Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
File:                     0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft (raw, json)
Hash identifier:          K5Vi6sBeRe4ktk0aStjpCcASsqPZjgsaNOII+FGOhwA=
Subject key identifier:   86:08:80:2B:15:C6:DE:C8:26:64:0E:20:A5:BB:CB:71:AB:74:C5:7D
Authority key identifier: D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A
Certificate issuer:       /CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
Certificate serial:       019E30049F119F4F4200353E783614BBE2D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
Manifest number:          190E
Signing time:             Sat 16 May 2026 09:01:09 +0000
Manifest this update:     Sat 16 May 2026 09:01:09 +0000
Manifest next update:     Sun 17 May 2026 09:01:09 +0000
Files and hashes:         1: 0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl (hash: xzUAtXZ627q5WYQ4D82UPtG2BwFG0YmmwEwO6W9ap3E=)
                          2: UFUNHcp59zFp-s7epnaBCk3fSDI.roa (hash: 5JNnpeUYOHWtCY7aisWTKc4iY+kJ/fdA3iBaqT6fPPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:9f:11:9f:4f:42:00:35:3e:78:36:14:bb:e2:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
        Validity
            Not Before: May 16 09:01:09 2026 GMT
            Not After : May 17 09:01:09 2026 GMT
        Subject: CN=8608802b15c6dec826640e20a5bbcb71ab74c57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4b:24:4c:b1:44:89:16:e4:77:52:58:ea:33:
                    46:58:f2:44:fb:5f:f5:2f:5a:6c:92:5e:d1:8d:04:
                    89:c9:0d:0c:52:1c:9a:c8:d9:cb:bd:4a:15:a3:12:
                    0d:59:8a:bf:39:52:3d:67:55:6b:14:a7:e7:a2:51:
                    a2:61:38:c2:6e:29:62:57:5a:d3:81:54:3c:40:86:
                    9b:f1:32:2a:94:76:de:83:c3:1a:59:31:34:b7:10:
                    ba:34:29:b0:df:64:20:0b:4c:df:2f:13:8f:c1:f9:
                    45:2f:3d:1e:ab:04:08:6d:4f:53:07:10:3e:8c:9b:
                    c2:58:6f:50:1c:56:22:04:9d:a1:35:b1:bc:8b:04:
                    aa:40:3e:00:b1:e5:96:ae:d7:9f:35:2b:22:6f:d1:
                    86:a9:ed:31:d3:f3:c0:ce:bc:15:af:1d:6e:fd:66:
                    f1:b9:58:26:55:e8:32:ad:da:27:b7:2a:dd:22:00:
                    5f:e4:3d:a1:35:95:25:ae:cf:45:86:23:ba:dd:28:
                    0b:29:9e:fb:41:68:cc:2c:80:cb:83:aa:d1:f2:df:
                    2d:bd:46:84:db:a0:a5:48:ec:bd:ec:0c:52:e7:30:
                    5a:16:ae:69:1a:e6:60:04:da:0a:27:66:92:3f:da:
                    b4:2a:29:eb:1e:08:08:db:1c:18:bd:c3:fe:46:98:
                    79:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:08:80:2B:15:C6:DE:C8:26:64:0E:20:A5:BB:CB:71:AB:74:C5:7D
            X509v3 Authority Key Identifier:
                keyid:D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:2b:7f:49:a5:fe:7f:8b:d0:0c:80:c8:34:9b:b4:ef:2c:ee:
         c4:2d:4c:44:a3:be:ff:8e:d4:ed:0a:b9:04:1a:70:82:31:00:
         39:96:7e:bf:f9:3c:f3:5d:79:4b:d9:e0:c8:7f:7b:ee:f2:22:
         16:a6:bc:61:c8:58:6e:c0:33:b8:cd:a4:d5:aa:a1:15:4e:13:
         63:ba:83:59:5d:d4:08:3f:ef:90:02:9e:ed:10:29:b8:93:43:
         bf:cc:86:98:d7:cd:5d:20:7a:d9:5c:f7:cf:dc:46:b4:f4:ed:
         84:05:72:80:90:1c:99:74:3d:bb:b9:87:04:1b:29:56:3a:60:
         57:ce:8e:0b:c4:fc:47:c8:b7:2b:35:49:0c:72:8b:72:dd:17:
         10:e6:03:98:96:7b:99:2d:1d:0f:55:ed:7b:63:ee:45:47:f8:
         50:42:b0:26:e2:72:22:81:80:5f:0f:d2:dc:97:31:a9:bf:85:
         48:82:ef:91:39:ba:d2:c2:64:97:ae:55:06:39:6e:3f:3b:29:
         a7:f3:61:4a:09:54:43:bf:96:f3:d8:94:25:c7:c9:37:80:fe:
         ec:da:b9:85:51:da:e5:11:0b:b3:26:9f:3b:38:10:83:56:ca:
         f0:d4:2d:25:f9:2e:25:8f:85:26:42:4d:9a:59:c0:58:ab:2b:
         8c:56:d4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:44 2026 by rpki-client