Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
File:                     oKzKnE_pv57fO8blyrxSg42TyxM.mft (raw, json)
Hash identifier:          01q002hJAdhaI61MZ/NRFfLLqvemWzZpZaAy3hmxWyo=
Subject key identifier:   28:61:09:C2:71:78:24:4F:F1:E8:E6:6F:B8:72:C3:4C:7C:28:1F:7C
Authority key identifier: A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
Certificate issuer:       /CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
Certificate serial:       019E2AA6DCE86982DE7FCBEEFB72A68A5E9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
Manifest number:          0255
Signing time:             Fri 15 May 2026 08:00:38 +0000
Manifest this update:     Fri 15 May 2026 08:00:38 +0000
Manifest next update:     Sat 16 May 2026 08:00:38 +0000
Files and hashes:         1: 4pI4a8-tsvH-3VDbaKXuIvjNMz8.roa (hash: f0CZY2S4Rcr1NYYNDzp2PZIOWVKIDfe5fbwBQKjurLE=)
                          2: Q3eIp9baoUXgGx7jMp7Mfn7uqX4.roa (hash: q1dXe35IoMpEAZcG9cyPr1eAH6iDIpKmxS9VDxb5LkE=)
                          3: UJmrzzmZkriiyqqLqg-H4VtX7kg.roa (hash: WDuI1Ev3hKiEKyqljuPHG/axZuaiMi/BKngrm5HtvP8=)
                          4: cDxC5PpD7MD4ru_6B5or7odQkzY.roa (hash: hDp5+cUx75dVaYsE3sJ55sHIF6z5d4S4CHAEo4z8EZc=)
                          5: oKzKnE_pv57fO8blyrxSg42TyxM.crl (hash: k1hBeNMM4/mOkMp3OZdJdZzGYccD2Kruxdbp9+qClSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 08:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:a6:dc:e8:69:82:de:7f:cb:ee:fb:72:a6:8a:5e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
        Validity
            Not Before: May 15 08:00:38 2026 GMT
            Not After : May 16 08:00:38 2026 GMT
        Subject: CN=286109c27178244ff1e8e66fb872c34c7c281f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:28:d4:8d:38:2e:99:f7:9a:17:6c:1b:b3:8f:
                    40:48:19:f5:13:ab:cc:4e:f6:29:78:80:25:e2:6e:
                    e2:4d:cd:41:f4:07:91:df:18:aa:c6:2e:43:99:31:
                    e4:c2:0f:57:81:ee:cb:bf:1d:c3:7c:12:34:51:f6:
                    0a:e0:aa:24:56:e8:f3:c5:63:94:7a:54:b3:da:7e:
                    d7:cf:66:76:61:a6:fd:3c:bf:82:20:ad:b4:22:51:
                    c0:72:ad:1e:31:cd:48:a5:74:3b:a1:33:ff:3e:e0:
                    bf:16:a3:26:60:14:f8:cd:cf:8a:3c:e7:8d:86:71:
                    f3:be:21:af:58:3a:b3:4c:30:d4:88:4f:48:95:96:
                    0a:b8:51:28:ab:27:c8:ff:d9:aa:13:76:0e:51:0c:
                    bf:ec:7b:08:15:94:31:12:a9:30:bc:61:98:8f:e8:
                    5f:48:8b:3a:bc:6d:ba:7d:77:2f:f3:e7:d5:8a:49:
                    be:47:15:04:b1:12:5b:36:e1:6d:47:53:6e:dd:21:
                    b6:10:6e:e5:8e:3b:da:73:1c:6e:63:67:db:d0:20:
                    33:9e:2b:73:f2:ee:d8:85:74:5a:22:3c:91:12:75:
                    d0:dd:40:ff:5f:0f:aa:e3:0b:fc:e6:31:94:cc:ab:
                    fe:be:44:66:c7:c9:78:56:d6:14:19:be:cb:b1:9b:
                    71:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:61:09:C2:71:78:24:4F:F1:E8:E6:6F:B8:72:C3:4C:7C:28:1F:7C
            X509v3 Authority Key Identifier:
                keyid:A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:58:54:d4:88:9d:03:7d:f1:b2:4e:1b:2b:35:8f:d8:d4:28:
         51:e9:35:e1:4c:64:6c:09:fe:ac:e4:20:93:b9:af:44:92:03:
         03:fa:3f:67:6b:a8:ee:a5:b7:b5:5e:d9:33:69:a6:84:8e:74:
         e1:aa:6a:ea:c9:cb:20:42:d2:b7:95:5d:9c:0a:78:ed:41:09:
         31:5b:9c:27:a3:3a:38:5d:53:41:ce:4b:b9:1a:e1:66:24:d4:
         7c:5a:54:0f:d3:2b:07:ef:9b:bc:ae:2a:1e:11:3b:12:11:c7:
         a9:93:82:e2:e3:70:49:bc:cd:25:49:de:f9:5f:ce:d5:81:b8:
         5e:ba:a5:33:b3:9f:38:44:83:70:92:9f:9e:a0:c4:43:fd:14:
         8b:c6:32:38:28:44:cb:54:9f:a7:d4:99:c2:18:2f:70:7f:1d:
         d3:79:6e:21:f0:19:9e:4c:95:0c:64:8d:c1:8b:97:a2:4f:a5:
         08:d7:be:56:22:a2:21:7d:fe:06:cb:9c:4d:5a:7d:4f:df:6b:
         27:5f:3b:ab:af:a9:20:48:bd:10:b0:b1:c3:0f:7d:1f:7d:1b:
         d0:bd:2a:0b:a2:d3:ba:80:45:94:be:1a:3c:fc:cc:10:f1:4d:
         a1:d7:66:0e:86:10:e0:39:8c:5d:ba:a8:66:cf:60:61:52:37:
         1b:da:0f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 14:26:03 2026 by rpki-client