Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File:                     0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier:          woWQuWWxZpWufyZxA9iBmu1+vRomSYxAsIaBy2Q/jEc=
Subject key identifier:   C7:60:2A:D6:80:4B:2F:F4:76:10:91:8C:82:1A:6A:15:B9:E2:38:AE
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer:       /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial:       019E3072EA45B2ECF809CBF7F88B093037EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 11:01:37 +0000
Manifest this update:     Sat 16 May 2026 11:01:37 +0000
Manifest next update:     Sun 17 May 2026 11:01:37 +0000
Files and hashes:         1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: JBl/vsD3xlcVajThWu0d2qYjRb2Ki1+B/VSb2qQ5nBg=)
                          2: NP9SfFGYsYXsch7Dr3qELq74PLU.roa (hash: fuLAQTL3YUInXQtx9TnphHOeZzSHEh2X+xButoDoLCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:ea:45:b2:ec:f8:09:cb:f7:f8:8b:09:30:37:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
        Validity
            Not Before: May 16 11:01:37 2026 GMT
            Not After : May 17 11:01:37 2026 GMT
        Subject: CN=c7602ad6804b2ff47610918c821a6a15b9e238ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8a:5d:e1:6a:ad:b8:d6:42:2a:2a:25:2b:cd:
                    33:53:48:f0:d4:9c:d3:c0:e2:e5:08:5f:09:37:c4:
                    98:fc:d8:05:b7:fd:62:22:2d:4d:43:5c:6d:0a:bd:
                    b4:6e:98:99:78:b4:ba:75:ab:b9:3d:66:a6:38:fb:
                    ba:da:ec:62:2d:18:1e:a1:c1:92:5c:ca:8c:cb:2a:
                    42:e6:01:e3:ab:09:f3:9b:80:58:a6:52:79:4c:38:
                    4e:29:a9:8c:c2:44:b3:94:67:44:38:4e:c7:26:16:
                    d7:69:20:32:7a:7d:0b:0c:ed:a2:4b:f3:9e:20:07:
                    47:39:33:11:9b:ae:b5:4c:a3:3f:00:ce:af:1b:30:
                    bf:3c:2d:9e:de:d7:a5:9f:54:a1:0a:ed:d7:a6:4c:
                    a6:9d:3d:2c:85:65:24:0c:f4:94:a8:dc:17:28:b1:
                    8b:38:d4:a0:c1:b2:9c:2b:e4:4c:7b:51:2a:53:86:
                    d9:dc:ee:40:6e:73:11:53:31:8c:cb:4d:3b:6d:57:
                    62:30:53:f1:1b:28:41:31:84:5a:ad:db:2a:1e:18:
                    2f:20:b8:b0:10:c3:4a:c6:07:ce:f2:b3:50:e4:0b:
                    bc:97:a4:46:87:9c:31:cb:71:d9:5f:d8:9a:dd:00:
                    d0:f4:f4:1c:0f:83:44:22:22:17:1b:27:95:e7:c3:
                    dc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:60:2A:D6:80:4B:2F:F4:76:10:91:8C:82:1A:6A:15:B9:E2:38:AE
            X509v3 Authority Key Identifier:
                keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:97:80:3a:f7:e8:ef:b8:05:35:35:eb:95:d6:0d:fd:5e:a6:
         c3:5c:0c:4b:10:56:27:94:55:05:96:45:26:c4:82:c3:12:98:
         86:a1:e9:c2:38:ea:f5:9e:e5:5c:e8:11:e9:40:3a:ab:7d:8f:
         23:a3:39:5c:91:f7:e4:69:d1:e7:7e:5f:20:08:0c:d0:7e:d2:
         ae:6f:4b:f3:ce:17:ef:14:0f:84:d7:99:c0:b7:68:a7:33:b7:
         0b:08:00:79:f3:89:ff:3d:2c:92:39:2e:e5:be:16:8e:16:a2:
         2f:6e:29:48:58:83:76:28:15:df:ab:cb:fd:5d:9c:e0:0b:d5:
         45:7d:50:6f:02:ef:d7:7b:0e:18:e6:75:10:e9:25:5b:59:5e:
         65:6e:ee:4a:67:0c:7f:83:8e:a6:d2:97:04:55:0d:ee:07:d8:
         e1:9e:02:dd:9c:75:1d:f1:32:21:0b:91:80:e0:65:4a:f4:62:
         00:07:70:00:5b:60:b9:b4:91:32:e9:78:3b:37:64:72:ab:46:
         77:d8:c5:5d:d1:5b:d0:66:63:7f:62:e6:e8:28:92:47:c7:6e:
         2f:6f:07:12:25:b8:df:61:9a:a0:c1:81:a4:31:8e:6b:08:c7:
         fc:b4:63:68:83:2e:19:9d:bf:88:6d:ac:e4:c7:e2:7e:97:5a:
         11:33:4e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:22 2026 by rpki-client