Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
File:                     0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json)
Hash identifier:          G3VDz/81TK55/yScyDuyDY/c0Ka4oQHjpLGdqN6rBxA=
Subject key identifier:   C7:96:AA:6F:42:B4:CD:23:A4:2D:9E:CA:47:58:97:58:39:DC:7B:E8
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Certificate issuer:       /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial:       019E1C0FAD3AE478CAB273CF9705D5605417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
Manifest number:          0E85
Signing time:             Tue 12 May 2026 12:00:49 +0000
Manifest this update:     Tue 12 May 2026 12:00:49 +0000
Manifest next update:     Wed 13 May 2026 12:00:49 +0000
Files and hashes:         1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: RZh+37qrKFX/bkORksu8ET4eNGPezI1mVtsUrqUV8YM=)
                          2: CbSAZ2938GQUhDueZhU_EovPrRs.roa (hash: 6M1E+PLNKOTQuQ1MVWROY7w7nRYiQzLtRbBBTuCKxio=)
                          3: mk-o5pzcFZ829W_PREQ8FPPRzlM.roa (hash: /akxso2djAilBz3nuuXvJ6Kc63SQJSYVStzj36gpVWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:0f:ad:3a:e4:78:ca:b2:73:cf:97:05:d5:60:54:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
        Validity
            Not Before: May 12 12:00:49 2026 GMT
            Not After : May 13 12:00:49 2026 GMT
        Subject: CN=c796aa6f42b4cd23a42d9eca4758975839dc7be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:bd:db:08:19:66:2a:79:89:08:a8:a6:de:
                    86:bf:37:4f:e7:90:c0:20:f3:ee:36:d9:88:57:8b:
                    ed:e8:9b:87:4e:e3:0a:9b:90:8c:67:fc:8a:db:ac:
                    bb:63:40:db:6c:65:cf:f3:93:f8:b8:02:de:50:c2:
                    99:c3:12:1a:d8:bf:5d:45:b1:49:72:a6:9b:61:6b:
                    d7:2d:12:d3:10:8e:b2:48:16:ac:c5:18:73:69:ce:
                    06:a8:dd:25:9f:96:38:b0:21:5e:b0:0c:0c:8f:ef:
                    e3:81:29:6b:13:c7:a9:39:f1:a9:55:c0:77:60:0f:
                    2c:6b:12:18:e3:c1:40:9b:c4:ba:66:0c:16:c7:02:
                    63:41:75:46:42:ef:e6:a1:4c:e0:e7:b0:57:00:ba:
                    87:cb:3c:53:3e:f1:7f:02:1f:7b:39:67:eb:05:a2:
                    c3:a1:a6:5d:fa:74:e3:f8:42:f0:d9:03:66:02:68:
                    06:a2:4d:57:4a:59:57:7b:b7:d6:cd:93:27:13:4c:
                    41:4d:5e:cb:12:6d:6c:0f:65:c5:4b:a6:17:5d:10:
                    ea:0d:e6:6c:ec:c1:7d:0c:04:fe:47:41:b9:96:af:
                    f9:20:c4:0b:8a:de:c8:3e:3a:e6:1c:52:72:44:b6:
                    f5:83:27:4e:a1:96:91:91:69:b6:d6:d7:5e:0e:9b:
                    db:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:96:AA:6F:42:B4:CD:23:A4:2D:9E:CA:47:58:97:58:39:DC:7B:E8
            X509v3 Authority Key Identifier:
                keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:56:66:8f:ae:9c:58:43:a4:f7:94:73:69:85:b4:1c:04:91:
         05:a1:4c:48:13:ec:f3:3f:5d:53:a6:6b:d5:9c:b5:bd:4a:79:
         45:f0:e0:ff:ee:a7:e6:79:ce:28:4f:a9:68:ae:21:21:90:61:
         71:bd:a5:1d:cc:17:d9:01:7d:12:0b:83:af:18:4d:83:b1:b1:
         14:cd:67:86:59:a0:ff:26:93:15:8f:12:6e:e8:20:27:d3:db:
         65:ae:2c:00:17:98:9b:ce:fe:38:c5:94:39:88:b9:e9:f0:b3:
         b9:12:bc:df:f9:72:e4:23:e4:48:a8:f4:b8:26:12:40:62:ab:
         50:e2:07:76:ed:0f:8f:9b:2c:e6:49:ef:17:4f:91:24:bb:c2:
         a6:c2:d6:18:a5:bd:8c:20:9b:49:a5:e7:15:74:40:ce:06:6d:
         49:a9:b7:33:15:2b:8e:1d:30:00:8a:ac:41:ff:6b:dc:41:b0:
         37:55:77:d5:45:c0:fc:a8:3b:99:be:8f:7c:71:5d:cc:a7:9c:
         83:20:96:7a:ff:45:37:3c:94:c4:51:db:2a:9c:16:c8:f0:33:
         4c:ad:28:8d:7b:48:5c:d6:5d:57:7e:a1:81:36:40:d7:47:4d:
         5d:c0:14:cd:f7:1f:4a:42:d0:34:c3:ba:bc:5c:e1:40:50:a9:
         2a:d5:04:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:28 2026 by rpki-client