Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
File:                     0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json)
Hash identifier:          LFUZI6xh1yRlqO11jzIonYGtICrB+Cqzmn8VA9rv9xk=
Subject key identifier:   11:D0:36:FE:29:FB:A5:D7:06:B3:B9:59:DD:E8:D2:96:B4:FA:30:A4
Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
Certificate issuer:       /CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Certificate serial:       019E30A96C56BEFB0C8C36FD80FBA247DE8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
Manifest number:          0893
Signing time:             Sat 16 May 2026 12:01:10 +0000
Manifest this update:     Sat 16 May 2026 12:01:10 +0000
Manifest next update:     Sun 17 May 2026 12:01:10 +0000
Files and hashes:         1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: 3dv4cjAh7t4KABVzbHiOrhsePw/Pq+HFYFkKyuIKNZY=)
                          2: E8WXXcfuvBDPmOaMAFbCOw__lzs.roa (hash: DXmeZN81Z/RFvXHNJ2glOBWlXdcBg+DgqjRRTo5Assk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:6c:56:be:fb:0c:8c:36:fd:80:fb:a2:47:de:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08
        Validity
            Not Before: May 16 12:01:10 2026 GMT
            Not After : May 17 12:01:10 2026 GMT
        Subject: CN=11d036fe29fba5d706b3b959dde8d296b4fa30a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:0b:b0:e7:28:5b:66:28:16:ab:f3:ea:50:
                    1f:cf:c3:53:fb:a9:79:df:5c:1e:f7:26:18:23:26:
                    a1:ee:0a:6b:ef:3e:07:2c:20:de:3e:74:54:2e:63:
                    40:92:d0:a5:58:55:4c:9d:f8:87:58:50:cb:2f:16:
                    81:3e:2c:50:61:c9:8b:77:19:9b:f1:bc:cc:d0:bf:
                    d8:f2:46:4c:2b:4f:b5:1c:d2:8d:0e:12:8f:fb:f2:
                    10:9e:a2:1d:5e:14:6e:f2:35:05:fe:e8:e6:77:ae:
                    90:ce:0c:64:13:19:6c:e3:17:43:e4:18:78:37:45:
                    9c:a7:24:5d:38:8d:c6:84:7d:69:b6:ea:ba:ce:36:
                    93:b3:cb:59:be:a8:b6:42:dc:37:68:71:3d:e7:53:
                    0e:1b:2c:5e:3b:da:a3:02:c1:48:d2:bd:53:d5:54:
                    e9:ac:95:cd:b2:a9:f9:68:76:68:27:f6:03:49:7f:
                    f8:67:6d:f4:5a:5e:56:9b:da:55:2f:18:67:f3:65:
                    40:8d:33:6d:e5:4d:ee:fa:6e:72:71:07:82:cb:3d:
                    ca:0c:8d:c6:f0:5d:0d:28:51:6d:76:5d:4b:77:c0:
                    5c:ea:a0:67:18:71:7c:6b:33:aa:ae:43:f2:53:c7:
                    01:c7:0e:8e:8b:6f:54:5d:08:fa:b9:3e:b4:f4:54:
                    71:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D0:36:FE:29:FB:A5:D7:06:B3:B9:59:DD:E8:D2:96:B4:FA:30:A4
            X509v3 Authority Key Identifier:
                keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e2:9e:33:76:c3:c4:de:72:7b:9b:6f:68:09:6f:f4:54:17:
         c9:b2:26:cb:3a:2b:ac:25:7c:09:8e:6e:20:68:cc:b2:ea:66:
         97:df:fd:0a:d1:3c:3e:96:d5:99:bf:df:eb:34:2d:2c:85:a8:
         32:68:e2:62:a1:b1:3e:4e:da:2e:23:51:20:b9:09:94:0c:12:
         fb:a3:a4:5b:6b:75:ee:92:2f:0f:08:f9:a3:45:be:42:52:c4:
         81:b1:ff:f5:4f:1a:ea:12:13:f3:b7:31:c0:10:84:5c:22:76:
         08:2f:8e:cf:06:f8:7e:da:5e:2d:0a:98:0c:39:9a:87:1a:66:
         67:fd:47:10:24:03:fe:b1:ee:f8:e6:b9:a2:7c:f8:63:62:61:
         86:f1:5e:15:42:04:3f:79:a3:dc:87:1b:a3:cc:a5:1b:19:0c:
         e8:22:59:8c:2f:68:4f:88:3e:ae:1c:77:eb:23:be:c6:ea:4c:
         d6:aa:ef:10:81:f7:07:fa:58:da:f1:28:a6:38:9c:e5:b5:2b:
         ba:55:ea:f4:6b:9b:63:bf:ce:76:82:93:44:7a:4d:ac:55:c7:
         62:e3:2c:72:6e:de:7b:e5:f3:95:d4:09:e2:b5:90:fd:5e:6e:
         e0:81:05:76:04:4c:cd:d4:8c:a9:a4:77:83:90:22:18:b0:02:
         6b:6b:7a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:15 2026 by rpki-client