Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File:                     0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier:          tH0v2MSiY+uk14vL5rU7aDMr0yKT6KmgFRG82Fy+sw8=
Subject key identifier:   16:0A:72:E3:24:FF:32:F5:5D:5B:5C:55:E3:90:FE:94:CA:B8:78:54
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer:       /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial:       019E1D9093A944EB7A9D3B6CD278E44C9CD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 19:01:14 +0000
Manifest this update:     Tue 12 May 2026 19:01:14 +0000
Manifest next update:     Wed 13 May 2026 19:01:14 +0000
Files and hashes:         1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: +pyyA+n9ZOB4kdDHv5N4kUvZRsVYAJt6HUAQafD+ZpM=)
                          2: 0g907WBXD4qZBS5Lv--lVG4AGmY.roa (hash: ADx0uWHqRsIMIEM4zrRsIaFkNMUykkO7aZ3mKfDHgOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:93:a9:44:eb:7a:9d:3b:6c:d2:78:e4:4c:9c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
        Validity
            Not Before: May 12 19:01:14 2026 GMT
            Not After : May 13 19:01:14 2026 GMT
        Subject: CN=160a72e324ff32f55d5b5c55e390fe94cab87854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b6:15:94:08:39:fe:f6:08:38:dc:e5:bd:69:
                    d6:3f:45:3c:34:85:1a:58:71:44:22:fd:05:d2:53:
                    1c:a6:6e:ec:12:ec:cf:73:59:06:f0:a2:ad:42:08:
                    af:5a:f2:47:88:6e:8a:0f:60:78:28:17:38:9b:90:
                    38:09:c3:1a:da:3a:a5:fb:d1:a4:be:97:7c:b5:1d:
                    29:d7:c7:29:d5:e1:25:92:be:18:0e:c4:00:f1:9d:
                    cf:a6:8e:62:02:43:1a:96:b5:c6:2c:85:78:c7:38:
                    54:2a:cd:77:f8:02:61:f4:ee:6a:f6:2e:b5:e8:dd:
                    9b:7e:75:ba:e9:9b:3b:f7:46:f6:aa:85:71:ef:4d:
                    a3:40:79:7a:83:fd:08:26:01:76:e2:77:e2:3f:93:
                    21:2a:4e:cc:13:55:d5:bb:43:64:bc:83:ff:69:83:
                    26:9f:8f:95:b4:75:ab:8e:16:93:78:e4:c1:a6:54:
                    2b:96:4d:4a:98:d8:7e:63:f8:f5:34:3e:7c:a1:03:
                    9d:bf:ce:c4:cc:3b:68:c8:40:fa:6f:85:ba:0c:de:
                    b6:44:ed:2d:34:30:22:80:08:3d:1e:61:52:66:42:
                    6f:8b:e8:fe:80:a1:d5:e7:a6:5c:46:c5:04:91:e2:
                    6c:01:eb:05:60:10:7b:8e:51:60:47:d0:b6:4b:d0:
                    22:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0A:72:E3:24:FF:32:F5:5D:5B:5C:55:E3:90:FE:94:CA:B8:78:54
            X509v3 Authority Key Identifier:
                keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:15:7f:44:7c:f1:e8:db:e4:3f:b4:8b:80:c6:5d:b5:e8:ba:
         c9:5c:90:5b:2b:33:a7:4a:e4:a4:d6:73:92:5e:5f:5d:52:46:
         4b:70:33:be:20:17:ef:cd:c6:36:12:72:ac:46:b4:37:a3:50:
         53:88:83:28:df:4f:e0:29:2b:6f:bb:c2:6c:9a:0a:ed:03:1b:
         ac:d8:58:6d:0a:11:2f:63:e2:34:f6:4d:69:d1:36:68:f9:4b:
         67:37:04:54:d9:ce:73:29:8e:5d:88:de:5b:b0:c4:4f:31:45:
         31:4d:db:7c:a9:d7:5a:94:63:8c:81:4c:d5:35:f5:87:54:d0:
         c3:be:78:4d:f2:68:a5:d4:16:47:49:4b:64:98:db:ee:d8:8a:
         80:6a:d2:41:33:71:d8:35:67:9d:a7:e9:44:ed:83:2d:8b:49:
         dc:ed:c4:42:1e:18:bc:4a:ef:c8:fc:48:a9:5b:66:3b:ea:12:
         00:0b:a3:c5:b7:3b:c1:71:c6:1c:bb:9e:6a:a3:f8:58:2a:df:
         05:88:d7:77:75:94:09:b2:a0:55:2a:27:0b:a3:a7:81:9a:33:
         8d:82:25:89:33:3d:e4:2e:3e:23:f0:be:ef:c6:13:57:ed:59:
         28:7e:eb:d8:1b:50:48:65:e3:14:e2:14:17:00:02:62:c0:f9:
         6b:15:7a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:33 2026 by rpki-client