Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
File:                     PubOz_2bi7oY1HTns5k-Ch0U27M.mft (raw, json)
Hash identifier:          F4c+B7mxhYFL72UzjW8SgEX7PQW+EJpNYgSlIhEMTZQ=
Subject key identifier:   A3:D9:C1:0A:96:69:BF:8A:5F:FA:6B:26:FD:D4:78:BF:12:FB:13:9E
Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
Certificate issuer:       /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Certificate serial:       019DD9F9B9A9A661505C85B40C37F4D2B35B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
Manifest number:          18E2
Signing time:             Wed 29 Apr 2026 16:01:54 +0000
Manifest this update:     Wed 29 Apr 2026 16:01:54 +0000
Manifest next update:     Thu 30 Apr 2026 16:01:54 +0000
Files and hashes:         1: HgjQlaKjOcxyBGYejwW2nEs1AV4.roa (hash: A/JVdLkAtd7xSgRJY34UCglbvZrgY4rTBx9M0XvHris=)
                          2: KbPCfCpgY4busEPKG3wKIKYL4ts.roa (hash: /r3wKFeByv8IWPnZi01I5rTvuzXRQVBcL8LQjvMalwY=)
                          3: PubOz_2bi7oY1HTns5k-Ch0U27M.crl (hash: VMzeA12j0Tsnv/9dyl2jW+Oq7D4GpjV9j9I+klyeceU=)
                          4: TR9cohMhMoQQxWhWiR1qGs1BMC8.roa (hash: LYdTaX6pjmd3oJ4vpjV9U20LQlY3HXHKSPGaKNT6k0M=)
                          5: VVHWjLC5gXhkxNQ7IVFDXzmzeZI.roa (hash: xCZynqZw2sX0L0GEOZPMQ2Okzgf6Cs5V0s8Gbvable4=)
                          6: na7v2RTX0iJO5QICr8PmbCw-LUM.roa (hash: jwROABglDlbIBf0fqlrQ82IKxKEdLiyV166j/7Y15oM=)
                          7: ycbxLoTJEDsv40EPKCzklrp5vCU.roa (hash: ik9FtWC2uSrCFeO2vECTjX7gm9PiFa3XhpXGDwO8G94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Apr 2026 13:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d9:f9:b9:a9:a6:61:50:5c:85:b4:0c:37:f4:d2:b3:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
        Validity
            Not Before: Apr 29 16:01:54 2026 GMT
            Not After : Apr 30 16:01:54 2026 GMT
        Subject: CN=a3d9c10a9669bf8a5ffa6b26fdd478bf12fb139e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8d:bc:37:b6:09:f1:a6:f6:1b:57:a3:15:f1:
                    ee:8e:bf:74:4f:fd:52:ba:14:81:9e:0b:33:89:63:
                    f7:d0:86:ae:c9:18:38:80:79:f1:04:b3:5c:6a:48:
                    eb:d5:fc:bf:ad:f1:b1:19:d9:77:7f:98:1e:a7:51:
                    55:ed:b5:f2:48:be:c5:17:42:e0:6b:ab:67:44:11:
                    0d:1d:b0:51:be:20:75:ca:d8:ac:ab:ac:65:11:e4:
                    20:3e:92:10:4d:26:1e:de:e8:7d:8f:b9:a2:6c:3c:
                    31:f3:85:f9:52:c1:f3:b3:f0:b4:ae:d4:84:8f:3f:
                    ca:16:ae:b3:cf:90:3e:a2:3a:4b:07:96:22:74:42:
                    a5:f0:45:5f:b1:0c:b3:7c:03:95:0e:d9:c4:23:a5:
                    8d:4a:e7:73:29:61:f7:e6:83:4f:c9:77:43:3d:90:
                    5b:4d:2b:e0:d4:da:43:72:47:bc:b6:1b:d0:aa:a2:
                    b4:e0:3c:f2:d9:08:e2:23:eb:c8:ca:28:91:69:b9:
                    e8:55:39:2b:34:5e:aa:7a:3b:25:32:c3:73:9c:3c:
                    22:a0:bd:27:97:66:7c:4a:6e:30:16:55:09:32:24:
                    92:a6:89:a2:31:27:bf:8e:92:e2:a7:63:48:6c:75:
                    96:c5:5f:f1:b1:e2:aa:1a:ad:ed:8d:26:b4:1d:39:
                    ec:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D9:C1:0A:96:69:BF:8A:5F:FA:6B:26:FD:D4:78:BF:12:FB:13:9E
            X509v3 Authority Key Identifier:
                keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a7:57:21:e9:3c:7c:f5:ef:48:66:34:df:b8:48:ab:74:ff:
         67:6b:f5:b3:16:99:09:8a:92:cb:79:63:d3:79:7d:a9:6e:2c:
         95:e3:d6:12:f4:b9:23:09:5a:7e:4d:9b:36:41:ac:0d:22:95:
         67:2e:e3:55:0c:7d:9f:4e:9b:ff:3b:0a:f9:dd:a5:c0:53:84:
         f9:3f:02:d9:bc:f6:67:68:ee:cb:63:9d:46:6b:8e:6b:a9:4c:
         a7:84:98:eb:41:b9:27:99:98:df:b7:ec:f0:69:bc:04:b1:84:
         93:95:a4:f6:37:11:5d:4d:ca:a9:0f:86:83:66:6a:32:83:77:
         6b:92:35:ab:06:16:33:19:26:35:78:89:f7:37:0f:1b:a2:05:
         0f:f9:28:70:79:72:ba:2f:12:4f:c9:4c:25:df:b4:1b:ed:68:
         81:b6:55:61:88:f3:b3:5f:16:fa:e3:b2:49:84:a8:fe:77:82:
         cb:22:db:ce:b0:65:6b:1d:db:dd:43:6f:0a:f8:93:f0:68:5c:
         46:03:00:e4:7b:4f:19:2a:e8:e1:66:9b:54:a8:84:98:54:39:
         7e:d0:43:79:d0:00:eb:ab:c1:b1:85:fd:fe:7e:fd:de:7b:85:
         d1:22:54:9e:20:43:c3:8a:95:90:0a:6f:c6:8f:c3:00:8b:b2:
         3a:8f:cc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----