Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
File:                     oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft (raw, json)
Hash identifier:          c7rSN383TY3QQBKwjNpIxt6vtv7Vcf8CPdJJ1pPSYgY=
Subject key identifier:   6B:E3:81:BB:1D:36:24:FB:FB:96:54:71:43:3B:A3:D3:EB:A1:C7:55
Authority key identifier: A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3
Certificate issuer:       /CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
Certificate serial:       019DDD5D8EA9B9BBDCD4BA2226EBD058EC17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
Manifest number:          02
Signing time:             Thu 30 Apr 2026 07:49:49 +0000
Manifest this update:     Thu 30 Apr 2026 07:49:49 +0000
Manifest next update:     Fri 01 May 2026 07:49:49 +0000
Files and hashes:         1: aPHgHDs8wZHtsWjj-BGNDzZUqVw.asa (hash: xCblPYPS0g+4wFl3k4nN7Rdc1pcGx5xLzvzdxGTb7kU=)
                          2: oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl (hash: pdJFph+gznW33iqy1IqK/okSc9qBsTDoFZAaaku4BdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dd:5d:8e:a9:b9:bb:dc:d4:ba:22:26:eb:d0:58:ec:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
        Validity
            Not Before: Apr 30 07:49:49 2026 GMT
            Not After : May  1 07:49:49 2026 GMT
        Subject: CN=6be381bb1d3624fbfb965471433ba3d3eba1c755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:36:2a:1a:54:e9:21:a0:06:6c:dc:69:7c:40:
                    0a:af:2d:f8:3f:1e:cc:fe:92:11:c3:48:df:b2:04:
                    8d:03:1e:77:b0:a7:25:88:21:47:c6:ae:34:a5:5a:
                    e5:79:86:19:a2:10:e3:39:2d:78:38:13:a2:bb:2d:
                    8d:a6:7d:94:08:61:3f:bd:b9:4e:30:84:51:dd:e3:
                    f6:07:e4:a1:de:2f:d7:d2:bc:95:87:71:7a:26:0b:
                    2c:43:dc:28:bc:d6:19:10:e7:56:96:a6:2f:c9:9d:
                    fa:2d:bd:4c:50:30:96:ad:98:06:18:7d:c5:c4:10:
                    51:28:eb:78:f0:6b:53:6c:75:18:a3:2d:5a:a0:78:
                    ee:00:04:f8:63:73:40:d8:39:74:80:60:ce:12:f6:
                    93:df:8e:78:6b:70:dd:11:11:76:4c:96:18:70:22:
                    b8:e3:ea:90:06:b4:0f:62:0e:0a:6d:78:7f:e9:5b:
                    b5:58:33:c6:44:76:f3:9c:0d:09:dc:65:19:39:5a:
                    12:03:73:40:35:38:93:ac:81:38:cc:d8:50:f4:d7:
                    8f:0d:e1:4c:19:e0:93:1e:31:55:f4:f9:a6:74:6a:
                    42:d0:50:c6:4a:36:8d:84:46:d9:3f:82:26:0e:ab:
                    33:b8:a9:d0:55:79:61:ee:9c:04:cf:0f:26:3a:1c:
                    e4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E3:81:BB:1D:36:24:FB:FB:96:54:71:43:3B:A3:D3:EB:A1:C7:55
            X509v3 Authority Key Identifier:
                keyid:A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ca:74:a1:7f:37:c4:62:7e:00:e5:4c:96:67:a3:28:35:7c:
         87:e8:49:a7:6d:6b:bf:ed:96:b5:b7:ef:50:e8:ea:4a:11:87:
         62:51:ae:04:e3:c0:86:0b:7f:8f:5c:51:ea:41:ae:d4:bc:e2:
         d9:98:58:7b:1c:26:e7:19:27:97:0b:d9:df:11:63:b8:e8:8a:
         9b:51:30:d7:e1:02:a4:c5:7d:9d:f0:c6:7a:01:32:a7:4c:e2:
         e9:17:cf:a9:62:9c:ca:0b:20:0a:68:7d:49:04:6b:44:fc:d2:
         34:d3:4e:78:0a:3c:ae:5c:90:c2:c2:90:c0:11:10:37:ca:ac:
         d9:16:e3:b9:dd:01:0b:2f:df:09:0b:09:13:af:6e:82:aa:92:
         d6:80:b3:c9:05:4b:7f:b3:2c:d5:b0:cf:a6:7c:03:c2:10:ea:
         f9:ff:7f:ec:26:6b:91:0d:c5:03:30:5d:73:ce:a7:54:12:e2:
         6e:6e:7a:86:48:6f:52:11:41:10:4f:de:ab:26:ac:ca:40:61:
         1e:d1:dc:62:78:99:f5:fd:fc:b2:42:56:42:4f:f6:c1:bd:32:
         02:f5:09:60:14:b8:a8:56:ed:76:0a:8d:2d:c6:88:4e:96:7c:
         6e:af:b9:08:3f:e6:0b:8a:4e:37:97:86:99:d2:ce:7a:52:a3:
         2c:5a:7a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:46:19 2026 by rpki-client