Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
File:                     _O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft (raw, json)
Hash identifier:          6F7VGT+mVByp80ojDcn9BFEAcnFBBgWldsURKVO/RmY=
Subject key identifier:   13:0F:B8:F2:C2:0D:56:C3:81:0C:0C:3F:FD:9B:6B:ED:DD:FE:57:69
Authority key identifier: FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA
Certificate issuer:       /CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da
Certificate serial:       019E1EA2C1D04A77F6736F516E13FCC14583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
Manifest number:          012E
Signing time:             Wed 13 May 2026 00:00:43 +0000
Manifest this update:     Wed 13 May 2026 00:00:43 +0000
Manifest next update:     Thu 14 May 2026 00:00:43 +0000
Files and hashes:         1: 3xCEVKKWm2QsOSzoPNBnX86Bdi4.asa (hash: KMwzA6MAu43bwnbadnaB1wzAFHYoj8vkYoYJ8J2jS5g=)
                          2: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl (hash: QU2Zuuc0NC41LxlMfOwAkHwJWB7yENWVM0CCzAzlqzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:c1:d0:4a:77:f6:73:6f:51:6e:13:fc:c1:45:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da
        Validity
            Not Before: May 13 00:00:43 2026 GMT
            Not After : May 14 00:00:43 2026 GMT
        Subject: CN=130fb8f2c20d56c3810c0c3ffd9b6bedddfe5769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3e:48:b8:54:6c:0a:86:b5:3e:67:9c:95:54:
                    2c:bd:7d:0f:2d:fd:8f:54:27:b6:e0:12:24:0f:8b:
                    75:c3:ec:40:2f:3e:e6:9c:a9:a5:2d:9e:59:ea:cf:
                    bb:96:30:31:e2:c7:4f:38:e8:a5:a2:3a:da:4a:b0:
                    51:bd:2d:67:d6:50:20:8e:5a:c7:c7:d2:7c:a4:f5:
                    db:4c:32:4c:e1:47:6c:98:72:53:82:ed:99:46:c4:
                    b0:e2:b8:8a:00:df:3c:06:c4:fa:61:63:91:ea:77:
                    88:33:9e:08:25:04:bc:dc:ff:8a:16:fb:42:11:5a:
                    30:86:ce:ee:4e:15:fd:43:5f:2f:78:5d:bc:f7:cb:
                    eb:ed:a4:00:4e:6d:28:ef:13:71:5a:3f:94:bf:b0:
                    43:6b:1d:c4:ac:46:85:72:b0:37:15:0d:19:bd:94:
                    19:f1:61:b6:0c:2e:69:28:34:30:25:a4:04:8e:e0:
                    3a:fc:a3:89:e0:05:ca:f9:ec:86:eb:48:20:ad:0e:
                    33:b3:d8:b7:53:83:cb:aa:cb:96:43:92:a0:99:58:
                    6a:0e:66:21:69:ec:c4:67:5e:1a:61:67:27:15:15:
                    ed:c6:11:9c:a7:63:49:fb:d3:38:5a:c1:ae:45:68:
                    e1:28:f8:74:1f:06:74:c4:bd:af:5b:59:25:73:df:
                    45:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0F:B8:F2:C2:0D:56:C3:81:0C:0C:3F:FD:9B:6B:ED:DD:FE:57:69
            X509v3 Authority Key Identifier:
                keyid:FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ee:f7:d8:23:61:b4:e7:38:9f:40:cf:df:c0:7d:8d:63:51:
         b5:26:b5:5a:c3:34:71:17:bd:66:05:7d:a5:05:ca:fc:31:3f:
         93:76:41:1e:a5:36:b0:76:d8:00:d7:4a:35:92:6a:c7:c5:bf:
         87:5e:d4:34:71:8a:b2:01:ba:be:7f:ab:d2:1c:ac:91:e4:9f:
         72:d3:37:bb:ec:4e:c7:74:f2:19:ab:91:e5:e2:7f:36:63:23:
         f4:57:09:d8:65:4a:bc:ae:0c:ee:14:59:79:df:66:9e:0c:8c:
         35:fd:ed:de:86:fa:c1:7a:e6:9c:b1:7a:1d:2f:72:35:9b:44:
         ce:c8:f3:cd:e3:0c:9f:b6:91:08:96:bd:80:a8:79:32:e3:40:
         a9:eb:ed:06:1d:d9:f2:fa:44:19:5a:c0:6c:dc:73:7c:4a:92:
         24:54:f7:33:3d:2a:92:98:cd:f1:ac:c8:52:ed:b4:cf:1a:65:
         34:6f:e0:cb:41:7e:a3:94:0e:d9:59:a8:0e:ea:8c:a2:96:49:
         c1:29:ff:fb:27:46:ba:45:1b:38:8a:4f:92:ae:e7:2a:44:b0:
         c1:ee:d4:d6:5d:85:2a:cb:9b:26:82:70:98:fa:f7:83:94:64:
         0b:f3:cc:85:12:37:16:f3:92:5e:19:d2:42:f3:70:2c:cd:9f:
         10:e5:79:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:44:48 2026 by rpki-client