Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
File:                     OZPVTmOQgKRsP-PViqh-MF22mtE.mft (raw, json)
Hash identifier:          eN+zVabrDjxlZp97cIKcVdnzwd70AQp0cAS2WSEleEg=
Subject key identifier:   09:A9:FF:B4:4E:C5:A1:96:13:1F:B4:84:EC:F9:94:77:B1:9F:43:56
Authority key identifier: 39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1
Certificate issuer:       /CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
Certificate serial:       019E3305CFED45E68F04592819024704E881
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
Manifest number:          15D3
Signing time:             Sat 16 May 2026 23:01:19 +0000
Manifest this update:     Sat 16 May 2026 23:01:19 +0000
Manifest next update:     Sun 17 May 2026 23:01:19 +0000
Files and hashes:         1: 4wCH1xXH2AmEqNEibg1P7FM72SE.roa (hash: 1jaXMinq6qu7nzoECfPCDfNYeYpFgouOjB2jk7Nl0Sw=)
                          2: OZPVTmOQgKRsP-PViqh-MF22mtE.crl (hash: n7/j+wSpCiIGU1S8d0HNO5gBqdNOHsxKy9i1eIFF1Bs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:33:05:cf:ed:45:e6:8f:04:59:28:19:02:47:04:e8:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
        Validity
            Not Before: May 16 23:01:19 2026 GMT
            Not After : May 17 23:01:19 2026 GMT
        Subject: CN=09a9ffb44ec5a196131fb484ecf99477b19f4356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c8:b9:4e:77:0a:9b:95:77:23:48:18:30:f9:
                    fa:1f:1b:42:60:35:c5:1a:b6:79:f3:02:ba:92:9e:
                    5e:27:18:c3:dd:9e:39:92:68:e2:67:ef:81:37:c1:
                    c1:d8:63:59:7d:b3:69:df:45:af:9a:35:99:82:f8:
                    f7:e9:ec:ab:2a:22:d1:c4:99:d6:10:58:b7:3f:d0:
                    f4:1c:6a:e7:66:08:a3:f7:72:36:d2:5c:f9:46:55:
                    54:dd:54:2b:d0:6c:7b:02:59:d6:17:f1:57:87:06:
                    fb:20:6f:35:e5:72:3c:2d:1a:5d:19:9f:fc:65:ea:
                    2c:dd:b1:7c:8a:e4:de:ab:a8:de:c1:64:8f:e7:a5:
                    cd:98:8c:b3:76:19:14:85:fc:f5:e4:b7:71:54:44:
                    b1:05:11:9a:4c:dd:f0:57:7e:c8:f7:1b:3d:cc:97:
                    e2:89:62:3a:5e:cb:c8:1c:da:8f:b3:85:bf:57:6c:
                    1f:aa:c4:40:94:8b:bf:8f:76:f0:05:47:05:f1:cb:
                    7a:63:f4:29:5f:55:49:72:2e:0d:8c:32:05:c3:fe:
                    29:79:e6:56:ca:f6:b4:fc:2c:1a:e1:07:2c:8e:4b:
                    6f:e6:cb:d7:6c:51:d1:88:ca:f7:44:31:37:98:b1:
                    91:2c:12:35:74:7d:43:a7:2e:6b:d8:ff:16:d7:99:
                    dd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A9:FF:B4:4E:C5:A1:96:13:1F:B4:84:EC:F9:94:77:B1:9F:43:56
            X509v3 Authority Key Identifier:
                keyid:39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:aa:f2:4c:c2:ef:e2:27:f3:99:5f:a0:81:17:15:0c:71:19:
         3c:fa:66:38:05:b1:48:ff:0d:85:fd:28:e9:93:6a:bf:f3:b8:
         c5:64:82:35:21:fb:11:6f:4e:f8:f5:10:b0:0a:87:40:59:c4:
         08:8d:34:60:60:cc:9e:84:65:75:20:85:0a:dd:b9:4f:90:20:
         75:07:b5:94:74:ff:4a:46:8b:80:62:14:71:8b:80:02:16:0b:
         ad:32:a8:b4:21:bd:46:7c:41:ce:9d:73:f0:b5:8b:8b:d1:f1:
         51:b3:13:dc:f6:11:5a:0e:3c:96:55:09:a6:b4:79:3a:71:22:
         e6:7a:0f:ac:8c:85:ab:67:a2:07:2a:9c:0f:31:93:fa:44:0b:
         21:0b:f8:4b:f1:c1:80:05:e5:c1:9a:04:8e:03:6c:63:fa:df:
         b0:1c:c5:13:db:25:99:e1:d0:42:95:3a:49:dd:27:1f:1b:a4:
         72:8f:e9:46:f8:23:bd:8f:07:a8:8c:8f:92:bb:6c:a6:03:bc:
         bf:71:c6:19:8b:2c:54:74:73:1d:f1:c3:bc:bd:0b:3f:b7:a2:
         1e:5e:cc:8c:3e:7a:3f:1e:66:a0:76:5e:59:aa:cc:37:bd:60:
         5e:70:ef:96:49:d5:d9:c6:6b:96:7c:56:b6:79:1a:b8:2f:1e:
         66:02:c2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 02:07:43 2026 by rpki-client