Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
File:                     DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json)
Hash identifier:          A4N3+HK6dXoBMiF4o9jzREaMtkBc/jucDPXK5DLvqNk=
Subject key identifier:   BA:B9:BD:53:6B:F1:FA:74:DE:23:19:CD:C9:65:74:85:89:A9:A7:35
Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
Certificate issuer:       /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Certificate serial:       019E2F97547D21DEBA2040592ECCD12868B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
Manifest number:          1913
Signing time:             Sat 16 May 2026 07:01:46 +0000
Manifest this update:     Sat 16 May 2026 07:01:46 +0000
Manifest next update:     Sun 17 May 2026 07:01:46 +0000
Files and hashes:         1: 1TwtEwBMlCxF8zqgEDzuBJ_MkQk.roa (hash: TD25ePA+FEqAqKpKYIGbiC60SkZANZcldOpqjTjdHRs=)
                          2: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: ZtiSz8iPuU/mx7YdElHlzSau/Jb6i5ztx2c9InctfnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:54:7d:21:de:ba:20:40:59:2e:cc:d1:28:68:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
        Validity
            Not Before: May 16 07:01:46 2026 GMT
            Not After : May 17 07:01:46 2026 GMT
        Subject: CN=bab9bd536bf1fa74de2319cdc965748589a9a735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:76:77:e8:8f:b5:03:12:4a:a5:d3:1d:63:7b:
                    93:9c:77:35:58:0a:48:d8:92:54:da:2b:26:bd:71:
                    be:50:0a:9b:bf:4d:a2:c3:54:d1:bb:02:24:4e:0b:
                    64:71:e9:3b:d2:c7:92:54:74:3a:6b:17:35:f7:7a:
                    96:1b:35:b8:9f:bf:5d:13:ef:f6:0e:97:e4:d1:f1:
                    a6:c8:ab:d4:e9:8e:ff:15:f7:b3:eb:93:af:09:6d:
                    b4:de:21:8b:6f:87:e1:e1:17:a7:ba:50:9c:37:bd:
                    57:40:8f:2e:57:43:de:8a:7d:07:f8:8e:49:2e:89:
                    b2:f2:7f:21:26:95:5b:4a:b7:42:ab:3b:0b:ef:cc:
                    e2:f1:4c:a0:90:eb:86:91:b7:ac:a7:f2:b3:14:c8:
                    cd:eb:1f:13:ac:8a:6a:05:27:29:6f:35:dd:94:71:
                    00:d1:02:6f:8d:e3:71:3b:17:82:a8:90:56:3b:65:
                    ed:c7:04:40:81:d4:b7:6d:93:61:92:79:1a:e2:ed:
                    24:89:80:21:9f:ad:40:0e:6e:d0:97:dd:e9:c2:cd:
                    73:22:cf:93:19:16:92:dc:d6:10:8e:1d:3b:5c:4c:
                    3a:90:d3:8c:7a:bd:6a:ed:bd:d5:7e:34:93:dc:38:
                    b4:2f:86:ef:5a:e4:79:f8:d1:40:c2:d2:a1:f7:e9:
                    d6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B9:BD:53:6B:F1:FA:74:DE:23:19:CD:C9:65:74:85:89:A9:A7:35
            X509v3 Authority Key Identifier:
                keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:fa:84:0b:05:a3:9e:97:43:14:b1:a3:d1:c2:bd:22:bb:64:
         04:c6:8d:a9:4d:af:ad:a3:36:4a:9f:55:0e:50:92:9b:3b:04:
         31:11:72:c0:2e:4c:f2:c4:cb:c9:f8:3d:c3:11:11:5d:ea:6c:
         98:b3:36:12:48:d6:3f:6d:e8:a4:32:49:6f:84:78:83:ee:02:
         e9:af:fe:ad:07:ad:4a:f7:a2:a8:8d:eb:a0:13:31:cc:a3:fd:
         56:46:e3:3d:f7:23:17:0b:53:bd:80:74:e3:f5:90:06:62:84:
         7e:5a:bf:9a:ac:0e:af:dc:2c:86:90:df:80:1a:6b:ab:a4:32:
         0d:f2:5c:d0:c4:a5:fa:70:d8:c0:89:29:00:c9:e6:c3:59:d5:
         c5:a0:37:9c:d8:bd:dd:16:9d:e9:34:10:70:b4:e2:08:90:ad:
         ff:b9:07:02:c6:2a:41:14:99:6f:c2:ee:31:f1:8a:30:f9:89:
         3d:e7:d8:21:2e:de:3e:ff:83:ba:86:3b:c6:ed:0c:7f:75:dd:
         f9:b2:0e:f9:ab:32:56:22:4b:74:01:7b:85:f7:b4:bf:de:14:
         76:c1:43:7a:65:e4:80:98:b9:9f:78:38:b9:16:2e:c3:bd:3d:
         72:b7:53:61:99:db:5c:7d:7e:9b:34:ce:38:f8:5b:0c:f8:95:
         f6:cb:09:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:23:32 2026 by rpki-client