Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
File:                     DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft (raw, json)
Hash identifier:          q6lkP/mi0VUPr11uz3Ax8GtZsRDPijF73WUYnT7BWaE=
Subject key identifier:   4A:E4:15:D4:14:0A:84:62:DB:88:4B:E8:C8:28:ED:69:AF:78:DD:A8
Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
Certificate issuer:       /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Certificate serial:       019E1D22940F1BB81FC587FDC67AAC54B2AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
Manifest number:          0FEB
Signing time:             Tue 12 May 2026 17:01:05 +0000
Manifest this update:     Tue 12 May 2026 17:01:05 +0000
Manifest next update:     Wed 13 May 2026 17:01:05 +0000
Files and hashes:         1: DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl (hash: rBdRnw5Ey1uhIZsR8bj1u7uQPRYX0ujYrAw3bnAP9cc=)
                          2: pEi1sXolFr3_KzzGy9GgxCb35YI.roa (hash: 0hWxK4UVYjDavdDARBqtyWujMUcunhSXg8YFegPVy8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:94:0f:1b:b8:1f:c5:87:fd:c6:7a:ac:54:b2:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
        Validity
            Not Before: May 12 17:01:05 2026 GMT
            Not After : May 13 17:01:05 2026 GMT
        Subject: CN=4ae415d4140a8462db884be8c828ed69af78dda8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:90:f6:ba:af:fa:be:ab:0d:39:0a:7d:5e:e4:
                    f5:46:24:2b:29:a8:de:5c:f5:7a:17:62:a7:4b:15:
                    3d:fb:45:6c:e7:7b:a1:50:86:ab:37:eb:46:0e:21:
                    4e:89:5c:af:45:63:c0:41:c3:84:b0:9f:86:0d:db:
                    4e:69:1e:a4:29:2d:fb:9d:52:1d:48:92:e0:9d:d1:
                    35:6c:7e:05:08:c9:d3:35:f8:fa:66:8a:f4:c0:36:
                    1e:b3:6d:1f:84:c7:c4:bf:d2:9d:f2:9b:b9:de:ce:
                    d2:9c:a3:03:3a:d1:72:14:13:f4:89:49:b2:a8:92:
                    1c:f7:6a:e4:cd:e5:44:3d:33:3d:4e:9c:67:9f:86:
                    3d:b7:69:2a:4d:00:8b:7f:8b:5d:34:31:78:db:de:
                    19:30:21:d7:8a:11:91:bf:9e:18:f5:5e:2a:ba:66:
                    4a:1c:d7:04:da:5c:99:b1:1b:7d:06:90:c9:37:27:
                    9c:42:99:0c:e3:a1:20:b9:17:b9:fd:41:75:34:8c:
                    ca:4a:b2:f6:af:07:42:36:25:46:e7:ca:4b:cc:1a:
                    87:b8:80:9c:88:d3:05:ee:5d:90:71:63:ed:ab:11:
                    13:8d:3e:fa:d7:94:f3:ad:29:26:3e:ec:97:5b:64:
                    d5:f8:f1:97:70:00:4a:c3:f1:cd:9e:c8:49:3f:e0:
                    bc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E4:15:D4:14:0A:84:62:DB:88:4B:E8:C8:28:ED:69:AF:78:DD:A8
            X509v3 Authority Key Identifier:
                keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:59:15:91:ef:d7:06:e0:f1:11:50:38:34:28:e4:bb:3d:d6:
         fc:0f:13:55:21:08:dc:9c:ea:b6:91:f5:55:36:4f:83:6d:18:
         c1:76:2e:a5:58:86:54:b3:73:09:6a:29:bc:68:0c:57:66:cd:
         53:c7:a5:76:94:d6:0a:e2:e5:9d:40:2b:a6:48:08:a6:05:9c:
         52:78:03:f7:ce:92:99:5c:b6:19:90:b5:25:3d:5d:52:3d:87:
         fe:1a:48:95:1f:3d:85:bd:1e:cf:9a:9b:88:ba:23:dd:56:86:
         de:43:67:53:b4:6e:b4:67:3b:c5:7e:b7:e7:df:98:34:56:34:
         f7:b7:a8:e8:7b:e3:0a:56:f4:e4:b8:1f:57:75:18:ba:94:8b:
         3f:eb:3c:e2:67:08:24:fb:5b:d2:e2:43:08:a2:e9:9a:ce:f3:
         c5:71:1e:37:58:1d:70:3a:b6:f3:60:c8:fc:49:75:62:2d:c8:
         54:be:54:70:d2:75:46:48:2b:0b:ff:aa:ff:dc:03:da:86:64:
         78:4b:68:30:d6:90:94:a8:8e:28:28:4f:97:1d:75:26:55:d3:
         c5:d8:68:d3:53:01:48:46:41:0c:c7:d5:6e:1b:2f:64:7a:cc:
         8f:89:ed:ff:b2:71:25:ff:00:5d:b6:61:3b:2b:24:83:c6:11:
         e6:20:61:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:20:58 2026 by rpki-client