Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
File:                     0mF9FdtY_jBi0brb4E0wwZSd1f8.mft (raw, json)
Hash identifier:          O7zOxm4mOfu8iCabbUgIMsozI0tmsRx94xGxWI9bk9U=
Subject key identifier:   13:A3:02:49:24:FA:D1:2D:D9:AA:E9:39:EC:92:18:F7:50:EA:06:99
Authority key identifier: D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
Certificate issuer:       /CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Certificate serial:       019E25EEA4593AA833AFD51A0355BAEAF8B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
Manifest number:          1906
Signing time:             Thu 14 May 2026 10:00:57 +0000
Manifest this update:     Thu 14 May 2026 10:00:57 +0000
Manifest next update:     Fri 15 May 2026 10:00:57 +0000
Files and hashes:         1: 0mF9FdtY_jBi0brb4E0wwZSd1f8.crl (hash: nUBeEhmwNK5EudiFiMSnyehc5b/R1z7gLbcp3z10c9Q=)
                          2: SoEs2uq-Lqa7VWg8JFQCPgrt2eI.roa (hash: NiDI43uxk76Y1iaXH3S9JcI5gdDit0xy1S3yktJNiKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:25:ee:a4:59:3a:a8:33:af:d5:1a:03:55:ba:ea:f8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
        Validity
            Not Before: May 14 10:00:57 2026 GMT
            Not After : May 15 10:00:57 2026 GMT
        Subject: CN=13a3024924fad12dd9aae939ec9218f750ea0699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:8d:2f:72:b7:97:8e:64:b2:d9:01:46:18:
                    a7:d7:a3:a1:07:36:f2:57:53:80:db:dd:52:f5:ee:
                    21:0e:0f:04:d8:11:a5:2d:48:d9:5b:15:b7:b4:56:
                    70:2e:81:82:6f:0c:63:6e:0d:26:af:f6:0a:8d:0f:
                    fb:eb:23:34:00:09:43:9a:66:08:fc:d6:cc:19:47:
                    57:fd:30:9f:0a:d5:b9:89:e6:7e:7d:0a:a3:ae:d1:
                    96:9f:a6:70:64:3c:d4:6d:f3:ea:a0:04:9a:8d:01:
                    6a:5f:f8:4a:4e:3d:d6:84:77:4d:98:6b:c8:cf:54:
                    45:93:b2:63:7f:24:05:51:b9:51:ce:0b:e6:5a:57:
                    f9:fe:5a:d4:fc:80:d8:b3:ae:62:f0:96:34:b7:91:
                    7f:a3:67:46:a9:ab:5a:78:3e:96:22:a8:5b:e5:52:
                    59:38:4a:4f:ef:45:cc:72:e2:46:94:16:95:78:b2:
                    22:78:22:b5:2c:f2:5c:71:fc:4e:a5:b0:fc:23:09:
                    5e:e2:15:d0:82:e6:b6:66:a0:c7:81:e3:6f:f9:55:
                    c3:1d:a0:99:b0:6d:68:9f:e7:c1:00:b3:cc:9b:b8:
                    f6:e4:66:2b:be:f8:a2:eb:8c:bd:c8:23:4b:75:3d:
                    d2:aa:73:0d:37:2c:e0:e3:80:b1:a9:53:74:dd:fb:
                    53:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A3:02:49:24:FA:D1:2D:D9:AA:E9:39:EC:92:18:F7:50:EA:06:99
            X509v3 Authority Key Identifier:
                keyid:D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:9a:b3:a7:da:62:da:63:e1:c3:e9:4b:5d:e9:3b:58:83:24:
         c2:b8:7f:f9:cd:91:cc:08:c2:4f:55:79:49:a4:d3:6c:f2:65:
         e7:d2:d2:28:68:9c:cb:83:d7:18:ce:47:97:c3:bb:75:78:15:
         79:81:27:36:3f:11:93:c1:f5:02:fa:34:05:59:bf:8f:bf:fa:
         6e:84:a6:20:fa:15:48:06:99:06:50:d5:a1:bc:1d:67:04:43:
         33:6c:69:cc:1a:8e:be:9b:3d:0c:44:c6:2d:3b:2c:74:f4:d2:
         af:ca:96:40:e4:af:c2:ed:fe:5f:27:56:0e:5b:17:2e:7f:c1:
         25:3f:5e:ee:fd:c8:1a:3c:df:50:cc:f3:b1:83:fc:e3:75:59:
         06:e5:01:1e:eb:19:ea:a6:a2:3c:d2:d8:14:b8:e1:bd:b1:1f:
         0c:1c:a8:0c:e2:91:f0:ad:4e:a5:06:a3:4f:06:b6:26:44:b0:
         22:41:30:3a:c2:ab:88:93:c5:c5:b5:f1:21:64:98:95:ff:a7:
         36:f8:3c:3c:78:5c:01:42:10:ef:37:de:ba:41:ae:08:ba:4e:
         2a:7c:0d:6b:2c:0f:6b:5c:7e:6c:e4:49:e8:f9:a3:5d:5c:f7:
         d7:e3:4c:1b:7c:51:9f:0f:c1:b8:02:79:bd:6c:16:33:54:fd:
         57:1c:21:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4l7qRZOqgzr9UaA1W66vixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjE3ZDE1ZGI1OGZlMzA2MmQxYmFkYmUwNGQzMGMxOTQ5
ZGQ1ZmYwHhcNMjYwNTE0MTAwMDU3WhcNMjYwNTE1MTAwMDU3WjAzMTEwLwYDVQQD
EygxM2EzMDI0OTI0ZmFkMTJkZDlhYWU5MzllYzkyMThmNzUwZWEwNjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/ONL3K3l45kstkBRhin16OhBzby
V1OA291S9e4hDg8E2BGlLUjZWxW3tFZwLoGCbwxjbg0mr/YKjQ/76yM0AAlDmmYI
/NbMGUdX/TCfCtW5ieZ+fQqjrtGWn6ZwZDzUbfPqoASajQFqX/hKTj3WhHdNmGvI
z1RFk7JjfyQFUblRzgvmWlf5/lrU/IDYs65i8JY0t5F/o2dGqataeD6WIqhb5VJZ
OEpP70XMcuJGlBaVeLIieCK1LPJccfxOpbD8Iwle4hXQgua2ZqDHgeNv+VXDHaCZ
sG1on+fBALPMm7j25GYrvvii64y9yCNLdT3SqnMNNyzg44CxqVN03ftTEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOjAkkk+tEt2arpOeySGPdQ6gaZMB8GA1UdIwQY
MBaAFNJhfRXbWP4wYtG62+BNMMGUndX/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jYmNhMGItNjQ1My00OTRjLTg3Mjct
NTdlMDhmNjFmMmVjLzEvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jYmNhMGItNjQ1My00OTRjLTg3MjctNTdlMDhmNjFmMmVj
LzEvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZqzp9pi
2mPhw+lLXek7WIMkwrh/+c2RzAjCT1V5SaTTbPJl59LSKGicy4PXGM5Hl8O7dXgV
eYEnNj8Rk8H1Avo0BVm/j7/6boSmIPoVSAaZBlDVobwdZwRDM2xpzBqOvps9DETG
LTssdPTSr8qWQOSvwu3+XydWDlsXLn/BJT9e7v3IGjzfUMzzsYP843VZBuUBHusZ
6qaiPNLYFLjhvbEfDByoDOKR8K1OpQajTwa2JkSwIkEwOsKriJPFxbXxIWSYlf+n
Nvg8PHhcAUIQ7zfeukGuCLpOKnwNaywPa1x+bORJ6PmjXVz31+NMG3xRnw/BuAJ5
vWwWM1T9VxwhJg==
-----END CERTIFICATE-----
Generated at Thu May 14 15:58:55 2026 by rpki-client