Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
File:                     0H3DXrzYjdDiqNs6WghlS8O-AmI.mft (raw, json)
Hash identifier:          T0ty7EpFEfa/efcpTmtMeVuB2gltcKOkij7pARIJCq0=
Subject key identifier:   63:17:7F:6A:FF:09:0E:8B:68:27:E6:DA:78:5B:C2:7C:B5:68:10:72
Authority key identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
Certificate issuer:       /CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Certificate serial:       019E30A9053C061D1BA548EBE5302C0F5F9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 12:00:43 +0000
Manifest this update:     Sat 16 May 2026 12:00:43 +0000
Manifest next update:     Sun 17 May 2026 12:00:43 +0000
Files and hashes:         1: 0H3DXrzYjdDiqNs6WghlS8O-AmI.crl (hash: 4wIsv0lWxBmwr34HC7Hx2uem8pPFmAIETb3bdy3wHFo=)
                          2: 5S9zgsI7YdgCuLrcxrJgJGgaXio.roa (hash: 0SOHInOOcBkpkEBjrdDgxxRvZ1Vm8a53UcIVrdFkYco=)
                          3: 6rWLYcpP7TzQKUSgMq9oQds6Kqo.roa (hash: m4nWZTQSZpBwm2N4gNE+CRW9B3H0JjT5K3DxWrPCn/E=)
                          4: 7gj3qwzFulpZ74m7sX-j6kpzvWg.roa (hash: CZUn6B9GSjHpISyR7znrv7W2c0uiMaQCOD7zBfEJXUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:05:3c:06:1d:1b:a5:48:eb:e5:30:2c:0f:5f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
        Validity
            Not Before: May 16 12:00:43 2026 GMT
            Not After : May 17 12:00:43 2026 GMT
        Subject: CN=63177f6aff090e8b6827e6da785bc27cb5681072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4a:dd:e4:9b:60:bc:9d:38:35:d7:1d:47:7d:
                    ba:19:ca:e4:54:e2:40:9d:22:1f:16:c0:b6:fb:d3:
                    25:73:fe:dc:58:4d:03:1b:12:94:de:9d:ea:36:5c:
                    2a:d9:4c:7f:1d:06:09:f6:30:bb:4f:3e:b4:88:90:
                    76:2d:17:be:b0:84:6d:79:73:2c:c1:f7:8f:e4:69:
                    a7:d9:12:2c:66:49:86:df:26:0d:b1:89:9b:94:df:
                    57:ad:1e:b1:d7:3d:51:f3:40:4b:c8:f4:4c:f7:ef:
                    4e:04:13:4c:b6:05:4e:ce:18:e0:e8:94:d5:25:30:
                    a6:c3:7a:e0:ae:2e:a1:68:4f:02:13:d3:90:b2:ff:
                    54:0c:d6:69:4e:e4:2b:9e:1e:47:52:79:4d:ac:2d:
                    45:8d:ed:29:20:d3:83:a1:54:49:2a:60:58:6d:ce:
                    52:11:c3:34:fd:77:48:c9:88:f8:14:c2:e7:bb:99:
                    cc:16:04:99:6c:cb:83:fd:c7:69:53:9a:b7:03:9c:
                    96:40:50:a2:e5:fc:1f:fd:85:5b:fa:f4:80:cc:da:
                    4c:18:1d:c9:52:8b:7e:57:16:59:68:66:a6:19:eb:
                    77:b4:20:86:04:c6:c7:81:a8:ed:b3:5d:c6:d9:45:
                    69:dd:f4:63:1b:7f:ac:b2:c0:73:38:ac:dd:b2:b8:
                    3e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:17:7F:6A:FF:09:0E:8B:68:27:E6:DA:78:5B:C2:7C:B5:68:10:72
            X509v3 Authority Key Identifier:
                keyid:D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ee:81:b5:c8:01:e5:d4:5a:34:a7:76:8a:c1:59:87:59:46:
         82:dc:5b:75:07:24:24:39:18:11:1d:4a:6e:24:f6:a1:c0:5a:
         36:20:af:ec:0c:e8:41:a5:15:f3:a9:41:3f:40:21:1c:04:88:
         18:49:bd:11:4a:ab:a6:fd:e5:0d:9c:3b:8f:05:14:8b:58:ae:
         92:25:11:29:68:8b:fc:1b:22:9a:24:56:66:eb:85:1f:d1:ef:
         d1:40:d8:3a:ba:79:90:15:19:59:ba:92:85:d8:7f:32:64:9e:
         00:18:fe:68:66:d7:58:8d:8e:04:54:9b:7d:31:b3:9a:54:ef:
         59:5e:b2:3e:0a:49:aa:bb:23:9b:c8:30:3e:79:7b:ca:cb:8a:
         be:66:20:ae:c9:f8:a4:5c:46:19:fb:94:e4:3d:9e:cd:b5:64:
         4c:72:ad:5e:60:d4:14:45:ef:04:5b:e4:fa:02:e4:1d:b5:85:
         52:d8:70:50:9f:12:8a:be:8c:06:f2:a1:d1:d4:5f:28:cd:cc:
         80:30:c8:f2:e0:a2:5b:3e:48:af:c2:76:36:cc:4d:c4:61:86:
         a1:3e:90:af:e0:14:38:4c:0c:e4:4c:78:23:79:88:b2:a0:70:
         b2:2e:fd:a3:bf:08:35:ff:b2:d2:26:92:79:be:59:f5:83:e7:
         c7:38:77:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:53 2026 by rpki-client