Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
File:                     Oexx3D1ozej5B3069mdRwp_O6kw.mft (raw, json)
Hash identifier:          cL+fzqw4EOTIu3JiZZCnSjMtbkNutIH9UrwZgsaOAtM=
Subject key identifier:   88:8B:F8:C2:D0:B0:31:D8:34:C6:6E:C4:33:A1:0B:E7:93:CA:C9:D8
Authority key identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
Certificate issuer:       /CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Certificate serial:       019CE36C63F64CB5505311D40214830FC812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
Manifest number:          0BBE
Signing time:             Thu 12 Mar 2026 19:00:57 +0000
Manifest this update:     Thu 12 Mar 2026 19:00:57 +0000
Manifest next update:     Fri 13 Mar 2026 19:00:57 +0000
Files and hashes:         1: GWIPuzYrr1ZkVb6zUh724dGRI1w.roa (hash: 8ZDylGUDk0rJ7fPM3ZJJKDsoUpKFNi+95rGt5nvLIKg=)
                          2: Oexx3D1ozej5B3069mdRwp_O6kw.crl (hash: xh05i0bFmHYfi8hJ6xeWOQ0Q257kiuQLzzS0eYJsjdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 15:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:6c:63:f6:4c:b5:50:53:11:d4:02:14:83:0f:c8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
        Validity
            Not Before: Mar 12 19:00:57 2026 GMT
            Not After : Mar 13 19:00:57 2026 GMT
        Subject: CN=888bf8c2d0b031d834c66ec433a10be793cac9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:98:eb:f7:ee:10:be:ef:4b:70:94:0b:53:
                    61:73:53:69:10:e7:49:87:db:85:58:96:85:4e:33:
                    9e:38:95:b3:c2:9a:62:a9:7e:ae:f9:9e:29:6b:49:
                    d2:b4:62:4c:31:50:1d:63:45:8e:9a:3d:34:f9:60:
                    80:4a:9c:1e:ca:a4:ff:f4:46:c3:54:86:d8:54:d5:
                    de:ef:fd:1e:8f:51:da:7a:d8:15:b2:ad:7f:79:a5:
                    88:a6:4e:d9:a5:0b:e3:30:47:a6:39:26:76:a7:92:
                    6e:7c:4f:62:a0:a2:4e:b9:7c:aa:2c:81:13:b9:17:
                    48:60:93:c7:cc:88:5b:90:70:65:31:70:5e:f4:fb:
                    48:42:86:82:3a:90:5e:5a:74:c4:65:cf:e3:ec:f6:
                    4e:2c:b9:2e:90:ad:f3:2a:e0:3e:b2:8f:45:ab:e2:
                    9d:bc:e8:8a:75:24:83:96:1c:a0:9a:68:f4:64:2f:
                    e6:e3:ab:af:5b:f4:b4:fb:2f:6b:6f:97:2e:ef:8c:
                    5e:f3:d3:63:d7:1e:3f:7f:02:eb:27:0f:18:14:36:
                    d5:30:96:d5:ed:ac:c2:2e:8a:db:79:04:c8:de:e2:
                    6e:d0:1a:62:c5:18:c3:de:04:7a:cb:7f:91:3e:2f:
                    48:75:89:c9:b8:6c:63:d2:af:8b:a9:07:a2:2c:02:
                    99:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8B:F8:C2:D0:B0:31:D8:34:C6:6E:C4:33:A1:0B:E7:93:CA:C9:D8
            X509v3 Authority Key Identifier:
                keyid:39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:68:e1:b9:d2:7f:1f:91:dd:44:d9:8d:12:5a:3b:92:71:a6:
         fb:e1:ea:0f:fb:97:0e:0c:eb:e6:b8:6b:30:ba:f1:94:c5:fc:
         2a:55:96:0d:f1:45:0f:65:08:cb:27:f1:85:5f:c6:b2:c1:f7:
         93:dd:b5:b0:17:17:39:ea:d4:fb:b4:c0:88:32:cb:d6:68:79:
         2c:5e:e3:b7:8f:90:54:f4:33:d2:66:c3:32:26:69:28:61:33:
         8f:83:0e:f1:46:e5:55:bb:7e:a5:c3:1b:43:83:7c:4d:a4:bf:
         cd:06:76:27:eb:7f:ad:a3:68:69:61:32:d4:b3:8d:cf:d2:41:
         d4:21:6c:bf:e6:4f:c1:88:ce:25:89:20:5e:1d:fe:61:2c:ce:
         47:05:93:71:41:25:9d:cf:6c:05:e0:97:4f:5a:46:7e:81:d1:
         03:ae:9c:9a:f8:5a:d4:2c:05:fd:fd:7b:cd:a2:1b:68:6e:d8:
         d0:7a:8d:0d:2b:de:b6:a9:fa:91:1c:38:c6:7a:26:89:7e:3e:
         e3:7b:34:ee:2a:c0:e2:67:a7:eb:01:ef:d8:9b:81:7c:65:fa:
         8e:9b:35:4d:87:de:cd:31:54:ad:6b:1d:bd:26:53:57:0b:54:
         43:30:4a:4f:7d:20:8c:47:8a:a0:2f:8f:e4:cd:74:74:2e:90:
         0e:c2:a9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:32:01 2026 by rpki-client