Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
File:                     oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft (raw, json)
Hash identifier:          w3jOkJYZnNKCOgSAB74Syexw2xKdqdwPgnK/eFAdcf0=
Subject key identifier:   F2:F1:F8:1B:69:AE:E0:46:04:15:35:3A:9B:07:1B:AB:90:78:A4:D6
Authority key identifier: A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46
Certificate issuer:       /CN=a122d6d21bd04c46224653a49be029e3c024b846
Certificate serial:       019CFC87397EB9BBEB111C78FA7E97502934
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
Manifest number:          0477
Signing time:             Tue 17 Mar 2026 16:00:46 +0000
Manifest this update:     Tue 17 Mar 2026 16:00:46 +0000
Manifest next update:     Wed 18 Mar 2026 16:00:46 +0000
Files and hashes:         1: 3VvlIVLD8nV-Kprr00nGUqwlEG0.roa (hash: ueTtVv9Izvar/a32kf0F4hmGSZUFBIbcRRQsZSddarI=)
                          2: 7HJItND-ZHUyWIc0zlIoIbcu0kU.roa (hash: 9Bz34LYfCAabYfpSmfTeNq9WvdNCYgrnyawzxf6Rfac=)
                          3: cBS-3HpC_a4rHcbd8xWkU8ryqAo.roa (hash: BFwk1ZVFsJ92QmF6WqyS8lrea+ZBvLbcAz/u0+3fQLc=)
                          4: oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl (hash: P2jeF0fpMgmbTbPj24ERSRDGPd+yTab3fG6BoZa4vj0=)
                          5: wpoL_iSupuiaeUF0rSK5oTJDYgk.roa (hash: tmpMUF0ltyMmfrFAPsjl7BnWO5nUIh5IyWezk54S+Pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Mar 2026 16:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:fc:87:39:7e:b9:bb:eb:11:1c:78:fa:7e:97:50:29:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a122d6d21bd04c46224653a49be029e3c024b846
        Validity
            Not Before: Mar 17 16:00:46 2026 GMT
            Not After : Mar 18 16:00:46 2026 GMT
        Subject: CN=f2f1f81b69aee0460415353a9b071bab9078a4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e9:eb:fd:d6:fa:df:6d:dd:74:6a:1f:92:22:
                    78:0b:8c:80:f4:46:9c:8e:04:0d:bb:32:27:c2:91:
                    3e:06:09:03:6b:7e:af:c3:24:9b:83:22:8a:d9:74:
                    84:e9:53:18:37:91:69:f5:87:5c:23:9e:dc:f0:be:
                    1b:84:9c:b6:20:4d:c2:34:48:0b:0f:f1:42:10:40:
                    a3:e5:d1:6f:71:ed:21:9e:03:ea:e8:06:44:00:9c:
                    2c:a2:48:f4:f9:5b:4c:0b:95:c9:fd:00:3b:bf:10:
                    1f:15:c5:68:df:e7:9e:18:15:2a:12:d9:d3:b2:f4:
                    cf:62:fe:2e:2e:f6:b3:bd:5d:3f:34:96:56:92:1f:
                    22:78:ad:fb:08:19:c2:5c:d3:22:bc:a6:13:b3:5b:
                    47:05:e4:c0:f3:ee:25:75:5e:b7:63:6e:5c:e1:f2:
                    0e:15:db:b3:84:fc:8a:ef:7b:9d:82:c1:c2:65:df:
                    f0:08:8a:65:fc:e8:29:78:2c:61:e7:3b:14:9f:df:
                    76:55:65:27:4c:8a:2b:51:d9:cc:4d:91:13:ab:c6:
                    cc:ea:59:d0:89:50:05:68:15:31:8f:14:01:b3:4f:
                    46:9d:50:c5:13:17:3a:cc:74:2d:f9:e7:40:50:4c:
                    5f:6f:dd:9f:bc:42:90:75:2a:ad:1d:a0:9a:3e:92:
                    24:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F1:F8:1B:69:AE:E0:46:04:15:35:3A:9B:07:1B:AB:90:78:A4:D6
            X509v3 Authority Key Identifier:
                keyid:A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:fb:2c:81:0c:8a:b3:0b:8d:ca:ba:38:56:f9:4f:77:54:72:
         c2:3c:46:e4:a0:cd:d2:c3:d4:21:af:c4:c4:66:a2:86:4d:74:
         4a:b8:15:1b:06:6a:66:90:c3:e2:9f:c6:ce:64:05:0a:a4:9b:
         97:a4:ec:d9:d9:41:a8:a1:cb:14:61:0c:15:8e:9d:9b:a2:34:
         2f:33:35:02:cf:05:dc:4b:f7:ed:99:31:4b:2f:51:dd:b8:8d:
         48:c9:fc:c5:44:5c:4b:01:6a:89:3f:b6:29:65:5e:e0:4e:b6:
         fc:c2:d9:55:91:01:83:b2:5d:e6:75:21:b1:46:b7:fe:fa:e0:
         45:28:8c:15:70:38:0d:4d:c9:49:94:fa:4f:77:5c:3b:09:a1:
         0e:b0:49:4f:b2:9a:57:b3:b8:4d:b7:98:08:b0:82:cc:a0:93:
         85:27:95:94:f5:40:d5:cc:e6:bd:7b:a7:80:42:e3:70:eb:d6:
         ef:3d:60:82:5d:28:d0:43:4e:10:ef:7b:80:b3:64:31:9a:f9:
         41:a7:1c:fa:f3:8a:e1:ea:de:2d:61:83:d2:87:d0:2d:fc:02:
         aa:5b:b7:86:d9:07:03:07:8a:7f:2e:df:5d:62:dc:f6:d3:b0:
         19:d5:2e:78:e8:a3:73:b7:fc:e8:cb:a7:bf:1d:88:81:06:31:
         d1:d8:0d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 22:43:31 2026 by rpki-client