Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
File:                     0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft (raw, json)
Hash identifier:          RUZr6dytO4xHFw3e5Ptjuw7XrgQv28GyhT5cosXXttY=
Subject key identifier:   02:41:FB:45:29:DB:EF:4A:52:6D:11:E5:7C:B1:53:9F:F4:14:1A:8E
Authority key identifier: D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
Certificate issuer:       /CN=d016cc56a995507b4fa87c6490442f06b6186687
Certificate serial:       019E1D59D506716E090097ADF88D1925384F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 18:01:26 +0000
Manifest this update:     Tue 12 May 2026 18:01:26 +0000
Manifest next update:     Wed 13 May 2026 18:01:26 +0000
Files and hashes:         1: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl (hash: AhHstaEY9OW1InEF0VlXZfYCqK3ksJyWmSw0PFgFv6Y=)
                          2: HcdyvfGiwyc5vyJt43ZuqDnZlDk.roa (hash: 6cPvxcqUCsTomfn2PuIbeh8pnyt4KKbDTtE7dn6MQC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:d5:06:71:6e:09:00:97:ad:f8:8d:19:25:38:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d016cc56a995507b4fa87c6490442f06b6186687
        Validity
            Not Before: May 12 18:01:26 2026 GMT
            Not After : May 13 18:01:26 2026 GMT
        Subject: CN=0241fb4529dbef4a526d11e57cb1539ff4141a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:71:83:72:50:2f:96:68:4e:14:c5:93:31:
                    8d:56:81:16:46:5c:e2:5f:0d:40:f7:b0:a2:3f:dd:
                    94:86:1b:26:fc:3a:e6:d9:a7:5b:56:aa:a5:74:75:
                    fd:26:26:f7:96:a6:e0:69:6c:55:1a:2c:8f:1f:54:
                    99:55:68:06:c2:21:b9:54:64:14:a4:11:c1:d3:7f:
                    75:ae:01:5b:ab:d2:b5:df:81:18:58:35:ba:8a:a4:
                    be:34:1b:94:6a:24:fc:fd:7d:82:f1:9c:20:45:4a:
                    61:a7:83:ef:c1:a6:38:12:2f:da:86:a2:83:e8:aa:
                    5c:91:84:35:59:44:07:8a:c2:3d:ef:44:b6:8a:34:
                    a4:32:e4:55:05:90:6e:fe:9f:84:78:bd:58:e4:03:
                    4c:3a:69:eb:a3:5c:28:3a:70:a0:27:1d:4f:b3:5e:
                    55:b6:85:2f:94:b1:01:2b:b3:8b:9c:8a:19:87:33:
                    d7:b3:d0:10:26:75:41:b6:df:45:af:00:3b:8e:1a:
                    4a:98:c2:7e:a8:3a:24:80:d5:5f:66:19:10:45:05:
                    e9:f1:ea:8f:be:f1:d6:87:bd:2d:b5:de:1f:7d:e5:
                    1f:3d:1b:d8:99:1e:d9:98:2a:04:cd:55:4c:86:7b:
                    eb:46:4c:d2:ba:2e:9d:32:0d:c8:e7:26:a8:1e:d5:
                    bd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:41:FB:45:29:DB:EF:4A:52:6D:11:E5:7C:B1:53:9F:F4:14:1A:8E
            X509v3 Authority Key Identifier:
                keyid:D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:cc:ac:f7:e6:29:ef:47:b9:84:ba:57:10:9b:1e:77:74:33:
         03:f2:e7:4e:d1:74:32:e6:fa:d2:57:62:e7:ee:88:3b:bf:c0:
         68:7b:ed:ab:e2:66:7d:8b:da:d2:62:cf:c3:ff:48:f8:53:11:
         51:fd:9a:40:2f:0d:02:8b:15:ec:fa:e5:53:63:e9:ab:a8:8d:
         0f:35:db:8c:15:c5:f6:a2:09:44:32:e5:09:0f:3d:f5:39:41:
         ea:b2:99:be:2c:54:9f:d1:aa:bd:3c:b3:45:26:97:fd:bc:02:
         cd:9a:06:7a:ef:2d:83:31:0e:0b:37:38:df:31:ce:66:49:6e:
         ee:9f:65:6b:10:21:41:6c:04:4c:aa:70:25:fd:31:bc:fb:dc:
         e9:ec:9e:8d:55:5c:7b:3a:19:27:b7:00:79:fd:1b:49:1e:0b:
         b2:5a:d5:b7:da:c9:8a:a3:ad:ed:1b:88:62:31:14:c8:5f:6c:
         61:34:57:dc:0b:b2:b1:22:4c:0a:b9:26:e8:a9:3a:5e:64:e6:
         4e:49:8a:64:c3:a1:5a:b3:d6:73:8d:3c:db:83:f9:c6:41:97:
         5a:49:92:2b:e8:e6:8e:17:f1:ab:a3:4a:ac:79:ff:5f:96:3b:
         85:f2:3e:4b:79:e3:46:1b:06:26:f4:35:89:76:43:71:af:4c:
         0d:5f:8f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:26 2026 by rpki-client