Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
File:                     0jR5jgcS8VUpLTIR98RHIjzNSaw.mft (raw, json)
Hash identifier:          RO00vgU3LrFbrY8V+1z8MSd/pp2L2xoMn9v+waCEHaU=
Subject key identifier:   C0:F9:73:92:09:91:3F:76:B5:90:D3:0E:05:70:25:98:1D:FD:68:F5
Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
Certificate issuer:       /CN=d234798e0712f155292d3211f7c447223ccd49ac
Certificate serial:       019E20FFAF737832A925A1C4537217F83A34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
Manifest number:          1628
Signing time:             Wed 13 May 2026 11:01:27 +0000
Manifest this update:     Wed 13 May 2026 11:01:27 +0000
Manifest next update:     Thu 14 May 2026 11:01:27 +0000
Files and hashes:         1: 0jR5jgcS8VUpLTIR98RHIjzNSaw.crl (hash: EJtY7yxcx+ceOwyqyGgUhM+oLa6ihhjab5PwP67/3Zc=)
                          2: RjK8oLQkpJRzAeEdXg6vAbqYOYY.roa (hash: Mnx3rs/opPeBY8JJ1GG9XmHg+1e4VxaebybsYn1/rbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:af:73:78:32:a9:25:a1:c4:53:72:17:f8:3a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac
        Validity
            Not Before: May 13 11:01:27 2026 GMT
            Not After : May 14 11:01:27 2026 GMT
        Subject: CN=c0f9739209913f76b590d30e057025981dfd68f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e8:16:7b:05:6e:31:5b:6c:8f:db:6e:f5:a4:
                    b5:db:d3:ad:3c:79:c0:73:ce:46:83:41:2e:52:e6:
                    55:7f:16:1c:db:c3:62:92:d1:f6:5a:da:0b:77:41:
                    a9:0f:f9:6a:d5:26:47:ac:b1:24:a6:46:c4:ba:70:
                    a0:2c:3f:51:cc:db:c5:ba:60:e4:2c:11:02:be:4d:
                    7e:7c:8b:84:a5:e1:09:d9:60:2a:80:5d:05:16:1c:
                    0e:30:6a:ac:4a:5d:af:07:a8:0b:34:f3:62:dc:c1:
                    69:a7:5c:d0:e4:86:f4:60:1f:1a:f2:6c:cd:e7:1a:
                    d8:fa:16:e1:2b:a2:5a:43:a8:f2:a4:11:98:e6:03:
                    bd:c3:33:65:2d:3f:6d:d9:4c:77:75:8a:3c:1d:b5:
                    dd:7b:c2:9c:0e:fb:99:42:5a:1f:a0:dc:f4:be:5e:
                    94:ed:d5:81:0d:88:4a:c7:63:13:46:03:d0:d2:16:
                    a6:40:cd:8b:29:01:f4:68:e2:82:fb:fd:02:7b:da:
                    ca:99:4a:51:fd:23:45:c3:50:de:43:ec:7b:a6:e7:
                    d2:78:7d:6e:50:fe:9e:99:fd:f1:60:af:6c:f6:c9:
                    da:01:1a:03:0d:f2:66:07:71:8c:b7:a9:6d:4f:91:
                    fe:38:01:19:65:28:94:a6:90:44:c1:6e:35:7a:9d:
                    1d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F9:73:92:09:91:3F:76:B5:90:D3:0E:05:70:25:98:1D:FD:68:F5
            X509v3 Authority Key Identifier:
                keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:d9:4f:e3:e1:87:6f:cd:06:d1:60:59:85:2a:93:60:e5:a5:
         36:72:aa:d0:37:8d:7a:34:52:11:23:6d:35:c4:d1:50:b3:8b:
         52:18:2e:27:29:a6:db:0f:7b:d2:fe:50:c5:8a:5b:72:da:52:
         5e:8f:ee:a1:b2:c3:da:e6:e7:68:a7:7a:f9:da:bb:74:d3:ed:
         21:7e:c8:4f:4b:4a:7f:d7:72:cf:5f:4e:ac:34:e5:d8:b0:ad:
         25:3f:70:a5:cf:32:95:24:01:89:37:05:39:f1:17:58:67:8e:
         0a:ca:2a:e5:2c:04:cc:44:68:bf:30:1a:69:07:38:51:e5:86:
         ba:59:b8:fc:54:c4:3f:ec:a4:e4:5d:ee:12:26:58:76:60:0a:
         ed:26:e8:4d:f2:2e:e8:b9:6a:e9:13:73:4c:df:39:ca:80:ae:
         56:2e:1c:e7:32:e2:2d:5e:70:c7:c3:76:e9:c4:30:cf:2e:d6:
         d8:e7:c6:b7:50:f4:c8:c5:7d:5a:ac:c9:5b:f1:03:22:a4:e9:
         17:76:7d:11:62:94:2c:7f:f7:ff:c0:2a:3d:0a:fa:c2:02:b5:
         c8:44:05:82:d3:10:c7:f0:25:a3:b9:b0:d5:a8:f0:32:35:a4:
         55:f0:6e:5e:5f:f9:6d:94:8f:fa:a9:37:03:43:d5:6a:7d:87:
         b7:45:24:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:09:45 2026 by rpki-client