Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
File:                     xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json)
Hash identifier:          qYqExS46KANWI1SPXXgLkjYms2zz4wiL8lkV4tIcTqw=
Subject key identifier:   7C:7E:14:A5:A2:6B:A9:C8:CE:66:C5:98:9D:83:CB:6F:F8:75:13:73
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Certificate issuer:       /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial:       019DA2D2E24FD16AB525449285BA60513555
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
Manifest number:          120E
Signing time:             Sat 18 Apr 2026 23:00:22 +0000
Manifest this update:     Sat 18 Apr 2026 23:00:22 +0000
Manifest next update:     Sun 19 Apr 2026 23:00:22 +0000
Files and hashes:         1: ATFqvKQfCzg1eIhHj9ilysnZYnE.roa (hash: 9xWvqqO+irmFSgWZgkDiVyOSk6AqF02qWQdfh9GrCc8=)
                          2: NIt5HAEHP3eGIkRaRfmU_TQEUio.roa (hash: kNqtp8gVzKVPwqTczsFvU1xgIi6B9Z0PZaQgvs2xN6o=)
                          3: gtTwRDBJR-BbMiRZiF0UkREdrNI.roa (hash: EYI6Dc616oG3PdcronQ8IrDd6TturvsbVQq4J3V4p+w=)
                          4: tPnRw3top4XnUY_nTcwvwdpUiGQ.roa (hash: M0xYz4wzzLwebgXureqeaj7zhKGgbdLeOlyBhuFnNKo=)
                          5: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: IBcBq84h+uMU/1Ybd3aF6Pc9oQyWINirxPqs104RFuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 17:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:d2:e2:4f:d1:6a:b5:25:44:92:85:ba:60:51:35:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
        Validity
            Not Before: Apr 18 23:00:22 2026 GMT
            Not After : Apr 19 23:00:22 2026 GMT
        Subject: CN=7c7e14a5a26ba9c8ce66c5989d83cb6ff8751373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4a:69:bb:23:14:6d:92:06:c8:86:fd:ff:3b:
                    48:7e:59:41:4d:b1:79:30:41:5a:d4:5c:09:84:85:
                    09:80:f5:c1:db:8b:60:77:35:67:e4:40:8c:fa:03:
                    0c:b5:6b:71:b9:f2:a5:10:6c:fb:22:4c:7a:e8:58:
                    96:3e:7f:fc:34:9d:d9:d0:82:92:d1:37:99:7e:07:
                    68:16:35:1c:3a:23:13:c3:de:38:a1:b9:1a:12:12:
                    ad:14:ff:89:09:a0:0e:3c:be:f1:f7:db:64:f3:15:
                    fd:69:6a:2d:12:3e:30:e8:02:c2:ae:7f:89:3d:34:
                    e5:24:34:c4:cf:a6:36:36:b3:85:54:43:40:73:79:
                    e8:e9:76:17:6d:40:d4:2b:e4:63:ad:39:68:6b:0a:
                    16:d8:10:f6:1e:d4:41:8d:bf:e3:b5:e6:20:90:2d:
                    11:35:8e:c4:62:66:01:ac:55:a7:fc:11:09:e3:fa:
                    eb:bb:7b:19:52:a3:37:82:69:04:ba:fb:04:10:9b:
                    a3:d4:d0:bf:0e:18:cd:7f:9f:e4:17:6d:d9:43:d6:
                    e0:86:d2:28:25:5e:02:dd:fe:07:71:52:69:13:7f:
                    74:05:17:59:a3:6c:7c:58:4f:e6:19:3c:91:e7:94:
                    7c:bd:8a:cd:ed:7a:4b:9b:e8:5e:67:3d:ca:fa:ec:
                    9d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7E:14:A5:A2:6B:A9:C8:CE:66:C5:98:9D:83:CB:6F:F8:75:13:73
            X509v3 Authority Key Identifier:
                keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b1:e2:27:7e:7f:d3:bd:56:26:43:6c:c3:70:d0:8f:7d:03:
         23:f0:85:46:aa:b5:8c:21:6f:b1:ed:09:88:28:88:a4:75:94:
         55:20:46:58:48:df:22:2d:3c:64:13:18:59:19:40:0b:b7:f0:
         af:d1:e3:bf:c4:e0:ae:a2:b2:5e:cb:ae:a9:6f:73:dc:80:ba:
         3e:cb:0b:54:56:60:b1:eb:ad:a0:da:0d:0f:c7:6d:e1:16:21:
         26:24:68:ff:2e:de:04:21:67:52:a3:98:6b:db:b5:3c:df:b2:
         ce:3d:c3:a8:c8:08:98:87:f9:82:99:e4:95:98:64:99:f1:0d:
         05:8d:7b:b1:75:96:47:41:d3:c4:45:c3:1b:b8:9b:04:27:a0:
         3a:ab:1b:25:ca:3b:be:97:2a:1c:63:7e:b3:59:a7:f2:80:e9:
         c7:d9:54:f8:3e:b4:0b:d5:5a:bd:55:58:c8:5e:1f:7d:1a:f7:
         06:e6:71:ea:9c:e4:10:ab:23:38:0c:c4:a4:a7:fc:b1:c4:08:
         72:b7:c2:73:2a:d9:75:46:3a:b6:ef:2e:71:14:46:0f:f5:fd:
         b7:3a:41:de:2e:e3:c7:36:94:d3:cf:64:c0:6e:4e:76:dd:0c:
         73:d4:77:0a:7e:03:28:ab:39:2d:28:c4:5a:2c:80:32:e3:f6:
         2c:b5:7d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 00:55:12 2026 by rpki-client