3:cb:17:a3:
                    bc:72:1b:74:3d:10:91:ae:84:59:e4:87:4d:04:f5:
                    cf:40:fb:31:8d:55:08:c6:4f:37:a5:10:21:fa:23:
                    0a:97:bf:3c:d6:30:c9:69:f9:84:e5:ac:8e:7f:49:
                    76:3d:36:0f:dc:92:5c:71:8a:e7:d3:09:f1:3e:ad:
                    c4:b4:ca:03:b7:84:05:bb:19:98:03:75:e8:66:02:
                    30:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CA:B4:07:77:BF:8D:24:86:42:4F:31:82:F8:00:42:BE:28:0D:23
            X509v3 Authority Key Identifier:
                keyid:0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b6:3c:b0:60:17:78:9f:b9:4b:02:d7:39:d3:7e:bd:0d:0c:
         1f:68:bd:38:2f:4a:7f:ff:91:1c:b6:86:60:0e:70:a1:85:4f:
         64:e2:89:4a:3e:5e:cb:a1:53:99:45:c2:77:d4:46:64:5f:7c:
         e6:14:f9:1f:8d:a3:77:a3:22:03:7e:96:de:ae:ac:99:50:7c:
         43:66:ac:5c:ee:3c:ce:72:2c:8f:40:58:7d:64:35:74:70:1e:
         a8:a9:1f:1a:b6:ac:bf:c2:89:23:e9:bc:82:4b:f3:05:b8:2b:
         1d:d0:b8:be:df:c4:b9:97:b4:99:e3:3f:b4:d5:14:56:3d:2f:
         ef:ac:02:e8:bb:86:87:b8:ef:9f:40:9d:da:db:06:b2:11:5f:
         f2:25:81:98:9a:22:e8:d9:dc:9c:fd:97:1f:98:bf:e6:52:a1:
         2f:35:26:d4:05:5d:3c:3c:a8:f9:4b:6c:a3:d0:37:55:63:29:
         aa:3f:1e:65:48:56:79:4f:8a:b5:b2:36:8b:74:2f:31:5f:c4:
         e4:fd:9c:24:67:00:21:9f:d3:56:b0:b7:b4:43:24:59:a2:56:
         eb:06:00:de:28:9e:7d:a3:24:79:8f:dc:a7:e0:99:35:e4:3b:
         78:cd:db:e1:fc:fb:04:93:40:7c:6a:3d:da:fe:cd:85:67:dd:
         a5:77:6b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:14:33 2026 by rpki-client