Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File:                     1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier:          G9jlNeLGQFQdLpog50XgBVJZFX8232zVxel7+OT+kgo=
Subject key identifier:   0B:73:43:BB:98:20:AB:97:36:3B:8B:19:C4:E5:33:55:79:C5:F2:EA
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer:       /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial:       019DB3FE9D48B77689317BD1DCC4173A3FC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number:          0F71
Signing time:             Wed 22 Apr 2026 07:01:41 +0000
Manifest this update:     Wed 22 Apr 2026 07:01:41 +0000
Manifest next update:     Thu 23 Apr 2026 07:01:41 +0000
Files and hashes:         1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: ae0HAUAuti3Td9E+TyBRV1PYU+MdAtZi7rd0HLjZkAw=)
                          2: cm7yc5ocW07wElUQnj8sV7yvJ1E.roa (hash: sgiYRfXKAqpRMQa7LkE6X1z2YPcOejwF3EEFNRme46s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Apr 2026 07:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b3:fe:9d:48:b7:76:89:31:7b:d1:dc:c4:17:3a:3f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
        Validity
            Not Before: Apr 22 07:01:41 2026 GMT
            Not After : Apr 23 07:01:41 2026 GMT
        Subject: CN=0b7343bb9820ab97363b8b19c4e5335579c5f2ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:3b:d0:0a:2e:6b:41:26:fd:49:ec:09:c7:
                    27:e6:42:86:7d:15:93:43:20:86:fe:34:b7:be:51:
                    90:d0:2d:85:6f:d2:d1:8d:3f:fc:b0:f4:33:32:cb:
                    e2:dd:bd:c1:73:ce:d3:83:43:7f:17:c7:6e:a5:59:
                    49:67:ac:96:0a:34:95:da:ec:d6:7d:39:32:55:57:
                    22:ec:07:d3:07:f0:a8:0f:71:eb:34:bb:1a:43:ee:
                    84:4d:db:43:4c:6e:5e:f2:4d:a9:ac:16:8a:28:1e:
                    21:ef:df:3c:58:5d:ae:87:db:57:3f:03:33:e7:ac:
                    43:e2:4f:4c:91:06:9c:6e:87:05:ab:27:ac:ea:ea:
                    e8:1d:56:fc:c9:3a:ed:c1:e4:72:53:eb:e7:1c:a9:
                    00:23:70:cc:0d:52:a3:02:51:91:c7:3f:ee:ca:d0:
                    f8:a5:76:23:cf:6d:d5:7e:1e:3f:b5:51:55:f2:56:
                    75:8b:b4:c8:80:e9:7f:bc:ed:95:ad:b7:28:cc:3b:
                    9c:84:db:ee:d6:79:ef:20:38:58:df:1c:60:34:90:
                    4d:05:12:74:b5:f2:92:0d:49:25:5b:05:24:5c:20:
                    22:72:dd:08:5f:6f:be:0b:9e:b8:1d:50:c2:e5:13:
                    61:c7:4b:32:55:25:64:09:5a:c9:37:9b:76:ed:8a:
                    6e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:73:43:BB:98:20:AB:97:36:3B:8B:19:C4:E5:33:55:79:C5:F2:EA
            X509v3 Authority Key Identifier:
                keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:16:de:10:b0:86:e9:6e:5d:99:09:19:e2:f6:f4:ec:28:cf:
         cb:43:04:08:5a:b1:a7:b3:57:88:00:92:dc:ae:7f:5a:ca:82:
         75:ef:e2:bd:7f:6f:a0:02:47:58:76:22:78:4f:d5:8d:8d:2a:
         85:5d:26:c6:27:39:45:97:47:67:93:ae:e7:e4:a0:c6:03:34:
         db:e4:bc:60:80:6e:5e:a6:1f:4d:48:86:1d:3a:ab:47:58:30:
         de:31:55:00:22:d9:47:8f:1e:5e:2c:12:4f:c4:cf:79:cc:ee:
         6c:c9:be:ac:76:a9:31:91:c4:0d:e7:0c:b9:dc:75:c9:3c:8b:
         49:bd:30:81:d5:04:20:d4:ae:59:9c:d1:4e:7e:8b:61:5b:5e:
         33:4a:75:82:a0:9d:eb:6a:9e:d3:6a:69:bd:b9:f7:f0:ad:d1:
         a9:14:ea:c5:e2:27:9a:7d:58:a2:fd:86:bf:d6:7a:5b:7f:8e:
         f0:90:79:03:e2:fe:fc:37:75:a8:51:54:8b:4e:5b:15:b6:3f:
         51:40:67:0b:ca:4e:71:a6:f1:62:4d:30:3b:ea:e9:db:4a:68:
         84:e0:69:96:de:9e:3b:8a:cd:46:e8:69:40:0b:e2:6f:91:98:
         37:a2:4e:30:30:81:0e:b4:c5:3f:bc:a5:10:66:6a:d3:4a:ce:
         26:21:fc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 11:28:57 2026 by rpki-client