Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
File:                     oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft (raw, json)
Hash identifier:          8iLwid/vudCuvJL23VY51gzXamSrtya5/S26keFLR0M=
Subject key identifier:   62:FF:1C:53:04:1B:73:3F:F7:13:84:88:EF:E9:7A:6E:68:88:26:C7
Authority key identifier: A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
Certificate issuer:       /CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Certificate serial:       019D378994C693D6DB44DCE14B49887BDEA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 03:00:56 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:56 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:56 +0000
Files and hashes:         1: 927DrBdZnw9D__84nL_ziFzE2-k.roa (hash: RgBqCsDQ9jzTYF1D+WmbsiffT+S6nFjM+//7MQvYIcM=)
                          2: oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl (hash: XSLCWYr2a3zPbPFdIL2uwkqF9Vp9uZhK8B1giW5hhmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:94:c6:93:d6:db:44:dc:e1:4b:49:88:7b:de:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
        Validity
            Not Before: Mar 29 03:00:56 2026 GMT
            Not After : Mar 30 03:00:56 2026 GMT
        Subject: CN=62ff1c53041b733ff7138488efe97a6e688826c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:aa:f2:db:f9:c8:38:35:a3:ab:a2:c7:1e:d8:
                    af:8e:52:e1:93:b3:9d:8e:92:83:1a:0f:f0:78:7e:
                    9c:4c:07:ee:59:d2:a0:bb:7a:8a:d7:06:af:5b:e8:
                    56:91:20:92:e5:16:58:49:31:95:f7:57:be:f3:4a:
                    f4:8c:ad:3c:4a:ca:1c:03:7d:b5:8e:dc:37:6d:a8:
                    7a:ac:10:41:1f:ab:03:f5:8b:30:4e:fe:33:56:5e:
                    09:c2:4b:82:13:0b:6b:bc:84:27:d7:83:75:be:36:
                    f1:5c:80:a5:73:73:a8:8b:99:53:27:b7:02:45:10:
                    ab:05:41:11:79:19:cf:4c:56:f5:c4:ff:89:33:3a:
                    f5:30:72:b4:c2:59:03:83:0a:da:31:a3:0e:29:aa:
                    6a:f9:20:4f:4f:1e:a4:8d:89:c4:bb:dc:f8:c8:66:
                    10:f4:52:1f:b7:cd:82:c8:d2:90:75:db:ad:02:8e:
                    1f:fe:79:9b:d5:68:7c:ee:e6:1e:ae:ea:4c:22:5b:
                    5a:4f:8e:54:80:ef:df:f8:d5:50:a7:19:5d:42:84:
                    b1:f7:75:8f:bd:42:4c:06:12:95:9d:37:b4:dc:ff:
                    47:f6:cd:d6:77:58:c8:d0:1e:bc:14:10:35:e7:9e:
                    cb:2a:bd:ca:1d:28:4b:af:92:ae:61:43:cc:80:b0:
                    43:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FF:1C:53:04:1B:73:3F:F7:13:84:88:EF:E9:7A:6E:68:88:26:C7
            X509v3 Authority Key Identifier:
                keyid:A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:05:ce:ad:38:e2:a1:3e:a3:cc:0f:2b:b4:c0:66:a9:19:43:
         a3:51:d5:58:80:49:b7:fd:48:f1:c5:c2:e7:e3:3e:ba:8e:a9:
         4b:54:cb:ea:16:4d:a0:d8:ea:d8:8a:d8:39:fc:77:21:e5:d8:
         b1:1e:c4:6a:25:d2:24:94:83:2e:d7:a4:8a:10:8e:a5:87:aa:
         15:46:88:fe:df:7a:08:c6:66:93:67:09:e0:b6:73:b0:11:d9:
         44:b4:d3:7a:ab:e1:f2:d0:d8:ba:45:91:10:64:aa:40:59:15:
         30:e2:11:7b:14:dc:d1:5c:54:4f:91:42:e9:33:0f:2e:40:ad:
         12:7d:32:f1:b0:10:cb:69:c0:8e:5a:51:74:13:f0:d6:fc:cf:
         54:93:4e:d8:9b:e9:0b:e2:da:10:4d:5f:4e:96:0a:33:5e:9b:
         20:a7:54:a9:c7:c0:eb:d7:1c:fa:04:d3:a0:e2:d4:d2:22:db:
         0d:ce:ea:e4:70:61:b9:89:94:27:3d:c0:7c:2a:09:52:ce:cc:
         62:94:0e:ba:ce:34:54:74:29:2a:25:83:b5:c2:c5:da:7d:fe:
         78:50:9b:f5:da:79:71:1f:08:f9:06:92:1b:8d:45:a9:14:22:
         1d:02:ec:eb:9a:ab:5e:cb:21:36:34:9a:e3:13:ea:f5:25:43:
         1b:79:de:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:46 2026 by rpki-client