Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
File:                     0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft (raw, json)
Hash identifier:          lPQA8GvouPX7LMl7+8Q0QG+1mQNKadvvCwXBYreLLwM=
Subject key identifier:   EF:18:E0:0E:F7:57:DE:8F:B3:55:EE:10:4B:BA:8A:4E:43:09:B3:7F
Authority key identifier: D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
Certificate issuer:       /CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Certificate serial:       019E1D5938E43EB3D4B7397CF0C24FF24671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 18:00:46 +0000
Manifest this update:     Tue 12 May 2026 18:00:46 +0000
Manifest next update:     Wed 13 May 2026 18:00:46 +0000
Files and hashes:         1: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl (hash: Hq66/9JbX7FuyapBo0KVdysqigAl56erjsOCDHJ3CU4=)
                          2: knQYsypbRhqwvEH3fTnKrdPWqWY.roa (hash: WNEtwLYJf9qeEVFV6iUsuz+sfad0kenK8BH3vda/2QA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:38:e4:3e:b3:d4:b7:39:7c:f0:c2:4f:f2:46:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
        Validity
            Not Before: May 12 18:00:46 2026 GMT
            Not After : May 13 18:00:46 2026 GMT
        Subject: CN=ef18e00ef757de8fb355ee104bba8a4e4309b37f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ec:5b:bd:c1:b4:b1:a3:2c:01:84:c6:f8:b6:
                    e1:c9:88:ab:f9:37:7b:28:61:a8:ed:d6:10:63:ca:
                    f6:5e:0a:4f:bb:cd:bb:9b:1c:17:5a:2a:2e:7e:a1:
                    12:cb:40:68:1d:36:4f:94:90:31:83:3a:01:49:5f:
                    95:82:e3:8e:f0:b2:da:ae:2a:3b:75:f1:72:f5:bc:
                    d9:73:5f:0d:e4:f7:07:7f:8a:31:f9:3b:72:1e:b6:
                    7e:1b:39:b5:1c:75:f0:21:7d:d8:70:60:66:35:aa:
                    32:f2:52:a1:be:30:86:c8:4a:2f:9a:03:97:84:1f:
                    7e:19:c2:df:ee:d7:8a:ce:cc:df:2e:93:77:18:fe:
                    a9:50:bf:bd:94:0d:24:f6:9d:90:47:fc:47:57:31:
                    21:9a:88:07:9e:18:c7:c7:c7:26:8e:47:cc:b6:55:
                    ce:93:e8:31:8c:2a:bd:a8:99:73:8c:82:d2:96:83:
                    83:a9:a7:82:d3:81:52:25:4d:b8:d2:d8:cf:45:36:
                    44:1d:1e:88:15:63:12:7f:86:e3:06:f3:7c:55:a3:
                    0e:ac:8a:73:5b:a9:a1:9d:3c:45:0a:33:f6:e1:26:
                    0a:1d:80:aa:38:5f:6c:12:bd:bd:e4:40:88:92:48:
                    8f:d1:f0:24:32:61:25:5f:68:eb:62:0e:11:a0:ce:
                    ac:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:18:E0:0E:F7:57:DE:8F:B3:55:EE:10:4B:BA:8A:4E:43:09:B3:7F
            X509v3 Authority Key Identifier:
                keyid:D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:40:9f:a3:76:f2:b8:bb:77:cb:db:46:52:6d:27:57:42:3c:
         33:62:f3:d2:1d:23:9c:2c:7e:d8:da:50:08:4f:f0:5a:21:90:
         b3:e2:37:0d:fe:63:1d:9f:4c:c7:1e:2b:c2:68:71:00:18:ba:
         30:35:bd:af:88:7d:b6:b2:63:82:60:59:aa:81:fe:ed:4a:1c:
         46:34:9e:40:6e:e9:9f:cc:f2:85:ef:66:f6:24:5b:70:1d:58:
         21:3d:38:a3:09:fd:c3:75:c3:e3:cc:06:aa:0f:5d:e7:de:b0:
         77:fd:51:bf:b6:43:30:5a:40:1c:88:1c:b0:1e:e9:13:b6:98:
         b4:a4:ca:81:5f:a5:bc:d2:37:78:b8:0c:0d:f2:2d:e9:6f:39:
         90:50:05:49:d8:2c:17:99:13:16:38:97:42:7c:11:dc:93:0e:
         ca:b7:52:cd:04:45:85:7d:53:0d:19:4b:d0:86:a8:4d:f8:a6:
         91:fa:1b:10:96:d8:16:89:06:a5:59:ce:77:d5:a7:66:29:b4:
         23:38:2a:5d:1b:ee:88:7c:dd:af:23:b9:ff:5c:68:9b:50:da:
         7d:d0:ac:b2:06:cd:ea:fe:bb:d8:56:e6:cb:b4:74:ed:dd:35:
         5b:2f:8f:49:c2:c2:a4:6a:ff:62:05:40:52:49:d4:69:ae:a2:
         13:b0:5f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:13:10 2026 by rpki-client