Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
File:                     1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft (raw, json)
Hash identifier:          KDwYQH1NrmVr623iCgE81qjXYykRaLVIJr4hZHM+eqU=
Subject key identifier:   B6:B2:68:34:D2:BA:35:C7:49:E9:39:52:0E:39:60:29:1A:94:C7:6F
Authority key identifier: D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
Certificate issuer:       /CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Certificate serial:       019E2A02804C0022421BF4E7859F879F3288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
Manifest number:          1338
Signing time:             Fri 15 May 2026 05:01:07 +0000
Manifest this update:     Fri 15 May 2026 05:01:07 +0000
Manifest next update:     Sat 16 May 2026 05:01:07 +0000
Files and hashes:         1: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl (hash: 2/+dLIoC8ZhblcWL66mF9i+di4w3Hqmc9aSmM+YlGq8=)
                          2: QUWFgCmw4YvFuNhA76fhRZo1qdA.asa (hash: qlWMvZSHFjKwoiR9XSDKRHRr7ChwOKhh6yQ7lTCbwBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:02:80:4c:00:22:42:1b:f4:e7:85:9f:87:9f:32:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
        Validity
            Not Before: May 15 05:01:07 2026 GMT
            Not After : May 16 05:01:07 2026 GMT
        Subject: CN=b6b26834d2ba35c749e939520e3960291a94c76f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:93:9c:df:79:99:32:8e:08:07:e2:a0:55:66:
                    7e:a2:45:52:e3:e1:9b:81:a4:55:7e:1c:17:14:68:
                    78:4b:ef:8c:32:18:de:2c:54:18:6c:c8:78:8e:70:
                    5c:9a:5a:3c:82:19:60:52:ce:ba:8a:77:86:a0:e1:
                    ed:c3:e1:67:44:fe:a5:ad:ad:e7:2a:a4:ab:ed:f4:
                    6d:0f:a0:77:32:26:b3:17:0a:ae:2d:51:0f:d1:72:
                    50:6b:13:7b:f2:69:5a:b2:51:5d:1a:9a:79:91:48:
                    c4:92:78:9b:de:ab:bb:84:ac:ae:96:b3:6a:88:d6:
                    df:3e:a5:dd:f2:2f:8d:62:b5:c5:dd:17:dd:c8:77:
                    72:d5:42:01:8b:5f:37:ca:64:c5:31:fc:ef:e0:4a:
                    1e:fe:0e:27:01:4d:6c:83:a6:d4:55:60:78:98:3b:
                    13:03:77:40:eb:a1:87:bf:65:f9:44:de:97:a6:7f:
                    0f:a1:7a:1b:92:d2:81:06:a1:ec:0c:9b:9e:c2:4a:
                    dc:56:5b:47:79:87:6e:e4:bf:5f:8f:a5:16:d6:d6:
                    bd:35:8d:fa:e5:ba:35:48:20:2e:47:3e:1c:a0:1d:
                    b9:8b:fb:7f:15:d0:be:9d:2b:18:ff:be:9f:59:34:
                    a6:ca:20:05:8f:5c:2c:99:ec:fc:8f:13:6c:b9:f0:
                    b9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B2:68:34:D2:BA:35:C7:49:E9:39:52:0E:39:60:29:1A:94:C7:6F
            X509v3 Authority Key Identifier:
                keyid:D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:88:55:33:60:35:81:a9:db:8b:b3:9a:0f:cb:8c:e7:53:b7:
         f9:41:ac:db:45:9b:55:57:78:c3:9b:0c:05:cc:5e:a5:f5:5e:
         75:ee:a8:d3:ad:d9:5c:1c:4d:9d:59:4e:4b:01:be:cf:95:f6:
         e6:8f:40:53:a6:2d:36:4c:31:12:c7:83:b7:40:79:73:71:5c:
         71:08:8a:a4:a6:f6:23:dd:ce:7e:25:fe:f2:ce:ad:71:57:72:
         f8:be:e3:94:ff:32:55:b7:79:a3:49:e1:b9:39:50:14:5b:bf:
         1e:ef:0e:d2:82:7e:0a:a7:9d:68:f2:7e:98:1f:06:d0:10:75:
         22:66:d8:65:ae:ff:73:e2:42:40:2d:2b:60:26:c3:36:ce:7a:
         5e:fd:ca:66:d6:da:08:45:ff:4b:c0:b7:63:bd:12:f2:d8:63:
         92:ef:c8:e7:4b:3b:99:0a:97:f6:01:2b:23:66:9c:51:5a:69:
         2e:ae:40:09:6d:c0:d3:2e:4f:2d:58:4b:65:af:8d:cf:19:bc:
         a6:a9:52:cb:58:78:7b:35:de:37:3e:21:9f:f0:25:41:16:bb:
         d3:db:e5:fe:30:dc:58:74:e8:76:ca:3a:73:29:5c:e1:71:ef:
         28:dd:2c:8f:04:ec:b4:27:ff:fb:13:07:1a:2b:c4:62:fb:94:
         68:7a:2d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:58 2026 by rpki-client