Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
File:                     0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json)
Hash identifier:          Qn4jtX3DOjGSoadVUMC/iQ0rZMbOFD0sc/roJGMkr6s=
Subject key identifier:   00:26:0E:98:4A:A6:32:A5:99:45:85:54:D2:A4:92:77:0D:47:28:FD
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Certificate issuer:       /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial:       019E30050CF131AC401F67AB6701DF6E4DA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 09:01:37 +0000
Manifest this update:     Sat 16 May 2026 09:01:37 +0000
Manifest next update:     Sun 17 May 2026 09:01:37 +0000
Files and hashes:         1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: ZUH9BzFEZ6ENLnRt/Uoos5SiUw+XieJLF+JEUXmYhYw=)
                          2: lNZ8b2GqipxFmFvx0Lw_q8EwfSo.roa (hash: qDLpSNqlibtH6zRBXzlD7tUyev4dQUA/1eIb4IG63oo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:0c:f1:31:ac:40:1f:67:ab:67:01:df:6e:4d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
        Validity
            Not Before: May 16 09:01:37 2026 GMT
            Not After : May 17 09:01:37 2026 GMT
        Subject: CN=00260e984aa632a599458554d2a492770d4728fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:68:e7:ac:e9:85:81:d3:30:79:2a:33:4b:
                    26:ad:3f:8a:61:ad:db:6b:94:64:9e:87:68:78:c4:
                    da:92:90:61:4b:6d:07:57:f4:8c:a7:9f:57:f7:aa:
                    fc:33:86:d1:65:51:72:42:69:a3:62:85:df:bd:53:
                    97:66:ed:67:bd:8a:fc:fc:7c:6d:cd:5b:e5:49:3b:
                    3d:86:86:43:90:44:b5:df:2f:9c:49:c6:6c:03:a2:
                    ac:fa:47:dd:e2:46:f2:0e:d3:b2:af:ec:3f:2e:5d:
                    7f:c2:37:5e:fc:90:6b:05:33:ef:d2:93:c2:67:7d:
                    b8:14:40:48:6e:06:0e:68:91:40:41:c9:64:81:a7:
                    d0:71:e7:91:75:96:83:9b:76:07:e9:7f:1f:45:61:
                    53:45:91:e4:2f:f4:f3:82:a9:37:8c:76:31:0f:a4:
                    e4:90:30:a1:f7:52:45:9d:18:64:fd:7e:97:64:e4:
                    a7:ee:71:53:33:3b:2f:51:6f:d4:a5:22:3e:34:29:
                    18:d0:1a:b5:c1:88:15:b5:f5:5d:59:72:5d:80:e0:
                    51:91:f5:6f:5c:8a:91:c9:9b:0a:c0:2d:0f:7c:e2:
                    05:e7:f4:fb:3d:5e:37:b1:fb:f2:94:fb:4f:55:9c:
                    60:57:4f:32:63:8c:af:7f:1a:67:77:c9:f7:cc:cc:
                    4f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:26:0E:98:4A:A6:32:A5:99:45:85:54:D2:A4:92:77:0D:47:28:FD
            X509v3 Authority Key Identifier:
                keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:02:c7:a4:05:a5:15:66:70:ab:8a:af:bb:b8:9c:d1:f1:3e:
         b6:0f:49:4c:cf:35:a5:d2:ef:7a:d2:fd:57:73:10:52:c0:2a:
         6a:f8:62:47:cb:d9:3e:96:2e:a9:88:c7:a9:56:14:7c:c1:59:
         55:44:86:53:0b:67:b6:8e:27:d4:cb:3e:46:c2:6d:79:f1:ce:
         fd:c7:18:80:7a:73:27:eb:7b:69:8e:1d:69:a2:a1:17:c6:f5:
         80:eb:92:15:ee:0f:5f:38:85:82:69:8d:d8:f1:2a:df:6b:f7:
         02:5d:cd:a6:7c:d7:3e:96:a3:54:58:64:5c:64:54:e6:a2:d8:
         f2:3f:37:92:b2:cf:00:6e:78:db:e2:d2:e6:9a:bd:cd:e6:d4:
         5b:f7:05:8c:6a:d8:db:f8:c3:8a:23:b2:e8:a6:b3:eb:30:a5:
         ba:cc:46:e8:60:08:25:bb:84:90:5a:ea:2a:d7:76:0f:5e:f4:
         5b:0d:f1:34:99:7d:58:99:b6:36:ab:3d:f5:2c:1b:6e:74:5a:
         c6:74:1e:ad:02:6a:c1:1e:33:d2:ec:aa:1e:2e:57:24:7c:e6:
         ad:10:ca:05:3e:03:4c:88:1b:88:fd:a2:7a:2c:2c:d2:96:03:
         8d:2a:62:1a:8f:bf:f3:8c:0b:64:d6:c2:2d:a2:ed:13:57:ef:
         9c:1a:f9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:43 2026 by rpki-client