Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
File:                     4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft (raw, json)
Hash identifier:          t7jt2FSNDcwOBkRXv/fGjYv8ViQP1MkNQCRLvhfAl88=
Subject key identifier:   21:3E:8C:17:CE:24:F8:4F:DF:0F:DF:B9:64:00:9C:82:B0:16:C1:EA
Authority key identifier: E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
Certificate issuer:       /CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Certificate serial:       019E31856AA7C7B4D24000C1C05B7158713A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
Manifest number:          0D2D
Signing time:             Sat 16 May 2026 16:01:27 +0000
Manifest this update:     Sat 16 May 2026 16:01:27 +0000
Manifest next update:     Sun 17 May 2026 16:01:27 +0000
Files and hashes:         1: 4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl (hash: F1mGPcYT6S+AJtbxES8Wxkzuopdh8oHS1Kw7zQJ7X8s=)
                          2: C5-n76GjDGgTo3St4TOPzsa8ErE.roa (hash: wL0KAphUIwIQECc1NQQKJ/DAF+DOTBb5tCVgPHb/KS0=)
                          3: dMiPF5hRDsmVGyczjp5h0yMXvNA.roa (hash: 3OGMUms6N3Q+YmbW4ivKKL6p/UH/QnXPY3TzgOYxtkk=)
                          4: yXUhi2vBjaa8ds8k-vv6CwFfTf0.roa (hash: qLNfF2ctfPtKdPk/SFwkzQElr0ANhZieliEEgaCLo18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:6a:a7:c7:b4:d2:40:00:c1:c0:5b:71:58:71:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
        Validity
            Not Before: May 16 16:01:27 2026 GMT
            Not After : May 17 16:01:27 2026 GMT
        Subject: CN=213e8c17ce24f84fdf0fdfb964009c82b016c1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:34:5b:fc:2f:2d:09:e8:33:99:2b:7b:27:ea:
                    f6:ad:84:39:a9:6b:40:ea:6c:c1:94:04:8d:3d:43:
                    0e:e5:9b:69:85:64:23:2e:fc:d6:9c:17:4e:69:bf:
                    df:8c:3f:61:f1:10:77:1b:f4:85:5c:2c:20:9c:a7:
                    44:f8:90:45:c9:57:77:3c:fc:56:72:1d:df:e1:b7:
                    96:00:d5:dc:6c:78:b9:81:02:91:4e:10:6c:d2:5a:
                    bd:27:20:5e:97:e8:47:77:97:c5:56:f6:01:c0:b9:
                    44:fc:10:3b:56:e9:a5:cb:53:7a:63:d6:b7:09:38:
                    7d:6e:94:08:10:f0:bb:4b:33:0b:a4:44:dc:9d:66:
                    76:7d:e4:95:a8:16:0c:27:e9:d0:96:04:09:d2:b8:
                    2d:14:c1:a0:a5:34:02:a6:ae:1e:9c:5c:af:bf:21:
                    5a:c3:df:5d:54:2f:1f:da:99:d1:52:08:dc:08:09:
                    59:30:cf:3b:f4:f8:c5:c6:08:72:7c:c8:b7:22:af:
                    82:02:27:48:9d:47:92:c5:f7:e6:7b:1f:3e:5d:75:
                    b7:1b:ca:52:64:f1:16:bb:85:f4:32:ed:7a:87:83:
                    bf:22:95:23:5d:d4:fe:5d:b1:3b:8b:7e:5c:92:3a:
                    74:e9:f1:aa:8d:3a:e7:eb:ce:1c:98:7e:27:15:1c:
                    4f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3E:8C:17:CE:24:F8:4F:DF:0F:DF:B9:64:00:9C:82:B0:16:C1:EA
            X509v3 Authority Key Identifier:
                keyid:E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c8:9f:e7:aa:69:8a:6b:8f:e1:a4:97:5f:95:9c:a2:38:cb:
         eb:65:42:fa:59:a6:f1:a2:c0:16:d8:24:03:e3:1b:f6:32:dc:
         8f:65:0f:b4:3a:57:5e:9a:34:09:c0:c8:6c:e8:e9:88:a4:42:
         c8:31:18:8e:09:56:0c:65:ee:cf:df:14:d6:57:7f:90:a9:17:
         fa:e0:b1:f5:ee:e4:97:85:56:3b:71:e6:4f:e2:47:3a:6f:0d:
         23:4e:64:66:ef:49:9f:10:f7:b9:55:7f:e9:e2:75:1d:2f:fd:
         c5:ed:f0:71:ae:57:78:d5:fd:c1:63:16:9c:2a:8e:17:e2:85:
         5b:34:59:c9:b3:88:19:0c:03:07:cd:f5:99:95:54:28:fd:f9:
         c1:d1:a5:ca:01:70:f1:5d:58:12:47:e7:85:71:60:ab:e5:0b:
         f8:0e:94:aa:dd:80:e4:23:a0:1e:bb:65:2b:bc:db:76:a5:9a:
         96:ed:81:7a:97:46:c6:56:44:a9:a3:d4:ab:b5:67:4b:36:f4:
         01:da:0f:8b:6e:25:a1:d6:a0:47:98:2a:95:ec:cf:23:7b:74:
         f3:9a:8a:58:77:aa:a6:e7:53:60:0c:b7:1d:cf:41:44:9d:00:
         8e:9a:c1:78:e7:8a:f5:b0:dd:d6:55:a5:10:b3:b6:32:eb:e8:
         a9:98:96:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:31:35 2026 by rpki-client