Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File:                     CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier:          AdQdyROYADORJtxlOpEnBK3gCve7iTsSIzxQEfiFhuk=
Subject key identifier:   6F:6B:6F:11:89:04:D5:FE:4B:33:0C:BD:A3:D4:AD:5E:06:67:A2:46
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer:       /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial:       019E314DD851D5666ACBE232786934540FA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number:          169D
Signing time:             Sat 16 May 2026 15:00:45 +0000
Manifest this update:     Sat 16 May 2026 15:00:45 +0000
Manifest next update:     Sun 17 May 2026 15:00:45 +0000
Files and hashes:         1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: DM/QOljUu/w8ZnaBePTOZsEe3JLQYlljCcZ7saFLf3k=)
                          2: Fr5UXfjdMrhEHYQ6Xdia0OdmNWk.roa (hash: 30Ofi4XCsm5vnfPYfxuSwPdN95VWJBJfoWiBcDk1LZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4d:d8:51:d5:66:6a:cb:e2:32:78:69:34:54:0f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
        Validity
            Not Before: May 16 15:00:45 2026 GMT
            Not After : May 17 15:00:45 2026 GMT
        Subject: CN=6f6b6f118904d5fe4b330cbda3d4ad5e0667a246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:eb:a6:d4:f6:87:d1:bf:b7:c9:39:8a:a4:46:
                    a6:8c:f4:d0:7d:aa:90:f3:91:85:ee:ce:5b:28:89:
                    1f:d7:0e:49:3c:10:5a:ad:c6:42:d9:b0:7c:16:ca:
                    cc:61:73:96:69:a1:f9:73:f8:f5:19:1e:f1:5a:a2:
                    82:f9:3a:28:42:8d:db:c9:1c:a2:2f:c7:e3:6a:1e:
                    5a:6d:17:6e:57:38:33:f5:63:85:8c:4b:7b:6a:10:
                    15:79:e3:d9:ba:16:3e:90:ba:40:6d:60:57:e0:82:
                    f2:4c:0f:2b:5a:5d:28:ba:72:86:93:d3:92:88:db:
                    dd:fa:a7:54:0a:bd:36:6e:4f:28:6f:af:3b:c8:60:
                    27:09:da:2d:81:0e:ff:0c:05:d4:f4:47:9c:7f:eb:
                    7b:90:bf:09:ea:4d:ec:49:45:24:29:80:a3:4e:99:
                    bc:eb:90:c2:c3:03:31:00:8b:fd:32:59:d4:92:4f:
                    9d:78:06:49:72:a9:7e:d7:0d:f9:12:8b:3a:82:4f:
                    94:b5:c7:3d:a5:03:95:60:8e:bb:b1:0c:2d:48:2c:
                    fa:78:36:ea:d3:2d:d1:43:2f:fd:92:df:23:06:e1:
                    78:57:62:3c:4c:f0:5f:f3:e7:95:c3:93:37:a0:ed:
                    d9:2c:4d:14:3f:1b:e2:08:89:78:f0:75:b4:8a:03:
                    57:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6B:6F:11:89:04:D5:FE:4B:33:0C:BD:A3:D4:AD:5E:06:67:A2:46
            X509v3 Authority Key Identifier:
                keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:1b:d6:97:29:9d:7c:6d:d8:86:e9:6d:c5:a4:b2:20:16:53:
         d7:e7:4a:ce:bd:ae:f3:33:c2:f9:70:d6:d9:92:f3:10:63:fc:
         e4:64:7a:32:9e:f5:b0:45:85:a7:5c:6e:c3:d4:60:69:af:e7:
         b9:3a:d8:12:d9:0a:6a:c1:55:21:f4:ae:07:c8:e1:90:5b:72:
         30:34:88:1f:ca:9c:67:80:c2:c4:bf:b8:29:a5:f6:d8:a4:ce:
         81:2f:84:cf:99:40:3e:c6:a1:f0:2d:7f:65:4f:b3:84:f0:5b:
         74:a6:c9:32:26:17:12:0e:10:b8:cb:8f:8c:1f:6d:79:86:d8:
         0b:7f:06:0b:dd:7c:73:4d:f9:18:1d:1f:fc:f3:38:35:df:7a:
         20:9c:1e:5d:bf:d7:ec:26:da:76:67:fa:b3:c4:b0:b2:fc:19:
         7e:2e:ea:9f:75:ad:15:1b:31:e1:12:08:bd:2c:30:ae:90:4d:
         2c:cd:72:f8:59:77:c1:3f:90:54:fa:10:de:24:94:3e:a7:84:
         3d:1c:1a:64:e9:7e:03:06:c7:94:44:40:b2:69:d7:f5:96:a3:
         53:c1:6c:4a:44:e3:91:7a:4d:be:57:97:07:dc:b8:a3:37:31:
         e7:c7:7e:8e:66:3e:15:d5:f3:99:02:cc:a9:98:c6:4e:dd:c6:
         4d:9c:00:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:27 2026 by rpki-client