Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
File:                     Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft (raw, json)
Hash identifier:          nfYMDcWsZxquxbCJdN09nKMzqJ2y529Ve4JTLNqJ/nk=
Subject key identifier:   9A:4D:71:6E:27:9D:43:B2:A4:CE:8C:76:B5:32:17:28:85:90:55:E0
Authority key identifier: 0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
Certificate issuer:       /CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Certificate serial:       019E303B1708B11DAD72D7D4EDB1306A5984
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
Manifest number:          0A40
Signing time:             Sat 16 May 2026 10:00:39 +0000
Manifest this update:     Sat 16 May 2026 10:00:39 +0000
Manifest next update:     Sun 17 May 2026 10:00:39 +0000
Files and hashes:         1: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl (hash: tHjl29Gdn06GMp55CPfHkrHujC0N/tmkdVNtMtVzITU=)
                          2: eIMZBtMcWMvFB1hL6z_nOfKcJpw.roa (hash: fpooL7KmV8Sp+0vA+7uC8WsK6RO/CGya0r0FndhdjC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:17:08:b1:1d:ad:72:d7:d4:ed:b1:30:6a:59:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
        Validity
            Not Before: May 16 10:00:39 2026 GMT
            Not After : May 17 10:00:39 2026 GMT
        Subject: CN=9a4d716e279d43b2a4ce8c76b5321728859055e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:41:d1:4b:df:2c:86:46:83:c5:f4:0b:ad:12:
                    6a:6a:7b:c0:0c:c4:1c:6e:37:27:e5:d4:98:f8:7b:
                    4a:fa:63:97:f3:c5:1b:2f:cf:22:90:71:16:2c:8d:
                    98:02:28:bb:04:2b:b2:c4:3c:37:53:30:1b:0a:dd:
                    3f:f9:79:f8:ba:a6:d2:3a:11:0f:4c:9d:95:f5:14:
                    93:33:ee:35:56:e0:e9:fc:d6:10:5f:e9:c3:5d:3f:
                    b5:e4:f6:51:f9:fd:f7:47:ef:05:53:d5:30:74:3d:
                    ec:29:fd:01:69:18:6a:74:ec:e3:fc:ca:74:1b:58:
                    b3:15:df:67:4a:58:31:00:74:94:7e:09:b8:61:3d:
                    5c:18:e7:2e:f0:15:05:38:42:75:e8:d9:f2:d3:fd:
                    e9:97:2a:6a:74:d0:d9:3f:df:e7:78:7d:29:40:86:
                    34:ff:0d:0c:6f:26:0e:2f:1d:90:a0:07:12:4b:8b:
                    6d:a5:28:cc:51:ba:79:54:fd:51:ee:37:8a:57:5a:
                    41:41:2c:f5:b7:ef:bb:eb:c6:47:cb:57:9f:38:39:
                    a9:17:ed:e6:33:9d:c7:68:1a:77:94:6b:d8:de:7c:
                    d1:cd:40:aa:78:6e:61:0e:d8:2e:9b:05:cb:8a:19:
                    e0:3f:bb:0c:7e:ba:25:0c:8d:dd:ad:37:fe:18:b7:
                    42:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4D:71:6E:27:9D:43:B2:A4:CE:8C:76:B5:32:17:28:85:90:55:E0
            X509v3 Authority Key Identifier:
                keyid:0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:59:80:09:65:ff:18:43:91:73:16:db:1d:fb:8f:0b:18:6c:
         1f:a8:2f:82:c0:19:29:ba:ed:33:3b:fd:d4:7b:37:07:09:92:
         08:21:c0:0b:c5:1c:a2:40:18:96:39:b8:28:7d:38:a2:c4:0c:
         6e:45:7c:9a:a3:ed:f0:74:3c:23:3d:01:e4:e7:f8:d9:6b:c1:
         9c:ec:c6:84:8a:74:8e:4c:d9:7c:59:2a:f1:b3:11:e8:02:27:
         21:48:5a:f6:69:6d:e4:66:2f:a0:2b:2c:f2:62:ff:73:1a:b1:
         20:f4:89:8e:ae:26:69:f2:dc:b2:cc:80:93:18:c5:15:2e:da:
         ac:df:c5:da:f1:d3:c3:1c:3a:a7:ba:a7:ac:5c:3e:69:12:2b:
         ad:7f:93:1e:59:bf:1e:e8:bc:61:ad:61:c8:95:a0:5e:64:cf:
         8e:21:23:f7:ec:d2:5e:7a:ed:37:6a:09:bf:e0:fb:16:2a:a7:
         f0:95:58:30:46:df:49:94:5a:b6:f1:39:f6:f4:9a:a7:4b:ae:
         06:3a:f6:93:06:84:40:ab:bb:0d:96:eb:bd:9b:ad:9f:57:85:
         9e:ee:66:9e:0e:16:b9:d3:bb:cf:46:07:9c:59:f2:47:c4:c6:
         fe:18:ca:41:28:fd:13:6f:9b:fd:ce:7b:8a:7a:6e:6d:8a:1a:
         2a:b5:b8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:20 2026 by rpki-client