Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
File:                     0nuHf4mTQSab7GfG46CoiLp66Y0.mft (raw, json)
Hash identifier:          kZZURq6eHKJZI5Nn4A0p6e2Pjwpdfh5/BMLLTOCjWSY=
Subject key identifier:   E2:CE:4A:18:39:E1:B7:D1:D7:B0:35:CF:35:8A:05:42:6A:C2:4B:62
Authority key identifier: D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
Certificate issuer:       /CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Certificate serial:       019E1F110B20540B1B3B207432A13C5AD096
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
Manifest number:          0D0C
Signing time:             Wed 13 May 2026 02:01:10 +0000
Manifest this update:     Wed 13 May 2026 02:01:10 +0000
Manifest next update:     Thu 14 May 2026 02:01:10 +0000
Files and hashes:         1: 0nuHf4mTQSab7GfG46CoiLp66Y0.crl (hash: 4u9ZDSyVkwHGr0MaX6I4SdoqVhrrn5RE2qLsvUK5rB0=)
                          2: ESKSicApbc_Lc7K1oxfrHyvWB2A.roa (hash: 9hp563pGKax4wS0ioE86wmQq8LK8c0yOcQLKfH9tKgk=)
                          3: GzzDQC3ubi3zt1X18DBGioGRdBc.roa (hash: D/wNKKfIUY9J0S4B/WgJwAFtRjUwUsHpDQtQvyp4Lvk=)
                          4: a8xxFezDGCmHsEOSRqb1XFyjzzQ.roa (hash: UKvCG+Ut498aH2KrK/T04+U4clxpUw2ygew8dg+YGZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:0b:20:54:0b:1b:3b:20:74:32:a1:3c:5a:d0:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
        Validity
            Not Before: May 13 02:01:10 2026 GMT
            Not After : May 14 02:01:10 2026 GMT
        Subject: CN=e2ce4a1839e1b7d1d7b035cf358a05426ac24b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5d:f7:a5:d0:2e:bd:35:8a:27:cc:ad:14:4c:
                    ef:e7:92:62:00:d8:cc:84:20:12:42:0e:c5:80:50:
                    99:bc:c3:82:bb:5e:15:de:03:ed:2d:d4:7a:43:53:
                    9d:e2:ef:fa:4f:b5:bc:95:88:27:8e:0d:73:40:31:
                    d7:1e:e7:c0:7c:e4:50:9f:16:df:14:c5:74:a4:59:
                    03:fd:66:bd:c4:84:06:2c:68:5e:8b:1c:03:d4:08:
                    54:8b:41:d0:ed:75:12:76:93:25:39:45:97:c1:3c:
                    9f:63:7e:ab:0d:ca:1b:3c:5b:59:f1:73:31:a7:1c:
                    32:95:95:11:20:f9:b8:f0:9d:44:cc:ba:07:f5:da:
                    26:77:1a:bc:a8:85:27:1e:d6:cb:e8:de:3f:15:35:
                    16:fa:f5:c8:3e:e5:4e:60:d8:85:40:d5:78:f0:43:
                    e7:11:db:fe:39:12:62:83:76:8e:9f:17:e3:b6:27:
                    aa:d5:eb:61:a1:93:ca:80:62:f2:a5:37:4c:94:d6:
                    a8:77:53:5e:03:f2:ad:77:73:38:b1:d2:c1:3a:a6:
                    7d:d6:f6:27:10:46:5b:fc:c2:ca:cd:1d:79:3f:8a:
                    1f:22:58:4c:1c:7e:fb:41:3a:b5:09:67:06:5c:5d:
                    4e:78:11:53:33:31:91:8f:25:78:dd:a1:d5:80:fe:
                    4e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CE:4A:18:39:E1:B7:D1:D7:B0:35:CF:35:8A:05:42:6A:C2:4B:62
            X509v3 Authority Key Identifier:
                keyid:D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:5d:79:f8:bc:c8:26:4d:c4:25:0a:ab:c3:a0:75:2b:c8:41:
         f7:d8:9c:dd:33:4f:bb:d0:71:ba:2c:1e:61:13:f6:ac:6e:b5:
         af:76:94:fc:2b:30:b4:91:d8:f4:86:79:09:c0:92:8c:5d:4e:
         38:3a:03:87:ca:cd:a0:05:f0:98:6c:de:88:a7:28:ea:fd:0f:
         3c:3e:f8:b8:3e:61:78:16:94:39:d9:d2:75:e7:8f:3f:d4:3b:
         2a:cd:8f:98:e4:40:f3:7e:e0:1e:88:ec:a3:fe:8d:a8:28:b7:
         3a:28:cb:07:f6:ca:fc:32:9c:9c:a5:22:3b:ec:a9:10:84:cd:
         07:4d:f0:d8:ae:b9:52:e1:8e:18:3c:83:fb:12:34:b8:38:82:
         0c:cc:c1:72:eb:94:80:56:76:d0:ba:47:e7:cd:0d:ac:4f:33:
         ae:d1:8c:27:10:fe:9d:40:d9:6a:f7:d3:b7:76:36:c5:34:1f:
         cd:ca:fe:0f:25:13:6c:fc:1e:21:5e:46:fc:8d:f2:5c:56:5e:
         a7:23:5e:0c:2c:fc:fb:59:a2:50:20:e3:1d:4f:64:19:a4:75:
         8f:24:7c:12:1a:f9:f9:74:68:36:d6:eb:4c:d7:3f:27:6f:b9:
         f4:3c:c1:72:8e:84:ff:9b:1d:d1:75:06:69:61:27:b0:55:df:
         6f:1d:2b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:14:59 2026 by rpki-client