Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
File:                     oet7cZVO3_yjWEyF-gj7EiQv7NU.mft (raw, json)
Hash identifier:          USROsEzhskiiVMjaIWYotwuO+3tJIjoYINN08WI0H+k=
Subject key identifier:   C5:D6:3B:41:73:5B:9F:D2:05:F8:95:15:20:EF:F5:55:5B:AC:1C:60
Authority key identifier: A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5
Certificate issuer:       /CN=a1eb7b71954edffca3584c85fa08fb12242fecd5
Certificate serial:       019CF083036AD2EC55E16F2F679C731A8592
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
Manifest number:          013B
Signing time:             Sun 15 Mar 2026 08:00:43 +0000
Manifest this update:     Sun 15 Mar 2026 08:00:43 +0000
Manifest next update:     Mon 16 Mar 2026 08:00:43 +0000
Files and hashes:         1: lE1Kxf9PJiSztZNrzwwBPAVYUcU.roa (hash: jNZxU5D1EKLny/wqaNa70XGzWgiNnFCUNtLqg86RKFE=)
                          2: oet7cZVO3_yjWEyF-gj7EiQv7NU.crl (hash: enmOtyyzeVKX6zbS1OesgSyfPMSs6DYGqjzC+iNn5zY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f0:83:03:6a:d2:ec:55:e1:6f:2f:67:9c:73:1a:85:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1eb7b71954edffca3584c85fa08fb12242fecd5
        Validity
            Not Before: Mar 15 08:00:43 2026 GMT
            Not After : Mar 16 08:00:43 2026 GMT
        Subject: CN=c5d63b41735b9fd205f8951520eff5555bac1c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:fb:1c:fb:b1:ae:4a:7f:cf:df:94:f4:c0:
                    1f:2f:f5:ec:7e:49:01:27:81:c3:ae:18:e7:5b:b9:
                    bc:aa:af:d1:a3:51:f8:bc:ac:9a:ad:0e:d2:5f:0d:
                    6b:6a:37:3d:02:c7:14:f5:f0:a9:28:91:ab:40:3c:
                    11:49:d7:dc:b1:b1:31:15:58:9f:6e:f9:e1:e5:2f:
                    9a:7f:51:c2:f8:cf:8c:53:67:8b:70:06:14:19:d5:
                    45:5c:34:38:b8:6a:34:ef:4a:40:23:c4:79:19:17:
                    18:4d:13:8c:d7:2d:3a:14:93:c6:3e:24:40:9a:7e:
                    96:8f:fc:6c:e5:59:da:c2:75:20:5f:c4:2d:78:9d:
                    59:b7:15:26:72:dc:4f:25:5b:49:60:e1:15:fa:05:
                    98:02:79:ee:a4:42:5a:ab:03:91:99:6c:7d:dd:ec:
                    67:8d:b9:8c:9b:d3:12:31:c7:72:0d:bf:5e:be:97:
                    cb:d2:6d:18:fc:eb:1b:33:6d:3b:c2:e4:d5:93:42:
                    85:72:1c:89:6f:75:d6:41:41:5c:6f:f5:bd:7f:e8:
                    74:ab:81:d3:6a:5c:84:85:84:42:d3:88:af:15:a7:
                    e1:c3:ee:3c:84:f8:f0:0c:46:6f:90:eb:b0:b0:33:
                    1f:11:1c:71:77:b0:cb:1c:0e:75:12:41:19:57:e4:
                    aa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D6:3B:41:73:5B:9F:D2:05:F8:95:15:20:EF:F5:55:5B:AC:1C:60
            X509v3 Authority Key Identifier:
                keyid:A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b7:44:73:e8:9c:2d:42:92:cb:ff:0f:24:01:ca:98:85:6c:
         9b:a9:f6:cf:d4:ba:d4:7b:bd:5e:f1:1a:e0:86:fc:2c:02:81:
         b4:14:e3:6a:6f:fd:b3:81:38:4e:45:2b:68:46:ab:f5:d2:48:
         5f:9a:d6:13:97:35:f4:e7:4a:e0:ca:a0:e6:e5:b9:c3:a4:af:
         ee:e7:7d:55:bd:3e:a4:0a:ce:a7:2a:57:5c:5b:d6:58:73:a5:
         be:c6:78:be:6a:e0:71:39:d2:b4:7a:e3:7f:f6:d5:e1:ad:3a:
         09:7b:5a:4c:6a:a1:c6:a9:80:1a:9c:52:97:26:ee:2a:da:18:
         95:84:d9:f5:b9:78:71:3f:af:5a:6f:69:52:2e:46:f2:e3:ad:
         8c:0e:94:f4:d1:0d:3a:4f:7d:90:6d:03:91:71:dc:92:4e:de:
         81:83:c3:a4:23:ec:24:3a:af:40:0a:13:af:59:47:82:47:56:
         f4:f8:ce:c4:92:0a:2d:fa:b8:42:d5:b1:79:65:85:d8:42:d2:
         d6:08:8a:ea:a7:0a:3e:97:21:67:57:57:ed:c3:f1:1a:af:15:
         5a:3c:5e:3f:ea:4c:b4:4c:14:60:55:0e:e3:ec:21:62:a6:a9:
         46:53:9a:f1:47:7a:94:ac:ec:e5:1b:09:ce:09:21:af:2b:13:
         58:3a:c2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 17:59:29 2026 by rpki-client