Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
File:                     DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft (raw, json)
Hash identifier:          IFJnNMyRiVeujSCfQTydE76FxqREIoQmOxMWq8XoOns=
Subject key identifier:   A1:95:9D:21:B0:EE:7F:D2:1A:43:F7:F2:A2:86:F9:27:1E:A1:B3:36
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Certificate issuer:       /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial:       019E300475BBC65468692222F2C4C4C3C175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
Manifest number:          192D
Signing time:             Sat 16 May 2026 09:00:59 +0000
Manifest this update:     Sat 16 May 2026 09:00:59 +0000
Manifest next update:     Sun 17 May 2026 09:00:59 +0000
Files and hashes:         1: 1Jxi3AriRg31UMXbMH3OPiY-5HA.roa (hash: 3Mxy5Zs+xxbHjoz6LYDQ1mtzuO64bgmhPoqFp9H+W6U=)
                          2: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl (hash: 2EuCf4mUUgMVH3ten0W4MOmjPuBv/z3jIVzRIrZp/40=)
                          3: LOr_QJgq7XHCzXGXYreqgevp6GQ.roa (hash: bWW1LhXvcs5ivMuZ9/zxiozy2wvwiqjIIxDSDsGNKBw=)
                          4: LkgYk9rkPhPJQFFGIea1x0t7xaw.roa (hash: eEHFzypg2Qt2Rl1NxfyRu/ldhxRjE/9kd2bXjUoqoAI=)
                          5: SSpWF7_mFd5aLq1v7cUlO_7MUeg.roa (hash: sS4G3ab1K8SPkh8ckCRuErQYvrEjmRohAAhZp3pf6ig=)
                          6: mJmloBqH1ccv7pf7_dE3WxThQ58.roa (hash: L0vhterDlOQyvmoADd6+0joQnbdSLqt2I9Yyqwk+Dl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:75:bb:c6:54:68:69:22:22:f2:c4:c4:c3:c1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
        Validity
            Not Before: May 16 09:00:59 2026 GMT
            Not After : May 17 09:00:59 2026 GMT
        Subject: CN=a1959d21b0ee7fd21a43f7f2a286f9271ea1b336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:b2:c2:ad:c2:8b:9b:64:a8:fc:83:7e:f3:
                    96:9f:6c:be:07:76:e0:f5:b5:36:6f:5e:1c:99:46:
                    c0:62:ad:5d:98:ed:64:8a:b6:fe:72:09:2d:90:27:
                    7b:df:e2:95:80:34:77:f4:f3:19:c1:f9:79:47:49:
                    62:72:0d:d8:4c:23:aa:ad:64:8e:61:77:7c:53:e0:
                    25:b0:7f:57:4c:6a:bf:76:cc:7e:f7:2a:84:5d:2d:
                    55:d3:4f:25:ee:b5:f6:33:99:8e:c2:89:8a:e4:ca:
                    01:60:dc:28:e3:18:16:99:5d:ae:35:d1:6d:49:db:
                    c0:6f:16:41:d0:95:ed:4a:73:51:63:84:96:18:42:
                    13:82:dd:4f:78:72:9c:d2:ec:91:bc:c5:0d:5a:57:
                    31:56:61:50:3c:93:00:59:80:80:5f:0d:14:df:4c:
                    a8:47:da:91:02:4e:18:c7:c4:50:38:49:26:ec:51:
                    31:ed:be:42:18:42:0d:ec:e7:32:d0:0e:da:6d:ef:
                    6b:29:c5:16:ec:da:bc:a2:94:9c:68:cc:91:4b:2f:
                    91:ab:a9:34:a5:05:3d:f6:8f:60:71:5d:64:b5:98:
                    5e:18:59:69:c5:2b:7d:9e:1e:18:b9:90:6e:fd:f2:
                    15:50:18:5b:19:a4:6b:14:0e:4f:f4:b3:d6:e0:e5:
                    23:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:95:9D:21:B0:EE:7F:D2:1A:43:F7:F2:A2:86:F9:27:1E:A1:B3:36
            X509v3 Authority Key Identifier:
                keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9f:48:4f:aa:79:8c:1b:a3:a6:4c:f9:68:2c:95:4f:69:29:
         06:09:32:d0:83:1d:ad:9f:1c:ca:9f:98:b8:c5:f8:cd:b0:fd:
         a9:17:8e:01:7b:ad:89:b6:7d:1b:da:7f:b5:97:3c:98:d7:c2:
         3e:e7:d3:e6:22:c5:70:7e:ec:90:50:54:3c:10:c2:1c:f1:9e:
         ef:80:2d:4a:c2:18:7a:c5:3c:89:64:70:f3:b7:e5:4d:21:97:
         5a:46:b8:b8:86:d6:57:53:ce:07:81:96:5d:c6:50:6d:b2:8a:
         72:fc:4e:e3:ec:04:bb:7b:65:68:74:2a:a4:5f:82:b7:4e:31:
         28:1f:a4:41:50:9b:64:55:68:b2:15:a0:67:74:36:22:d1:43:
         ad:7e:40:f7:4c:6c:bb:2c:44:80:52:21:ba:6a:d4:69:c5:26:
         1c:ed:e3:d4:df:53:46:2b:3a:b6:88:4e:27:81:78:83:5e:6a:
         8d:57:9f:eb:04:b1:b3:db:eb:df:4c:ad:b1:d5:db:e5:23:69:
         f2:9b:5b:62:fd:94:9d:4c:7d:ef:88:2d:71:0d:28:0d:cc:9d:
         64:c4:95:4a:6d:2d:03:f0:08:db:99:36:cf:60:37:33:a6:49:
         35:80:8c:b7:f8:ca:09:e6:a7:a4:e8:02:28:3e:5b:9f:14:ff:
         69:af:95:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:09 2026 by rpki-client