Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
File:                     DETz4ku_xgSOX_pQw9zjZP_AErA.mft (raw, json)
Hash identifier:          x1GXFV8Mm03KyVWCAI51cOB2Fgym34Esqg4oWN+tUlo=
Subject key identifier:   AC:07:09:AC:53:70:02:7F:75:79:E4:F9:05:C6:87:CC:1C:6D:8A:E2
Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
Certificate issuer:       /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Certificate serial:       019E300550776AC0E657953AB52922C5DF93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
Manifest number:          15D6
Signing time:             Sat 16 May 2026 09:01:54 +0000
Manifest this update:     Sat 16 May 2026 09:01:54 +0000
Manifest next update:     Sun 17 May 2026 09:01:54 +0000
Files and hashes:         1: DETz4ku_xgSOX_pQw9zjZP_AErA.crl (hash: BK8WpdRjIKmS/EdTHAAutwlPxEQINswZgJmWtlwRun8=)
                          2: Ki_V1gbeMTHzzb2sAJkjbiTIB4k.roa (hash: G8coFslA7SGGsh7OBwFjSWY/mTtlNbU81EsuVTVQlk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:50:77:6a:c0:e6:57:95:3a:b5:29:22:c5:df:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
        Validity
            Not Before: May 16 09:01:54 2026 GMT
            Not After : May 17 09:01:54 2026 GMT
        Subject: CN=ac0709ac5370027f7579e4f905c687cc1c6d8ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:e4:7d:ac:f3:7f:19:6b:a7:e6:d9:36:2c:
                    91:14:22:e1:fa:2b:76:66:46:c1:15:d2:15:a0:ba:
                    ef:cb:3a:0a:a6:fa:44:2b:5c:e1:b5:80:9c:a5:46:
                    af:d9:03:b2:eb:cb:80:c8:00:2f:95:61:be:48:49:
                    66:9b:f5:2c:18:58:9e:2a:33:85:1e:d0:dd:b7:58:
                    20:b9:67:d1:cc:4f:53:df:2d:74:ae:84:1e:f5:01:
                    76:99:29:81:1c:64:3a:18:a5:1a:04:eb:57:7b:6c:
                    04:2b:2e:e8:ab:81:46:d6:e0:19:15:89:2b:2e:1d:
                    68:de:66:34:18:4d:be:db:9e:f4:95:a4:0e:1e:b3:
                    08:43:02:d5:41:c0:77:2f:2b:c0:e2:d4:7c:c2:d0:
                    8b:09:4f:e9:50:86:04:07:86:5a:9d:4e:d8:22:2d:
                    52:25:e0:2c:09:cb:a6:e6:d6:74:1e:11:6c:a3:28:
                    44:aa:1f:83:59:94:c7:ad:fc:ae:10:30:2b:4d:93:
                    20:b9:9f:91:11:d7:e8:07:02:f4:eb:83:37:fc:07:
                    5b:04:96:b5:6a:a3:5b:c2:5d:c0:a5:38:5a:6b:23:
                    b0:d1:1e:eb:81:e1:d9:48:1a:f8:33:a2:86:b3:9b:
                    ed:1c:ae:68:6d:49:eb:ab:6f:c8:11:e4:a2:70:76:
                    e8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:07:09:AC:53:70:02:7F:75:79:E4:F9:05:C6:87:CC:1C:6D:8A:E2
            X509v3 Authority Key Identifier:
                keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:08:9e:62:28:04:e5:23:d9:80:3d:3b:87:d9:03:0c:a7:51:
         e2:d3:a3:46:23:61:e6:63:61:40:37:03:b1:e1:3c:1e:11:3a:
         2e:b3:0d:c7:d9:a7:c4:be:98:99:90:10:19:f2:53:39:d2:74:
         b6:59:2b:41:32:a8:f0:58:86:4e:74:0c:74:ff:11:d1:75:cc:
         d8:00:e6:2b:80:7e:ad:3f:2e:63:73:68:26:2f:f8:df:3e:d1:
         2a:ff:b1:64:93:79:87:5c:d8:26:04:69:d6:2f:73:47:7b:de:
         a3:c6:7c:84:d9:0a:7e:4f:72:95:04:eb:13:12:22:1e:66:9a:
         ae:6f:02:8e:be:b3:02:56:cd:dc:d4:b4:d8:51:bd:ab:47:55:
         91:38:6d:b1:fb:86:f5:a0:f1:99:d4:2c:5e:78:68:c1:a3:bb:
         45:ec:5c:a5:4a:ae:1c:2c:4b:e5:b5:8b:b4:14:bd:ea:67:bb:
         ce:26:bd:10:8d:57:c8:bb:14:97:d0:10:03:30:54:09:2e:fb:
         48:fa:c3:ce:04:d9:23:a1:b5:c5:fc:33:84:bc:fa:a5:0d:6d:
         0c:c5:5f:5c:00:8e:90:51:2e:3b:25:fa:fa:a8:a4:7b:be:c3:
         ee:8b:3e:b2:ec:9b:e4:af:4e:ab:f4:8d:fd:61:25:01:00:ff:
         f0:fe:7f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:20 2026 by rpki-client