Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
File:                     0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft (raw, json)
Hash identifier:          YpwxUjU1CsTToDV5OtSio7dS+Wpu21isXI0E2hhk8yA=
Subject key identifier:   30:DE:20:4B:C3:C2:46:8D:7D:3E:06:93:DC:B2:C8:9C:8D:7B:91:76
Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
Certificate issuer:       /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Certificate serial:       019E1C0FBCE17BE3AF5149CCC12DE7582671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 12:00:53 +0000
Manifest this update:     Tue 12 May 2026 12:00:53 +0000
Manifest next update:     Wed 13 May 2026 12:00:53 +0000
Files and hashes:         1: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl (hash: 6rcc+k2YQ19dDXAHD2WTuN5PDt+w5fZ60ZE9YIj9xHY=)
                          2: 18LvMJbaobz9RVoG3KwWtt6oPsk.roa (hash: U928xEWQEvSL1IP/0rVvcpbAEWqlTfBez50gOZPkoHY=)
                          3: 5jCnir6W6gAd6_EDtQEmsCT7w14.roa (hash: 0wvxGHojLuaQ4hENlIsY48YCfJ44p5EM0SkFd7dB+g4=)
                          4: bQqTZ3ArgViLCoqi3gs3VHHEcM8.roa (hash: aWk0i4GB/D7KkQJxNXNTSQ961hAd3k/+4U2XwwZMILk=)
                          5: vW2RW7QY1hflVRyn1_CDLNIOZtQ.roa (hash: M4ZBHT4dK/BF7Hs2UlU9Rb4uebu3FER628aOLG71DV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:0f:bc:e1:7b:e3:af:51:49:cc:c1:2d:e7:58:26:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
        Validity
            Not Before: May 12 12:00:53 2026 GMT
            Not After : May 13 12:00:53 2026 GMT
        Subject: CN=30de204bc3c2468d7d3e0693dcb2c89c8d7b9176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:1b:cf:80:b0:3b:5f:e2:18:0a:09:bb:7e:
                    00:4a:03:53:32:75:dc:ac:80:2b:01:b2:6f:c5:a5:
                    88:3d:2a:2e:7a:0e:ff:62:9c:e7:16:eb:d0:cb:8b:
                    30:b3:b2:2a:97:75:88:c7:0d:ea:2c:c8:52:3f:33:
                    fb:24:12:58:e7:d4:69:1a:bb:4a:b9:97:9f:6a:f9:
                    ad:7f:57:ab:6c:3f:c7:6e:c1:aa:8b:00:67:9d:70:
                    4b:a1:97:bb:81:c8:0a:cd:e1:3b:64:2f:31:db:49:
                    2f:da:ed:14:81:4d:2f:fa:3c:d9:88:e0:56:91:b4:
                    7b:35:ae:f6:1b:24:e8:99:42:50:af:47:f8:32:58:
                    68:24:2e:85:1f:58:0c:25:fb:58:be:6f:7e:a5:41:
                    cc:08:a5:0f:58:52:34:56:f6:b0:4c:61:69:67:c8:
                    d7:5f:2f:41:38:c7:64:2d:91:22:b0:10:a9:a8:2f:
                    e7:e0:18:a1:54:36:64:cf:79:f3:f4:fb:e5:48:85:
                    22:a8:26:5c:d0:76:71:24:39:37:c9:5d:a1:06:46:
                    29:a0:33:a6:5b:62:30:68:ce:f8:13:93:09:57:39:
                    11:6d:9f:d4:94:c2:3d:47:48:44:a0:41:4c:c2:e3:
                    8f:b6:31:c7:75:72:cf:65:34:66:85:23:c7:5f:cb:
                    26:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DE:20:4B:C3:C2:46:8D:7D:3E:06:93:DC:B2:C8:9C:8D:7B:91:76
            X509v3 Authority Key Identifier:
                keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:99:b4:57:92:0e:d2:91:88:fd:c5:12:4a:97:64:53:da:90:
         37:04:1a:4d:2e:88:a9:88:24:f6:b8:b0:5e:d8:5a:95:4b:13:
         d5:b3:f7:cf:71:63:21:7a:e4:c8:08:9d:2d:ae:23:b5:24:c6:
         4b:9d:80:82:c8:c2:b2:58:b0:3f:b2:be:a3:bb:d7:91:93:26:
         8d:af:9b:bc:1a:a6:88:58:80:25:1f:a8:ab:db:ef:32:57:19:
         17:64:f6:88:97:0f:d4:1c:08:0e:ab:03:5b:bb:20:6a:75:97:
         a9:95:54:5b:1a:c0:73:f0:1b:1c:39:38:ec:a6:8d:9f:7d:b8:
         25:d9:93:40:81:4c:66:d7:28:7d:5b:69:a9:18:22:a5:71:58:
         62:eb:90:ee:16:7d:19:c7:c5:b4:18:6d:77:f0:9b:d7:7a:6c:
         1e:e6:6c:11:08:74:4b:d6:94:18:bd:30:bd:4b:79:6f:e6:16:
         7e:e9:a9:bc:96:e0:a6:6e:95:86:2a:86:96:bd:d1:66:4c:8b:
         ea:b8:ae:3b:0f:ad:91:35:7d:8b:df:79:80:b2:d9:dd:f8:22:
         ab:a8:c6:96:4c:fe:06:74:87:bb:f8:e7:6d:c5:9d:4b:eb:9b:
         6b:98:c3:d5:30:c1:ab:a8:5d:3a:56:fb:c6:46:ce:80:1e:a7:
         51:a2:b9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:33:57 2026 by rpki-client