Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
File:                     0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft (raw, json)
Hash identifier:          eBHQjp7yzTnQ48MJhrrVcay+s3KlxQ/tam/kgyA3Ie8=
Subject key identifier:   B2:20:1A:A4:A7:71:DF:80:A6:03:32:04:AD:B5:D4:2A:FB:3B:93:43
Authority key identifier: D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
Certificate issuer:       /CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Certificate serial:       019E30A96336D5B780D9D8791B387D26A2E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 12:01:07 +0000
Manifest this update:     Sat 16 May 2026 12:01:07 +0000
Manifest next update:     Sun 17 May 2026 12:01:07 +0000
Files and hashes:         1: 0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl (hash: eSRbcvSsyf8dWQUL06jBKPyxEQd/d6I4jUePS1Phuo0=)
                          2: 0i0PYX0obfO9VURW0I4RA1U23yA.roa (hash: +RcEhC8AwdCvLX2rfo02Ca2oOyM5cBarb0CVTNYTosM=)
                          3: O6eW5NgA4SYtR0QdMpos9kGVbx8.roa (hash: vNWr6WjAQo4/b29D3hI5zGTafpoZZFqPo9hkvS1ZF+M=)
                          4: rVuwmGnwYv_V6whaEGlCtt_t-jU.roa (hash: eOWfhOukOgYiBn4QdoGi9zhMMnx1blKy6/IzloDdoFI=)
                          5: sz2hM6b0kWi5lGSZOx8xQWLEDac.roa (hash: WNOAe/3pRo5H7hWt2dUEHtw/6Zr0ujDafm8V0QNv03k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:63:36:d5:b7:80:d9:d8:79:1b:38:7d:26:a2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2075c84f529c87dd85fd4afea4e0934366af54a
        Validity
            Not Before: May 16 12:01:07 2026 GMT
            Not After : May 17 12:01:07 2026 GMT
        Subject: CN=b2201aa4a771df80a6033204adb5d42afb3b9343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:41:be:a5:0a:06:38:c0:b4:d4:fb:13:e9:d4:
                    13:71:5c:13:b3:80:30:ad:19:a9:34:29:8c:ef:fd:
                    9b:95:20:5a:63:06:3f:e8:44:e8:ba:43:ef:2c:df:
                    d0:d4:ab:df:e8:24:98:2d:12:c3:b0:ce:5d:1e:2c:
                    89:17:0f:ed:de:2c:75:63:6d:ff:94:70:33:bb:f0:
                    d0:c5:c3:e7:3e:e4:fd:59:dc:ca:ee:c6:fb:5d:8d:
                    b3:5c:b4:96:2e:3b:9a:22:5f:6e:4b:d1:bf:b1:64:
                    00:55:51:fe:e6:6a:42:db:30:f7:c3:c4:f4:80:11:
                    a2:d8:26:35:15:73:af:24:f0:5e:00:4e:01:d7:6f:
                    31:c9:30:58:2c:80:44:69:b9:41:16:39:64:ac:82:
                    7d:de:d3:c2:f1:2f:1b:16:6c:3f:62:27:c2:04:6a:
                    51:77:6a:f9:67:f3:bd:ca:b2:b8:3e:02:01:08:27:
                    de:41:d7:5e:dd:76:c2:c3:3c:1c:e2:e1:65:04:16:
                    03:96:b3:1a:6b:fa:5d:3d:4f:09:39:13:ca:de:4f:
                    e8:81:d9:52:36:76:90:62:9f:87:de:74:a3:39:70:
                    e0:6f:51:ca:98:d4:6c:58:32:11:27:c8:95:45:28:
                    c4:95:a7:6b:59:8f:f7:7f:64:6f:b2:55:d8:2a:8c:
                    b8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:20:1A:A4:A7:71:DF:80:A6:03:32:04:AD:B5:D4:2A:FB:3B:93:43
            X509v3 Authority Key Identifier:
                keyid:D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9d:ec:4b:c8:db:78:be:e8:24:72:6d:9b:69:7e:1b:fa:59:
         83:3c:ba:53:d7:21:de:8c:0b:5f:7e:89:55:50:9d:3d:81:c0:
         e1:3d:33:19:e3:97:c1:9d:85:4f:58:cf:e8:ec:e4:d3:1f:f7:
         a0:70:97:74:7f:75:50:35:20:b8:31:2b:61:86:d5:26:8f:53:
         d7:29:89:98:93:15:30:0a:b9:57:e8:c0:61:1d:87:d1:16:9c:
         7e:0d:09:d8:92:7f:69:3f:0d:9b:0c:11:e2:b4:a7:4c:4b:dc:
         24:dc:29:35:40:57:3f:c9:45:15:50:8b:e4:0f:3c:37:aa:54:
         0f:34:e9:fe:86:d7:d8:19:d9:55:7f:a6:b5:be:25:ee:c5:81:
         9f:a0:3e:a6:6e:a7:a6:5a:3f:d6:b5:d9:dd:aa:7e:25:96:fe:
         5b:76:77:37:d7:71:9d:16:92:3b:c6:ba:37:f1:62:61:3f:91:
         25:60:b0:40:a2:f0:72:58:12:9e:d4:86:6e:1b:23:4c:42:b0:
         40:68:4e:f8:08:bf:25:86:53:2f:46:07:95:41:46:64:97:35:
         29:d7:aa:cf:7d:ec:b5:64:4e:92:7e:33:ac:fa:cb:70:97:1f:
         f7:a8:8c:2d:2e:f4:46:43:cf:ab:10:d0:4d:69:b5:bf:fb:b8:
         48:4d:32:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:35 2026 by rpki-client