Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
File:                     0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft (raw, json)
Hash identifier:          JMnAxL853BCUK+g/Tsgd06YCrIOlcLowmWDew+OelQQ=
Subject key identifier:   CE:9E:2A:CE:F1:B0:2A:58:D3:9D:28:3C:BA:EE:45:51:B7:9B:AB:5B
Authority key identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
Certificate issuer:       /CN=d03046d16cfc391b028b88743773ce005cf97b1d
Certificate serial:       019EBF23919F5CF5FFD53EA602E329582E7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
Manifest number:          1958
Signing time:             Sat 13 Jun 2026 04:00:39 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:39 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:39 +0000
Files and hashes:         1: 0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl (hash: 5gSiywwbFMeklj0OypcoKQ3599UrGYUSXh6s4MUr2Nw=)
                          2: 6sIpurMyf7U7cVjfDtGf65yWDwA.roa (hash: cZnmgrrB6eUg5rHF2CdbgLHSyI5RnOe61koYU+5dDnA=)
                          3: NZSg7hN5dj36ijrS0iZ916AKsoM.roa (hash: VS2r3z5DpXErRLlghndtWldrsOM22Uv0cqCOqDvPp5M=)
                          4: _EXzGZ6mIohQTkOQklm2HctGpf0.roa (hash: d5WVsZmAqKJyYsnjGKZS29R+h6TCBV39mM8GYttnuxM=)
                          5: aTt1lDOQ__4_BOzrJWRmWq2_g_I.roa (hash: v57HfwpPj2JAqIcZD1AamnQQx8/Wn9ebUoCosyKqGs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:91:9f:5c:f5:ff:d5:3e:a6:02:e3:29:58:2e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03046d16cfc391b028b88743773ce005cf97b1d
        Validity
            Not Before: Jun 13 04:00:39 2026 GMT
            Not After : Jun 14 04:00:39 2026 GMT
        Subject: CN=ce9e2acef1b02a58d39d283cbaee4551b79bab5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:30:2d:da:74:80:6f:ff:f0:f8:e3:a2:3a:93:
                    24:09:95:52:dc:98:a7:30:9d:62:35:e9:d3:9d:5e:
                    23:df:d1:9a:82:5f:eb:6f:7a:31:04:c7:4e:e8:d9:
                    4e:db:a5:a5:d9:61:32:c4:b5:0e:52:39:dd:2f:b3:
                    03:df:d9:43:36:ad:26:5f:10:21:4c:57:70:71:09:
                    e5:c2:5d:97:c2:dc:b0:0e:ff:b9:55:39:c6:1c:05:
                    a1:a3:74:86:7f:66:b9:92:ac:b8:8c:18:ef:91:fe:
                    2f:32:04:dd:d3:d0:b4:d1:51:81:7c:32:4e:31:6d:
                    79:5a:0a:9f:56:20:b8:0e:22:fb:13:64:34:3a:6d:
                    98:bf:df:cd:f8:38:bc:17:42:85:26:27:a5:52:f7:
                    41:59:08:f8:ca:8b:6a:b5:fb:b9:58:b6:39:a2:3e:
                    e1:ca:67:e3:d5:40:fe:bc:d8:48:be:ce:5d:a1:ad:
                    4a:f4:e0:67:3d:25:ff:1b:56:ac:6d:19:d1:fb:34:
                    3d:3f:c2:fd:78:ad:a1:8a:0b:5e:e7:f4:d8:6d:ad:
                    87:44:9e:58:14:b8:d3:4b:f2:b4:69:28:43:15:f1:
                    3f:45:62:a0:72:71:7c:25:03:a7:ce:e9:7d:ff:7f:
                    38:6f:b6:e2:45:ca:fe:82:09:38:69:56:ce:7d:ee:
                    76:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9E:2A:CE:F1:B0:2A:58:D3:9D:28:3C:BA:EE:45:51:B7:9B:AB:5B
            X509v3 Authority Key Identifier:
                keyid:D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:88:92:50:29:b4:8e:3a:9d:02:22:fb:c7:82:0b:e3:cc:af:
         2f:76:b8:f3:ba:65:eb:71:c1:ff:36:78:bd:c5:bf:d1:db:1b:
         f9:1d:e8:e0:63:ca:3f:39:dc:04:6f:30:c7:6d:d8:00:8e:ca:
         80:57:dd:57:f2:95:85:77:0a:b0:17:5f:c4:e8:8e:55:72:b3:
         d5:be:8d:aa:4b:59:c3:59:3a:63:29:d5:cd:24:a2:88:4e:e4:
         b5:a4:03:3b:4d:d2:1d:6b:a2:d9:e4:b7:c2:4b:30:c8:ac:8f:
         db:5e:1f:51:ae:6e:4f:d1:ee:25:03:7e:bb:af:3a:e3:c5:11:
         1b:e1:35:d7:be:ae:11:14:0e:ec:be:74:4a:d1:71:8c:34:74:
         70:c6:99:2e:7a:b4:86:d9:4e:65:94:c4:b5:50:14:01:cd:20:
         6d:a5:57:b3:5c:ef:bf:11:89:0a:ca:14:03:c7:65:d7:4f:8e:
         cc:85:25:e9:ad:51:e9:2a:2e:76:f3:f0:7c:89:8e:e6:38:cb:
         f2:1b:16:84:cc:cc:42:95:a3:d5:66:b0:5a:55:8e:c1:a1:91:
         9b:4f:e5:15:3b:77:78:da:6c:43:a5:57:11:23:10:a4:95:55:
         4e:4f:34:7b:81:45:f2:89:95:56:9d:3d:49:1d:e0:0e:30:7a:
         82:25:af:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:56:44 2026 by rpki-client