Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
File:                     oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft (raw, json)
Hash identifier:          4wiEeyF/Ud6tkQ9ROokoUWC58A8GxYAVP9j6HY717XU=
Subject key identifier:   75:26:67:13:A9:F4:41:70:CA:98:DD:14:34:EB:2C:10:94:0E:7C:A5
Authority key identifier: A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77
Certificate issuer:       /CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
Certificate serial:       019DA78C394FF7E690FE6FD8901CAE2199C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
Manifest number:          7A
Signing time:             Sun 19 Apr 2026 21:01:17 +0000
Manifest this update:     Sun 19 Apr 2026 21:01:17 +0000
Manifest next update:     Mon 20 Apr 2026 21:01:17 +0000
Files and hashes:         1: WyQBbpbR1AvAKhTsL71x6qgch7U.asa (hash: 043dlMMNEhoWphFwOdB6ptcTMcRQS915TTU2W0PNpeI=)
                          2: oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl (hash: GKemxMo5852Rs3PwIdvH71XXNiIEmz28J1g4p3UgP2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a7:8c:39:4f:f7:e6:90:fe:6f:d8:90:1c:ae:21:99:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
        Validity
            Not Before: Apr 19 21:01:17 2026 GMT
            Not After : Apr 20 21:01:17 2026 GMT
        Subject: CN=75266713a9f44170ca98dd1434eb2c10940e7ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:e3:12:81:c1:e1:7e:fb:56:da:0a:40:8c:
                    96:12:45:5c:b3:4e:51:dd:be:be:fa:80:82:02:3f:
                    74:eb:e9:de:25:6a:ad:0e:48:a9:9b:31:c7:62:8d:
                    8a:b3:a5:c1:61:c9:0f:7d:7f:e8:69:56:99:b2:7e:
                    12:07:47:33:cb:72:a7:8e:9b:04:d0:f1:66:7c:74:
                    57:82:8c:7c:39:dd:dc:08:fe:1a:50:b1:04:2c:c7:
                    d9:51:89:d4:2b:22:82:64:90:14:94:91:00:1e:97:
                    42:70:f4:59:e1:17:fd:6d:95:49:eb:b3:c4:fe:c4:
                    52:e1:29:e1:55:37:c7:06:ca:02:74:26:63:98:99:
                    74:2e:cb:69:27:38:68:aa:b0:d3:85:f9:6c:41:82:
                    bd:a6:14:6c:76:b0:dd:08:26:24:75:ad:ab:62:76:
                    46:81:a5:df:43:a1:e1:31:48:de:81:72:1e:9f:91:
                    0c:c7:d3:6e:04:b0:72:0d:b1:d1:c3:fe:ef:a2:c4:
                    d8:2d:a1:17:7a:fb:1c:ab:6d:a8:11:09:6e:a8:91:
                    cd:5a:1b:a7:94:95:bb:a1:be:42:76:39:fc:ec:85:
                    f2:90:bb:24:e2:dd:37:82:b9:d6:85:31:9e:10:f2:
                    bd:8e:11:9d:50:de:af:34:5c:27:ee:17:eb:89:d8:
                    ad:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:26:67:13:A9:F4:41:70:CA:98:DD:14:34:EB:2C:10:94:0E:7C:A5
            X509v3 Authority Key Identifier:
                keyid:A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:52:f7:ee:1b:87:b7:c7:35:cb:9f:29:35:58:64:19:a6:17:
         62:8a:91:28:f1:5c:f2:0e:de:e6:04:a3:ad:2f:66:c3:19:be:
         a4:60:27:1b:b7:53:be:a1:33:90:6c:b6:c5:55:87:ee:85:a8:
         eb:2c:26:51:6f:af:0d:98:9b:68:63:e7:87:bb:8b:1b:f9:47:
         4e:2e:b8:0d:a1:af:cd:e9:8f:fc:e3:1e:53:45:a3:1b:c6:b4:
         1d:5f:4f:b4:ba:ab:3e:11:b4:eb:59:a7:ce:66:8a:fb:d4:08:
         0e:6c:ca:8b:c4:5e:f9:d5:26:94:c5:f7:49:b9:e7:b3:e5:b6:
         d8:15:93:84:d7:61:b2:79:71:a5:33:de:f1:cf:6e:15:88:03:
         53:4e:4d:fe:bb:86:5d:30:84:7b:97:42:dc:af:20:f1:c9:82:
         9c:88:cc:ca:7f:f2:08:f6:f6:bd:0d:c0:e7:fb:c1:ee:84:6b:
         b0:48:eb:b2:ad:1d:17:12:a3:e8:82:57:30:ab:f6:90:e9:a0:
         d0:d9:41:18:cc:17:4d:e4:73:a1:85:03:38:30:3b:68:8e:ca:
         be:f3:96:b5:d6:a1:a2:53:13:ba:88:e4:ba:c5:44:6f:ba:cb:
         4e:08:1b:3b:7a:0e:58:e0:d9:83:6f:86:18:c1:8c:a0:0c:b7:
         20:c9:a0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:35:21 2026 by rpki-client