Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
File:                     DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json)
Hash identifier:          egWNIbRIU82vIUjvRCttDkE1PYHczmRt2+s9juPXat8=
Subject key identifier:   29:EF:DB:6B:EB:5C:91:CC:E6:38:93:3B:62:B3:E7:2C:A2:2B:91:65
Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
Certificate issuer:       /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Certificate serial:       019E30E0B261C70755745853F231B7452594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
Manifest number:          0FAD
Signing time:             Sat 16 May 2026 13:01:32 +0000
Manifest this update:     Sat 16 May 2026 13:01:32 +0000
Manifest next update:     Sun 17 May 2026 13:01:32 +0000
Files and hashes:         1: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: RT+vn35irUm0mTufOWjGvoXVu0Rs+Jb+aO5sH060Cdk=)
                          2: N-WMFc6DX37aaCb2Ht_ANOztnKQ.roa (hash: 9X1sqEiJTAyhIuXZcN2JWxXDBCpL7N9kje25ka+fIzA=)
                          3: Ua52IPMh7tUk8OiJNRdVKabymgI.roa (hash: Ig2jLrSQbVFfXELVpcCRVjOIIU8fStnsUhfT16Zx690=)
                          4: bteUfMNGCw4iekhcsm-TC--JQrY.roa (hash: 0mwVlH5pQckOHYni1LukazfItUgOS1Qd+GhZIFEebJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:b2:61:c7:07:55:74:58:53:f2:31:b7:45:25:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
        Validity
            Not Before: May 16 13:01:32 2026 GMT
            Not After : May 17 13:01:32 2026 GMT
        Subject: CN=29efdb6beb5c91cce638933b62b3e72ca22b9165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fc:1b:ee:ea:f0:a9:16:2a:dd:d7:93:43:4d:
                    a0:b2:aa:51:b5:92:84:43:db:71:6a:d5:df:3c:2f:
                    48:e0:1f:16:6a:82:1b:df:47:c8:c0:9a:69:ef:4f:
                    43:d7:40:5b:b7:70:53:cf:7d:be:70:9b:39:ef:2b:
                    a1:33:55:78:f4:e6:56:cc:06:dd:08:50:08:34:77:
                    df:dd:04:94:0d:c8:1d:ae:3b:35:81:e0:c7:79:18:
                    16:75:7a:47:da:5c:3f:44:9a:37:a3:40:ca:20:1c:
                    f3:11:c2:a8:fb:2f:59:b5:9c:a5:92:8d:06:77:d8:
                    74:1d:9e:17:95:86:80:94:b1:03:e4:11:90:a3:00:
                    47:49:05:c8:bf:41:d7:74:3b:2f:6c:06:11:1e:39:
                    d6:e2:2c:e7:8b:7b:dd:55:da:c8:32:0c:d2:e0:33:
                    b9:5d:61:0b:58:f3:8c:53:d3:4f:c7:70:91:c8:1c:
                    90:d6:40:d3:35:5a:79:c1:ab:81:94:ad:d4:f7:47:
                    09:ca:75:a4:00:20:64:3a:45:6d:66:75:61:f5:f3:
                    8a:dc:b7:b0:4d:41:cc:c9:59:09:8a:5e:1f:dd:c8:
                    e9:ff:ca:dc:02:2e:be:bb:bf:80:40:cf:62:73:3f:
                    de:a5:5a:55:35:5d:d4:0c:b0:51:99:54:5f:26:8a:
                    37:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EF:DB:6B:EB:5C:91:CC:E6:38:93:3B:62:B3:E7:2C:A2:2B:91:65
            X509v3 Authority Key Identifier:
                keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:2a:3d:c2:0c:25:2d:8e:33:c5:18:62:bb:2a:1b:4b:ae:14:
         56:49:28:81:62:9c:27:a7:e3:fc:88:7f:fd:7d:f4:81:a4:25:
         e6:b6:bf:fa:ef:b9:3c:74:aa:a9:8e:c6:ea:0a:5c:fb:c3:ec:
         96:cd:e0:51:05:a1:a0:de:3f:63:53:14:cd:83:34:f3:0c:5b:
         8d:aa:bf:37:97:25:51:2a:18:ed:4d:e2:44:6b:a1:34:8e:98:
         2c:eb:1f:1c:21:82:68:5b:1e:2f:f9:71:6f:c0:01:3d:ad:10:
         ed:ac:13:78:9f:e2:ac:5f:f1:55:35:8e:e5:73:a7:85:81:17:
         d5:ce:ba:8c:d3:7d:73:59:e0:73:a2:3a:78:8f:66:59:d5:68:
         90:a3:95:8b:c5:6e:65:38:3a:26:a6:aa:34:9c:ff:28:69:cd:
         6d:8b:64:93:e4:b7:fa:c6:b2:16:02:ef:39:73:f3:3f:39:98:
         0e:d7:75:ae:25:e9:53:90:8f:b1:00:2a:0b:d9:3a:d8:47:0d:
         da:52:2e:bb:50:fc:ca:08:5e:fb:ee:c5:dd:fe:4c:ca:59:97:
         ed:43:99:a6:bc:04:87:10:3e:a0:44:e9:cf:4f:95:20:05:6c:
         d0:bb:18:5d:fc:7c:3a:38:f7:25:24:c5:ea:e2:85:67:4b:00:
         e3:4b:2c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:38:10 2026 by rpki-client