Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
File:                     02v9kovMtCrZxGilUqtzk_3YcJU.mft (raw, json)
Hash identifier:          FyLJOpCNB8N/5zXweKzN5JwCre1RdKsMYE0TuLmyrI0=
Subject key identifier:   77:A6:01:49:CB:8F:8D:F4:3C:95:65:B5:24:43:92:4C:AC:7A:74:35
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Certificate issuer:       /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial:       019E307280B1F6E84CB69A540368FDD5653D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
Manifest number:          0CD0
Signing time:             Sat 16 May 2026 11:01:10 +0000
Manifest this update:     Sat 16 May 2026 11:01:10 +0000
Manifest next update:     Sun 17 May 2026 11:01:10 +0000
Files and hashes:         1: 02v9kovMtCrZxGilUqtzk_3YcJU.crl (hash: 5PiBPkS2MXOxEm6qScn9G1UMfcECCJ8OvAebqNKSdtk=)
                          2: EMHyn8USQYYAwip53OFX3GcU8Ig.roa (hash: GKc0X/C0dqDFZ9/iYyqKAh6YmFA9MsPi0sI8GP0tfoQ=)
                          3: OUo2-_z7ZwJP4yvmGUs1ZUP-ALU.roa (hash: kUKNwP9z4WpXOZS3n+mI9u2cgdXowzL+jJ2s8nNJ/ng=)
                          4: _mDWBpNalZX-rGj5Winjf39L6Zw.roa (hash: pVvGevMN46/pQnsg9nZSouyWirGGwM8SkSaHOD7+jpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:80:b1:f6:e8:4c:b6:9a:54:03:68:fd:d5:65:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
        Validity
            Not Before: May 16 11:01:10 2026 GMT
            Not After : May 17 11:01:10 2026 GMT
        Subject: CN=77a60149cb8f8df43c9565b52443924cac7a7435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8f:ae:0e:15:79:67:cb:f0:91:66:85:0c:4d:
                    51:51:47:a2:4e:14:b6:c8:60:f5:b2:af:2a:aa:fd:
                    e8:7a:a1:8c:c7:d0:7d:9f:41:c0:83:8f:1c:5b:5a:
                    5a:2f:ff:c9:ef:9c:3d:f0:bd:bb:15:b7:45:ee:f8:
                    cb:61:ad:43:f7:38:41:1f:5c:03:39:69:f3:10:e3:
                    72:67:25:5b:3f:6a:d0:05:9f:56:55:f7:74:7b:a3:
                    4d:4a:eb:c6:de:36:eb:30:f9:ed:19:28:0e:4d:59:
                    28:66:6a:16:f2:4a:51:88:68:cc:cc:33:7b:65:58:
                    f7:a3:8b:51:cc:bf:02:7c:1c:80:32:18:e4:aa:7a:
                    c3:6b:af:63:64:05:35:03:cd:f4:18:c8:fd:8b:50:
                    c1:ae:23:90:7d:c5:0c:70:84:71:77:8c:15:7a:1c:
                    dc:18:e6:29:37:4d:58:1d:16:c8:52:cf:37:a8:76:
                    c2:3a:08:9d:1a:5e:08:a9:c0:d3:3f:1d:5b:c0:44:
                    f6:db:51:7f:62:89:d9:2a:a9:a8:ff:8d:ea:22:2b:
                    54:f9:da:a3:33:ee:42:f1:ca:43:56:4f:c5:be:06:
                    10:53:eb:4e:60:81:6f:41:03:cf:6a:68:05:b9:c9:
                    98:34:1e:55:7d:0d:62:05:a7:36:57:83:4c:6a:d1:
                    63:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A6:01:49:CB:8F:8D:F4:3C:95:65:B5:24:43:92:4C:AC:7A:74:35
            X509v3 Authority Key Identifier:
                keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:93:9c:10:41:7e:c0:b0:e5:49:fe:b1:d8:e1:3c:86:5d:e1:
         a3:f0:5f:e7:26:30:95:20:a5:b8:92:6a:00:24:3c:c9:36:30:
         21:a3:24:48:20:9d:a8:db:10:9d:b5:c4:8b:10:36:9e:b1:a9:
         c5:69:93:07:da:fe:6d:53:f1:da:1a:53:45:16:b9:94:9e:3a:
         06:cc:0d:64:2e:cb:08:8d:a0:89:cd:3b:78:53:0c:ab:49:ed:
         41:e1:91:47:ac:a4:e1:d4:65:5f:08:6b:bd:fc:a6:99:a1:10:
         94:53:0d:fd:87:e9:bc:30:44:2c:ad:75:ce:18:a3:97:43:1f:
         1b:55:c8:8e:69:cd:49:04:91:48:0d:f5:0f:5c:55:63:86:6f:
         9a:47:a6:e4:7f:23:2f:c9:90:12:ee:94:f2:ea:ab:25:18:33:
         45:85:81:79:97:5c:a6:b4:6a:d9:51:ca:a8:6d:1d:1c:1f:4d:
         fe:b4:e2:3e:9a:19:1d:84:39:35:7e:9e:01:6c:56:d7:ac:bf:
         fb:d5:1a:c1:09:45:62:ad:26:45:af:4b:e4:d0:1d:d1:f8:4e:
         78:17:61:96:18:31:91:f6:8e:f3:b2:30:88:6d:c4:cf:ac:59:
         fd:7d:4f:d1:3c:05:c3:02:d8:7f:12:d2:8a:2e:fe:5f:4a:58:
         d7:66:df:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:23 2026 by rpki-client