Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
File:                     DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft (raw, json)
Hash identifier:          U/BUO4mlgRJQeEc3ifn5OG7VLxfOVknemKcoWstoS44=
Subject key identifier:   7A:8D:F0:F8:C8:42:7A:B0:D3:87:1C:2B:B4:3F:3F:69:47:F7:F3:DC
Authority key identifier: 0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
Certificate issuer:       /CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Certificate serial:       019E30E009C9F207E404470E838D95CC89C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
Manifest number:          0B37
Signing time:             Sat 16 May 2026 13:00:49 +0000
Manifest this update:     Sat 16 May 2026 13:00:49 +0000
Manifest next update:     Sun 17 May 2026 13:00:49 +0000
Files and hashes:         1: DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl (hash: O6XV/q7YFKyZyXMcM1JI2OC8H8qUoW73tTAzLTUrORQ=)
                          2: n3TEcj2cHwyJM-ltU6Fz4mQkgOk.roa (hash: qzbLDwyzPoZSNZu2f+YOUcC/z1BsSoehvOpIyMT5K6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:09:c9:f2:07:e4:04:47:0e:83:8d:95:cc:89:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
        Validity
            Not Before: May 16 13:00:49 2026 GMT
            Not After : May 17 13:00:49 2026 GMT
        Subject: CN=7a8df0f8c8427ab0d3871c2bb43f3f6947f7f3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:79:f6:8a:6b:f9:c9:d3:33:20:dc:e2:02:
                    55:30:94:11:4c:14:6e:71:20:46:44:0f:d4:f3:cb:
                    d7:20:77:c1:1f:c1:51:9d:5a:63:ae:6d:71:f7:f9:
                    f6:b3:2d:95:cc:8d:05:b9:bd:ee:a4:49:50:4e:79:
                    42:b2:80:8b:a7:8c:78:58:90:26:b3:c7:f3:17:a7:
                    96:d5:3b:c2:57:03:9c:f5:40:cf:0b:1c:23:51:38:
                    92:23:64:9f:26:a5:39:aa:6c:80:cf:7a:d4:87:eb:
                    d5:a7:3b:91:14:98:56:3a:fd:b8:c1:64:d0:05:f6:
                    66:d3:84:32:ed:e7:70:b9:5c:00:34:c2:0f:6f:59:
                    b4:24:36:83:e2:6b:ee:62:c8:bb:55:18:40:b3:44:
                    df:94:f8:b2:6e:b8:e9:83:12:e3:5d:65:fb:92:65:
                    6c:13:c9:fc:0f:e5:d8:68:16:19:fb:93:07:50:f4:
                    cb:4f:3a:4f:7e:18:1b:5a:b9:55:f0:34:ac:3c:35:
                    db:72:b4:54:37:55:e6:13:c9:fc:13:31:dd:fe:d7:
                    dc:bf:18:b2:46:68:a5:c8:e5:2f:08:95:a5:3a:df:
                    fc:cb:ed:fb:33:b5:ff:71:f1:61:ac:e7:3c:13:df:
                    9f:47:d3:a2:1a:b7:4b:c2:48:b9:5e:c9:1e:c8:0d:
                    ed:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8D:F0:F8:C8:42:7A:B0:D3:87:1C:2B:B4:3F:3F:69:47:F7:F3:DC
            X509v3 Authority Key Identifier:
                keyid:0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:df:ab:17:68:65:47:af:0e:87:27:ad:7b:a4:ad:59:7e:58:
         1e:0b:33:13:18:11:6c:33:80:14:a8:71:c6:16:8a:b7:1c:da:
         51:46:d0:f8:6e:e3:f3:52:2c:7b:06:e0:b2:9f:b7:8c:4d:9a:
         dd:87:b6:13:ba:07:b1:cd:b2:60:ab:21:cd:83:b0:ef:ce:4d:
         28:a3:27:d8:ce:20:ef:72:50:76:5e:b7:f3:6d:60:d0:f6:3a:
         ac:09:ea:a4:a1:8d:3a:b2:c5:1d:c1:60:48:ae:c8:49:05:ee:
         ef:92:ca:41:04:6a:21:0d:0b:27:49:11:43:f7:4e:05:18:4c:
         01:c2:da:ba:07:32:33:51:3e:1c:d0:92:9e:b1:77:38:b0:94:
         47:fd:5f:10:db:fb:10:d5:c1:1e:81:c5:b7:dc:8c:ad:6b:90:
         d7:91:aa:16:ba:d1:f3:a4:b3:7a:c3:d8:88:7d:55:49:90:45:
         ae:1d:13:f2:8c:a0:0d:2f:1d:50:5d:b1:23:cb:f0:53:93:54:
         09:13:11:9c:3c:6b:0c:8b:ee:e0:50:ed:5d:7e:77:cb:1c:41:
         33:e4:38:4e:eb:79:74:33:d4:3f:ec:93:73:52:ed:93:a1:64:
         8c:dc:ea:94:76:e6:2a:d0:13:ff:b0:8e:e0:94:88:20:a6:d8:
         6e:0e:7f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:58 2026 by rpki-client