Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
File:                     Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft (raw, json)
Hash identifier:          SrSCEH7OCDKGbQoHw7Jy1E0VczqSzC0ohEOgP6h7D/A=
Subject key identifier:   C2:E4:BB:BB:D3:7A:9D:D9:1D:D2:D4:61:5E:4A:24:F5:AD:3F:FC:D5
Authority key identifier: 0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
Certificate issuer:       /CN=0dde6317311fe6d538577c17fec982b82eea9abd
Certificate serial:       019E1DC77EE9F595743858E8D7FB8970CFC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
Manifest number:          149C
Signing time:             Tue 12 May 2026 20:01:13 +0000
Manifest this update:     Tue 12 May 2026 20:01:13 +0000
Manifest next update:     Wed 13 May 2026 20:01:13 +0000
Files and hashes:         1: Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl (hash: ZkKmHMfkRVoH93Loina3D2mJB6QCS2w9rMwXUM6WYpA=)
                          2: _SVgDeMt7OyK763J59KOgA7Y4X0.roa (hash: JZm207g6Ascmgp0WtNlIOYunKJNalG/ciHHMl9wcILk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:7e:e9:f5:95:74:38:58:e8:d7:fb:89:70:cf:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dde6317311fe6d538577c17fec982b82eea9abd
        Validity
            Not Before: May 12 20:01:13 2026 GMT
            Not After : May 13 20:01:13 2026 GMT
        Subject: CN=c2e4bbbbd37a9dd91dd2d4615e4a24f5ad3ffcd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:29:fb:65:03:93:dd:6e:7f:f7:ca:e7:54:
                    2a:6f:d7:44:5f:22:bb:68:09:9e:1c:7b:f0:3b:07:
                    7c:09:8b:d3:c7:3e:4b:cc:62:d0:a8:17:f8:d1:9c:
                    72:83:b5:40:97:7f:b5:22:bc:80:15:91:98:0f:59:
                    01:2e:18:96:f3:bd:fb:45:cd:f4:a6:3d:56:48:6c:
                    09:62:2d:95:8b:f8:a2:73:3a:5d:60:68:2b:e5:ba:
                    03:da:bf:29:d6:44:5e:98:0f:78:d9:c3:ff:28:02:
                    e8:41:05:11:f0:11:98:e9:1a:e0:ee:2a:0c:ab:ed:
                    38:7b:23:b5:25:3a:82:87:09:dd:fb:1f:72:07:93:
                    69:c9:a4:ba:d8:e5:76:05:47:6f:cd:14:a2:98:77:
                    cd:ea:84:f1:84:e0:af:10:fd:0a:5a:65:28:58:bc:
                    36:01:dd:b1:a0:9d:e4:7c:5e:fb:f8:0a:49:ad:6a:
                    89:6f:ab:07:5a:36:8d:73:a7:1c:24:db:9f:37:e2:
                    36:f3:78:41:bc:69:d3:f2:10:9a:5e:56:c4:7a:d9:
                    51:ec:e4:6c:ea:2f:81:ca:8d:cf:87:5e:4b:cd:e4:
                    18:6c:4f:76:76:07:9c:50:bc:fa:4b:1f:f0:1d:86:
                    8a:1b:5e:52:95:e6:4c:b7:49:59:f0:c6:ad:ee:21:
                    d6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E4:BB:BB:D3:7A:9D:D9:1D:D2:D4:61:5E:4A:24:F5:AD:3F:FC:D5
            X509v3 Authority Key Identifier:
                keyid:0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:df:0d:1e:77:fc:45:c2:c9:c7:25:11:23:79:14:74:f8:04:
         c8:9d:32:34:cd:96:bf:93:a8:c4:7c:7f:9c:34:2d:b8:23:bd:
         c5:d7:12:09:47:2f:2f:04:45:8d:82:ad:8d:82:84:e1:32:2d:
         34:b5:59:20:5f:bc:1b:3b:46:1a:07:5f:e6:09:1f:dc:6b:77:
         10:18:33:6c:b3:6a:ab:d7:a2:7b:7c:01:6f:93:e9:e6:3f:06:
         fb:cb:18:8e:86:b3:ea:c6:82:79:9a:df:bf:97:29:48:bb:c7:
         98:96:e7:47:34:5b:ea:aa:8d:1a:86:07:7f:62:c8:cf:3e:01:
         dc:39:32:55:65:27:0e:84:35:ef:a0:9b:c6:f6:01:78:dd:da:
         9b:5f:2a:ab:75:bb:de:cc:00:e7:32:0c:91:d4:35:2c:4b:e6:
         89:6b:26:37:84:9c:48:21:a3:2f:d7:7e:58:01:f8:4d:55:a1:
         61:6b:19:44:68:3d:51:26:99:a9:9f:b9:dc:20:53:19:1d:76:
         0a:3b:31:bd:a4:ae:d4:01:f3:9d:5a:69:55:29:69:96:df:d6:
         a8:93:ea:aa:1b:ba:f2:7b:37:9d:a7:c1:7f:2d:b5:dc:b5:ea:
         f9:4d:c3:45:bc:b9:2e:11:3d:78:95:dc:10:87:fa:8c:4c:ea:
         1e:60:c3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:59:50 2026 by rpki-client