Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
File:                     D1T54Kep6u6svFsQMQI1t_0O7QM.mft (raw, json)
Hash identifier:          UOa2kYkx47Acc9t42ss6hrIJ8moxHMzrV6C3sLJKOJg=
Subject key identifier:   06:FC:B0:EB:4B:DC:64:CE:21:88:14:6C:37:FC:88:37:DB:EF:38:0D
Authority key identifier: 0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
Certificate issuer:       /CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Certificate serial:       019E31173D7415FA1B7D2CECC4CBE9C90904
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
Manifest number:          150D
Signing time:             Sat 16 May 2026 14:01:06 +0000
Manifest this update:     Sat 16 May 2026 14:01:06 +0000
Manifest next update:     Sun 17 May 2026 14:01:06 +0000
Files and hashes:         1: D1T54Kep6u6svFsQMQI1t_0O7QM.crl (hash: rJvFU5H9j8qX3AFmEBCzh9AijeXGmVxT2LRkZwUxpgE=)
                          2: QwkbPhXCYpS8QdG4aux1NndNvVU.roa (hash: lPZVn1QVeW2aCEI35oLMwurmWxshCLVoZsSdXVqBOzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:3d:74:15:fa:1b:7d:2c:ec:c4:cb:e9:c9:09:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
        Validity
            Not Before: May 16 14:01:06 2026 GMT
            Not After : May 17 14:01:06 2026 GMT
        Subject: CN=06fcb0eb4bdc64ce2188146c37fc8837dbef380d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:3f:18:19:0d:26:48:fa:c0:d5:be:9c:8e:
                    97:e4:aa:e2:53:0c:d6:39:ba:3f:1f:8c:dd:a4:0c:
                    94:e4:8a:b5:8d:5c:90:90:e5:bd:6b:4f:fa:bf:c3:
                    4a:b8:cb:1f:91:b9:df:3d:ab:cd:5c:d4:be:21:da:
                    05:dd:1f:65:da:27:be:05:20:4e:71:2a:f5:ff:b1:
                    69:e2:eb:8e:aa:af:a2:8b:ae:3c:de:22:92:a9:df:
                    f9:25:0d:3c:bf:d6:17:ab:64:9f:fd:b4:5e:83:15:
                    78:f8:31:81:ae:db:e3:f4:d9:f9:15:6c:58:43:4e:
                    d8:eb:e8:a6:28:7b:8b:de:f1:02:52:87:4b:39:87:
                    76:41:ec:ec:24:21:c2:d0:7e:40:e0:6a:5c:a7:85:
                    12:25:dc:45:d4:0a:62:42:ef:9c:fc:76:ae:be:b9:
                    35:f8:17:d3:ea:86:79:9f:2a:8e:96:9d:df:46:89:
                    8a:46:4b:b9:ea:15:72:27:a4:cf:bd:f8:8a:a8:f1:
                    25:ec:50:8f:e4:01:eb:0c:b7:3b:45:c5:ee:5e:e8:
                    fb:94:8f:8c:43:41:53:f8:9a:ed:1a:75:2f:fe:f6:
                    ac:01:a6:74:ec:10:4a:69:70:89:0c:ca:e6:b1:69:
                    25:a7:ed:9e:da:c4:4c:d2:78:45:b6:10:ae:e3:85:
                    6b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FC:B0:EB:4B:DC:64:CE:21:88:14:6C:37:FC:88:37:DB:EF:38:0D
            X509v3 Authority Key Identifier:
                keyid:0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:7c:6b:eb:94:54:ac:95:e5:5a:58:c8:b0:2a:0e:c0:3e:29:
         0f:33:e9:cc:2a:b7:df:48:07:07:5f:44:d1:78:c3:8d:54:fd:
         15:0b:15:0a:0b:42:e1:c6:ea:c5:40:1a:ee:5c:38:19:f1:f7:
         61:f4:b4:bf:a2:83:48:20:76:2d:83:db:26:97:76:1a:2f:ee:
         31:b5:16:fc:40:d1:df:64:01:ef:e1:6d:62:8b:14:64:8a:d5:
         d7:59:78:cc:14:75:b3:87:0e:0a:4a:e4:b0:7e:2c:ed:94:c6:
         31:2a:85:ef:8c:6d:79:18:34:89:c7:73:50:49:ae:e3:07:12:
         c4:5a:96:e1:c3:fb:83:e3:40:8a:bb:6c:38:cd:7b:37:32:97:
         6e:c3:41:d8:da:4d:a6:f8:bd:54:e0:2b:13:b3:09:a9:eb:1b:
         d4:09:df:e3:7e:60:60:c2:4e:c9:5d:02:f1:05:04:9d:c6:46:
         51:2b:74:1f:e4:ad:6a:a2:67:14:13:e2:a2:a6:fa:9c:d0:b6:
         7a:71:32:a2:60:08:d0:22:af:4d:36:20:b5:26:c0:98:3c:2c:
         ab:81:63:74:88:9d:be:3f:b5:b8:65:53:dd:fd:39:95:b2:3f:
         cf:8b:bf:74:bc:29:7b:81:10:d3:70:78:17:4e:42:96:7a:49:
         04:e4:75:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:38:47 2026 by rpki-client