Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
File:                     0AQf95gDebeYBJJWho3_OYGcJgQ.mft (raw, json)
Hash identifier:          WnUdy2lDPQtpYCZJ41whNXbA+8tGkWXdb+E5XLUgwK8=
Subject key identifier:   07:3A:1D:1D:C4:92:3C:D2:29:46:C5:AA:38:B6:90:3E:C5:5F:6D:6F
Authority key identifier: D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
Certificate issuer:       /CN=d0041ff7980379b798049256868dff39819c2604
Certificate serial:       019E2F9726C08EF72211B4A2F1C76589F023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
Manifest number:          1514
Signing time:             Sat 16 May 2026 07:01:35 +0000
Manifest this update:     Sat 16 May 2026 07:01:35 +0000
Manifest next update:     Sun 17 May 2026 07:01:35 +0000
Files and hashes:         1: 0AQf95gDebeYBJJWho3_OYGcJgQ.crl (hash: yhuRnNCsV91tACiz9CYOgUNxEKUIX7sf9siWgI2Zd98=)
                          2: _CbAIha09b2vkLLLEt-SwHJvLtA.roa (hash: rgmnLA63aETJnEB0DGJbTZ0etZiRckyQobaM7PylTRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:26:c0:8e:f7:22:11:b4:a2:f1:c7:65:89:f0:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0041ff7980379b798049256868dff39819c2604
        Validity
            Not Before: May 16 07:01:35 2026 GMT
            Not After : May 17 07:01:35 2026 GMT
        Subject: CN=073a1d1dc4923cd22946c5aa38b6903ec55f6d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:34:e1:ae:43:d3:49:30:f0:bd:e3:81:5e:f2:
                    5c:f5:83:a2:63:6d:ed:16:6b:1d:a3:88:df:a9:35:
                    7b:36:b0:20:db:69:79:cb:5b:34:56:c4:e9:e1:03:
                    62:40:26:df:25:3e:21:a8:fd:19:e0:bf:17:30:6e:
                    6b:28:35:b2:dd:9e:ae:40:b3:aa:36:50:61:7e:e9:
                    64:90:c4:86:c3:6c:d1:08:d3:df:f9:ab:26:63:08:
                    06:50:5b:d7:00:f0:f8:9d:29:af:8d:d2:3f:5e:61:
                    80:4c:7a:49:d0:7e:90:15:1e:22:d0:cd:23:6f:2c:
                    96:55:f5:29:cb:99:d4:e2:b3:62:b9:52:89:56:6e:
                    50:a6:20:7c:53:e0:13:40:88:23:07:5c:8b:0f:e6:
                    eb:6f:0e:b8:dc:fc:c3:57:ed:67:09:9c:b4:8b:a0:
                    e1:13:83:6b:5c:bc:f8:f4:fa:61:06:3a:e7:02:6f:
                    42:60:1f:24:9a:4f:3d:6c:c9:29:06:42:55:18:07:
                    de:93:a4:ed:b1:9f:1b:9b:9d:c6:5e:77:5e:41:bd:
                    52:ed:f6:f4:bc:2c:05:2e:1d:4c:61:8e:9a:e3:4b:
                    8e:2a:f5:d8:a8:ab:5d:d1:4e:8b:ab:47:a7:43:e7:
                    98:8f:23:f1:99:84:ec:4a:00:ff:4b:bb:95:81:08:
                    23:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3A:1D:1D:C4:92:3C:D2:29:46:C5:AA:38:B6:90:3E:C5:5F:6D:6F
            X509v3 Authority Key Identifier:
                keyid:D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:6e:b8:88:07:06:b1:07:ae:6e:f2:f4:b2:98:b8:b2:a8:94:
         9a:a5:24:5a:86:1e:1c:42:7c:f5:9c:2e:52:1e:71:6b:d2:95:
         33:d1:73:b7:c5:cc:ca:c8:12:b9:79:cd:35:3d:5f:fb:3c:58:
         06:8d:1d:6b:63:a6:8f:e3:38:21:1c:3e:ac:c5:71:df:af:af:
         c4:29:82:0a:36:84:e4:36:a0:c5:b8:75:d3:a4:88:6e:d2:e8:
         5a:d2:50:dc:89:dd:cd:f8:67:b1:25:ba:d2:be:de:cf:f0:3f:
         a3:3d:32:cf:60:3e:99:6b:eb:69:cb:db:77:33:fa:1c:55:ba:
         a5:e3:c9:74:fc:51:06:e7:6c:bc:27:c6:c7:05:bb:e3:d3:38:
         d4:fc:b4:ff:7c:36:c9:a0:48:90:e3:24:e5:30:af:6f:5a:05:
         dc:71:aa:d3:6f:d4:27:12:04:01:66:fb:a4:9c:8a:fa:d6:e0:
         5d:a1:11:a1:01:54:fb:1a:47:fc:95:7d:2f:8b:66:ae:84:5d:
         fb:a6:38:6d:3a:7e:97:b0:0f:8b:c0:4a:e6:cc:58:a9:6a:a8:
         21:93:62:74:98:06:a8:f8:be:53:c2:e4:98:3c:7d:23:11:70:
         d5:b4:0b:97:dc:c8:5d:ea:7a:8a:08:ad:26:ca:7f:3f:c1:bf:
         7c:be:61:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:44 2026 by rpki-client