Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
File:                     0PFLigjLX4BX1IsD5T9Fi44f7tY.mft (raw, json)
Hash identifier:          BazrcDFqGn1y35Y1su7SFSlhtMzOzdZpoqMvoJR6bc8=
Subject key identifier:   8B:10:99:2B:E4:02:F9:BF:EB:F7:1E:D4:48:BA:CA:4A:A1:AB:62:E0
Authority key identifier: D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6
Certificate issuer:       /CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6
Certificate serial:       019E30A96CC041216DD44611125FC490EC6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
Manifest number:          055F
Signing time:             Sat 16 May 2026 12:01:10 +0000
Manifest this update:     Sat 16 May 2026 12:01:10 +0000
Manifest next update:     Sun 17 May 2026 12:01:10 +0000
Files and hashes:         1: 0PFLigjLX4BX1IsD5T9Fi44f7tY.crl (hash: K/pfE6iF3EHaPPg2jVatPFK+iOZJIMbE+XCeVPk4fko=)
                          2: d47T8ORHHk4caoplxkWo9jdbvBo.roa (hash: O+AW/XVQJP2vo9oGn03UxDaB3BH61OdIhMeMe+ELWp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:6c:c0:41:21:6d:d4:46:11:12:5f:c4:90:ec:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6
        Validity
            Not Before: May 16 12:01:10 2026 GMT
            Not After : May 17 12:01:10 2026 GMT
        Subject: CN=8b10992be402f9bfebf71ed448baca4aa1ab62e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c2:37:24:ec:7c:31:a3:ec:20:32:af:5f:45:
                    70:43:2f:06:46:2d:90:13:cb:ee:0b:a9:60:44:72:
                    65:b2:cc:ca:a8:30:83:dd:83:a6:06:e9:26:77:88:
                    0e:b7:23:fc:c0:95:ad:03:c3:4d:23:53:b0:e8:c8:
                    8c:43:e3:99:cd:ab:84:f9:ee:6e:a0:dd:ec:00:3d:
                    c0:d6:30:1e:4e:86:ae:40:29:74:a1:be:1a:28:75:
                    db:c0:4b:19:e5:ed:c2:4a:14:90:61:ff:c5:b0:98:
                    93:30:91:31:08:e0:5f:c8:3d:f1:50:8f:72:ba:dd:
                    6d:9a:ea:95:20:17:9c:93:a7:37:5c:f6:65:fa:ef:
                    98:d5:c0:ba:59:0d:57:79:b8:77:47:0f:04:ed:40:
                    cc:f6:c3:2b:c7:ad:2d:1b:4b:39:30:ad:c2:93:3a:
                    8b:7c:bb:71:f2:11:ea:b5:1d:59:d1:f7:59:74:fe:
                    3d:72:f4:d8:c4:43:91:81:7b:89:4f:8a:b9:63:f3:
                    78:23:86:b1:b8:7d:0e:76:41:f5:2c:65:36:bf:4c:
                    ed:69:18:15:f1:29:60:09:82:4e:32:96:93:7c:14:
                    1c:06:83:f7:f0:f7:17:b3:86:d7:9f:e5:cb:39:36:
                    7b:b3:9e:8e:61:97:e3:d7:f8:10:3c:1d:a8:93:e2:
                    76:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:10:99:2B:E4:02:F9:BF:EB:F7:1E:D4:48:BA:CA:4A:A1:AB:62:E0
            X509v3 Authority Key Identifier:
                keyid:D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:d7:d2:51:b9:f3:f0:d5:a8:cc:ac:b9:df:03:f0:f5:6f:bf:
         f7:69:00:d9:65:c0:f6:3f:3c:84:8c:e0:c9:17:59:fe:f9:55:
         c4:e4:f1:8e:0a:4b:8d:99:c2:db:a4:02:ee:64:97:d1:96:06:
         b6:b4:1a:5f:10:37:17:b9:3d:39:0a:47:09:6d:de:d6:ce:a6:
         52:1d:69:c8:d2:65:36:d0:51:95:6f:7a:d9:be:be:40:90:ed:
         4b:0a:37:be:43:89:f5:a8:a8:e8:19:e3:77:bd:c0:2b:c8:06:
         e3:de:f2:32:0d:a2:f9:88:c7:22:66:79:3c:74:6d:87:c2:9e:
         66:94:1c:04:30:4b:d9:01:30:72:7f:07:ea:ca:2e:e1:26:f6:
         28:62:58:18:d4:3b:7f:0f:f5:c5:28:55:e3:7b:e2:38:ce:b5:
         f7:32:98:79:8e:b7:76:31:3a:e6:df:94:a6:4c:b8:ca:d2:2b:
         18:e8:27:eb:05:82:ad:12:d9:72:bf:ca:0b:8e:01:99:4e:8d:
         88:d0:83:3d:5c:42:32:4d:dc:a5:ed:59:67:7a:86:e7:e7:eb:
         53:e3:ff:74:f2:3a:90:0f:18:f7:68:49:70:d9:c2:2e:9a:9c:
         d1:9d:52:d5:4d:26:7f:ce:f6:be:df:b8:97:74:a3:ee:ee:b7:
         07:54:97:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:53 2026 by rpki-client