Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
File:                     OjSIklHnyxM-kGxwiRuhoEle2GA.mft (raw, json)
Hash identifier:          p3cTPKCwHPEP/wbu8iFwG+6AO5C7JMT4M9G9IhS/YzI=
Subject key identifier:   96:46:4E:55:35:86:56:EF:BE:7E:90:DB:BF:E2:12:E8:07:8B:9D:45
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Certificate issuer:       /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial:       019DA7C2EECBACA4B394E34350342391CABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
Manifest number:          1065
Signing time:             Sun 19 Apr 2026 22:01:03 +0000
Manifest this update:     Sun 19 Apr 2026 22:01:03 +0000
Manifest next update:     Mon 20 Apr 2026 22:01:03 +0000
Files and hashes:         1: OjSIklHnyxM-kGxwiRuhoEle2GA.crl (hash: 1wiD1DLVs7PxTL97FppPRru57be0S8uvCWif8GRKNKs=)
                          2: TEmzgEgKyQo96Gqk3OCXyu8JaO8.roa (hash: w2y72ko+lJjiVlRbZd4qD2G3W4qa+BLqf6Sn4G+/dow=)
                          3: XWcYfudW_fCjYcND3H407xe959o.roa (hash: hWyo7JRjc5zRnP54qNBVfiEpztNdLDDxrtX9abLg7Ps=)
                          4: ge5kxbikwrvAEUuIO3lNRkFxLmw.roa (hash: eEJ79T/++oL5XPtUGIItjARG2jFvNlWqvTqYFtL6EkY=)
                          5: rTgC7PLBMFHhdpl3fBHWaPGZP_Y.roa (hash: ng9lqabxlxHQ1G6hpIjPJfi43vHsrt3ed7Cyb0T70ss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a7:c2:ee:cb:ac:a4:b3:94:e3:43:50:34:23:91:ca:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
        Validity
            Not Before: Apr 19 22:01:03 2026 GMT
            Not After : Apr 20 22:01:03 2026 GMT
        Subject: CN=96464e55358656efbe7e90dbbfe212e8078b9d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:9f:54:5a:e0:93:76:92:de:2e:5e:01:14:
                    c7:aa:2f:10:86:c2:ab:05:0f:d9:65:ec:04:c5:60:
                    6e:c2:2f:3a:7a:e1:e5:76:d2:05:d5:09:5a:6a:a9:
                    f9:76:0d:43:6c:b7:34:33:a1:23:be:10:41:42:65:
                    f8:16:0b:fe:20:a2:31:3d:71:d5:f3:6c:b9:80:b1:
                    e9:09:8a:97:7e:aa:f7:65:00:06:6b:ae:cd:cf:c9:
                    db:7a:f3:68:19:0c:67:28:86:11:a5:57:ae:c8:19:
                    b3:e4:67:ba:b4:07:d2:3b:f0:07:e4:b5:da:b0:f4:
                    33:d1:5f:10:cb:6e:18:52:b9:72:6e:af:97:4a:40:
                    c5:4c:b4:b7:a8:b6:76:23:be:e0:0f:af:e5:bf:cf:
                    d9:bf:26:4d:29:25:91:79:a0:8c:71:16:21:1b:25:
                    eb:4d:a1:a6:5b:e4:e9:6e:a8:e4:5e:f8:05:4f:dc:
                    d5:8b:44:a8:0b:cc:c2:8f:9b:d9:10:66:65:54:1b:
                    72:ec:c6:83:41:d8:9d:09:fb:5f:d9:2b:72:72:bf:
                    f3:fc:23:99:ab:8e:c1:5d:35:f0:7f:48:61:d0:39:
                    3a:b1:98:a9:c4:48:74:b0:0b:e5:d7:45:83:71:cf:
                    f3:7d:ef:94:fc:4b:39:ac:a1:37:0f:d1:6e:8f:89:
                    1b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:46:4E:55:35:86:56:EF:BE:7E:90:DB:BF:E2:12:E8:07:8B:9D:45
            X509v3 Authority Key Identifier:
                keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:5c:36:eb:7a:f6:33:0c:5d:c9:53:93:21:b0:88:99:d0:a3:
         76:74:e3:8d:69:4b:ab:04:f6:bc:ab:70:13:cb:1d:cb:01:be:
         38:28:d1:66:e4:36:b6:2e:d8:3c:7f:df:1d:db:71:b7:f8:c3:
         df:88:6a:20:4e:54:24:a2:54:0c:dc:32:7b:22:12:74:16:fc:
         27:2e:42:c7:85:74:ef:e6:35:69:c2:d4:e4:33:d7:a0:0b:18:
         ee:8e:e6:c0:94:b9:89:51:23:20:90:ca:6e:50:0b:c9:be:f9:
         b0:52:cc:c6:6c:13:b8:8c:91:53:70:53:c0:d1:dc:a3:9e:37:
         ba:9c:e3:60:ef:d3:6d:8c:c7:d8:c5:ce:3e:12:e8:7c:a7:02:
         6a:d9:a9:df:b7:52:f0:72:4d:82:df:ea:1f:03:f0:a4:71:5a:
         18:19:ef:80:3b:3d:ec:b7:e7:9c:f6:eb:de:d4:51:f1:df:76:
         81:d4:f7:d9:37:b2:b7:e3:57:31:b8:0b:e6:ab:8f:7b:00:e9:
         f5:4b:0e:34:c0:36:72:a3:66:7a:ee:67:26:8f:bf:65:f0:9a:
         bf:e8:f0:fe:5d:a9:c6:7a:78:11:e0:47:49:12:79:9e:7e:6a:
         76:8c:90:45:f9:16:da:6f:14:e2:f7:61:be:46:7f:23:92:aa:
         03:8e:a1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:30:21 2026 by rpki-client