Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
File:                     dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json)
Hash identifier:          mUUwfSaEsWZiCmKruFQXLMhTjtseZBSSezqCoztt3ug=
Subject key identifier:   B8:D7:3D:FC:C4:DE:CE:AD:27:8C:13:08:04:4F:5B:11:4B:A6:44:ED
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Certificate issuer:       /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial:       019E1CB53F1AA3897EE9A89393B602BF91E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
Manifest number:          125C
Signing time:             Tue 12 May 2026 15:01:40 +0000
Manifest this update:     Tue 12 May 2026 15:01:40 +0000
Manifest next update:     Wed 13 May 2026 15:01:40 +0000
Files and hashes:         1: 24LmoNlDA3mTST7ILFjXRoavbLc.roa (hash: ChZQ2voHnXOpu6Bgdd654y5XHIYOuPkH15v1qaYadLA=)
                          2: RDZxalDBba-KXcD-MDsp1kF4DmQ.roa (hash: RfbDrqRTWuSJ+e1Z40xGqlEQmsc4zVr3kOeTExU0ca4=)
                          3: _I5ZyNzs_5Q4toW0cmKShzzyGvc.roa (hash: CAZwJiEdqc66XP0aQOYr0r6o81HABrE7ATqPwsQle/M=)
                          4: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: Uv+pSCIZkdMev5Nc8DuXTeB4pd3gE9mkWO8aoNazO7g=)
                          5: iB4-Lv4Y5pfev06wgUUTf3MkuqE.asa (hash: v6oTaVMB32ysT0WuXZ0EG1XMy1UYjDtrDIPZoAi/1TQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b5:3f:1a:a3:89:7e:e9:a8:93:93:b6:02:bf:91:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
        Validity
            Not Before: May 12 15:01:40 2026 GMT
            Not After : May 13 15:01:40 2026 GMT
        Subject: CN=b8d73dfcc4decead278c1308044f5b114ba644ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fb:fa:6e:65:13:c6:5c:20:ee:50:c1:ae:52:
                    a9:62:04:1d:ee:5d:81:d0:73:3c:7f:f8:a6:80:5f:
                    3c:c3:85:6b:bd:19:47:63:d7:e8:31:92:fa:05:d1:
                    37:0e:51:45:71:46:a5:83:73:34:27:27:8c:31:a0:
                    44:08:18:ec:94:9f:e1:58:13:79:05:33:81:2a:04:
                    f5:db:02:74:84:96:20:55:fe:b2:1d:dd:e0:97:0c:
                    d9:b1:d7:a2:f0:6e:b2:46:54:35:cb:58:cd:a4:6b:
                    6a:6c:64:26:ba:56:7b:83:88:57:af:8b:96:82:1b:
                    50:de:fa:60:4a:17:09:ae:e0:56:b8:7c:64:5a:25:
                    51:11:e6:b7:36:76:d5:48:ab:0d:8e:ab:fa:8d:4f:
                    b6:5a:d5:40:f4:21:89:e1:46:70:7c:b6:4e:b7:b7:
                    3d:f2:ae:e5:37:0f:72:06:df:f6:00:20:5b:8c:b5:
                    bd:c6:f5:bc:b3:8c:f1:35:c4:97:ee:1f:df:24:76:
                    e7:be:84:c2:9b:4c:ef:81:e8:04:59:33:3a:a4:16:
                    8c:bc:7a:40:da:e9:b9:ac:e7:7a:99:bf:b0:b0:5e:
                    57:9d:90:eb:3c:5f:42:d4:69:66:cb:1c:c6:f0:cf:
                    c5:38:d9:54:d7:e3:ff:08:c7:5a:c4:4b:ff:bc:5b:
                    71:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D7:3D:FC:C4:DE:CE:AD:27:8C:13:08:04:4F:5B:11:4B:A6:44:ED
            X509v3 Authority Key Identifier:
                keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:7c:b8:d6:68:3d:fc:89:ae:04:9b:eb:50:c9:4f:96:5b:54:
         6a:b5:ec:40:29:8d:c8:a7:35:d9:95:88:fe:e1:51:41:c9:fa:
         9f:12:9e:25:83:f6:b8:ae:ef:e0:93:f7:a5:ac:44:4d:b8:d1:
         29:fd:bc:ab:57:c3:92:c0:09:21:d4:c8:07:b3:75:66:8f:c0:
         4e:23:b2:d9:90:3b:22:8b:19:08:a9:77:ba:6b:87:3d:51:4b:
         87:39:cc:8a:b2:55:15:6f:6e:02:6f:3a:df:ce:77:4b:48:5a:
         36:20:c0:0d:6e:f2:e2:ae:30:19:26:c9:b1:82:03:32:92:4b:
         3a:a3:3e:7f:5b:22:d8:92:4f:35:1a:20:bd:17:d4:71:1b:2a:
         60:60:11:a9:c1:89:34:00:90:0b:2f:30:18:d4:f0:a7:62:b7:
         c3:e7:e9:08:55:f2:0b:d0:ed:34:d8:64:34:b1:23:80:27:cd:
         fc:88:ee:68:e0:15:e8:17:13:66:03:c7:e5:42:83:27:37:c7:
         af:f2:3c:9a:f9:84:71:33:ad:5b:43:a1:0a:b1:4d:92:b6:4f:
         da:52:ea:7d:33:8f:9c:16:0b:a9:7b:51:2c:4f:ad:ce:db:3d:
         3e:72:7c:27:e7:f7:93:17:5d:a7:20:1a:7d:ba:54:18:6c:ff:
         a5:40:de:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:20 2026 by rpki-client