Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
File:                     0hNMcoigwXozuLX-jFgGa0RC8YM.mft (raw, json)
Hash identifier:          yZT4dKdRSPkCJjqteJjGo24ceto9P4IAOyZg0fU2K4g=
Subject key identifier:   3D:D6:DC:55:A2:1A:94:33:84:00:BB:66:1C:A2:65:66:BB:7A:7F:43
Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
Certificate issuer:       /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Certificate serial:       019E303BE5900010CB46C354500EA4ACF51D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
Manifest number:          0741
Signing time:             Sat 16 May 2026 10:01:32 +0000
Manifest this update:     Sat 16 May 2026 10:01:32 +0000
Manifest next update:     Sun 17 May 2026 10:01:32 +0000
Files and hashes:         1: 0hNMcoigwXozuLX-jFgGa0RC8YM.crl (hash: /92y6g1mYNySNdvosAy/Oig927x7SmeCy8yd60KJGDM=)
                          2: snrfUjBn7hs_JXI-JDADVPqBfu0.roa (hash: chl5WtQulq1NJ8dnVwRq5DKzxSTQgdztVrgONAQmO1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:e5:90:00:10:cb:46:c3:54:50:0e:a4:ac:f5:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
        Validity
            Not Before: May 16 10:01:32 2026 GMT
            Not After : May 17 10:01:32 2026 GMT
        Subject: CN=3dd6dc55a21a94338400bb661ca26566bb7a7f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dd:89:6a:da:a8:4a:d3:62:f4:b7:23:2c:2c:
                    fa:33:08:7f:65:87:b0:46:b9:39:a3:e8:f7:8a:74:
                    24:90:71:1f:43:fb:2e:db:87:92:be:3a:30:f4:25:
                    ef:40:0a:3a:c4:f5:e0:f6:dc:1f:fe:f7:39:72:23:
                    ab:e4:46:ec:08:54:82:e3:f2:44:ee:de:40:57:2b:
                    45:07:e7:d9:24:7c:97:ae:93:53:1c:0c:e5:42:be:
                    1e:c5:9b:28:b8:c0:b7:af:9b:4e:03:e7:88:c7:39:
                    4a:1c:59:d8:d0:da:e0:c7:15:48:00:96:7e:f2:be:
                    63:0d:8f:5e:6b:e6:53:cb:2b:e0:29:9d:0f:65:3b:
                    c3:d7:34:ae:91:5c:24:9e:93:b7:38:21:5a:f1:58:
                    63:f9:9a:ee:0d:c8:0e:25:12:33:74:bd:3e:10:d5:
                    2e:bd:98:2a:21:d4:53:3e:e4:45:96:87:da:f5:27:
                    c6:8f:9c:f0:6b:ee:d4:79:74:8c:24:da:aa:3e:41:
                    09:27:d0:e7:2d:41:64:cd:49:4d:6d:9e:8e:e5:5b:
                    0b:02:a7:a8:96:1e:63:2d:f9:82:ec:85:cb:38:c6:
                    c7:d3:ea:f0:6a:63:52:e2:10:53:51:9c:5c:08:ca:
                    14:c0:44:e6:9c:16:45:b6:46:4d:af:54:21:f7:12:
                    88:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D6:DC:55:A2:1A:94:33:84:00:BB:66:1C:A2:65:66:BB:7A:7F:43
            X509v3 Authority Key Identifier:
                keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:21:50:8f:d4:72:b0:69:2d:3c:2c:bd:77:ea:5a:43:cd:cb:
         a3:4f:ed:c5:cb:01:6a:3b:ed:b5:70:10:14:10:f4:67:fd:d1:
         0a:06:13:be:02:48:5a:3f:4c:8e:c8:25:19:c8:01:d3:27:4e:
         68:88:ec:c5:54:0b:59:8e:c9:55:60:74:b0:42:44:78:f8:ad:
         3e:b6:ae:1f:d0:af:07:77:a8:29:27:9c:12:37:57:7d:b2:9f:
         4d:0d:52:fb:13:7f:9e:c4:00:55:b3:94:b5:03:df:22:26:a3:
         fe:9e:12:fb:5b:ec:ed:36:09:f6:66:ec:1b:fa:54:da:3b:01:
         e5:0d:bb:54:6a:af:f6:08:94:8b:75:86:7b:79:9a:1c:0a:67:
         e5:4e:09:df:01:42:fa:da:5a:d7:a1:ff:1b:f9:0a:1f:3a:8b:
         01:86:54:77:bb:59:6d:9a:88:76:8e:04:17:a7:d8:49:f6:e9:
         86:b6:a8:9b:18:17:9c:b2:7b:7c:34:ff:e8:df:f2:f4:4b:0c:
         56:0b:bc:8e:79:1d:47:7e:09:c5:9a:f9:60:62:0a:9d:40:66:
         23:0c:ee:f6:a9:c7:7c:a2:4a:98:55:00:e8:31:22:f6:a2:db:
         0d:35:95:d0:9b:16:c5:4a:14:73:0e:86:88:41:9e:c3:92:bb:
         30:c9:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:06 2026 by rpki-client