Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
File:                     oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft (raw, json)
Hash identifier:          IwRNmfczgyKB8NSMHlff4D5dvXM0LWC4ouZqdxkzK+k=
Subject key identifier:   0C:25:75:68:23:3B:3B:06:0E:33:86:19:2E:61:13:9B:30:A3:2C:59
Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
Certificate issuer:       /CN=a018d68115dc4b730f157906b04426e599b3a8ca
Certificate serial:       019CE3355D89E4454DEA76E3F10942C99EED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
Manifest number:          0E2C
Signing time:             Thu 12 Mar 2026 18:00:51 +0000
Manifest this update:     Thu 12 Mar 2026 18:00:51 +0000
Manifest next update:     Fri 13 Mar 2026 18:00:51 +0000
Files and hashes:         1: YNzgRRzWdr4v8acL2_mrerBZEBY.roa (hash: 0vVcOkUILWsiRv1XZ/svhufbrbQADvOSN3QtFvRS5U8=)
                          2: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl (hash: 20Klslab9yFUNw7KREzgRip2eSeqojs/ldyny265AX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 15:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:35:5d:89:e4:45:4d:ea:76:e3:f1:09:42:c9:9e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca
        Validity
            Not Before: Mar 12 18:00:51 2026 GMT
            Not After : Mar 13 18:00:51 2026 GMT
        Subject: CN=0c257568233b3b060e3386192e61139b30a32c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:24:8c:57:87:7a:f4:02:dc:be:18:2c:20:92:
                    5d:20:3e:35:38:31:19:bc:a7:cf:a4:d9:fd:06:86:
                    36:97:7b:87:46:4a:48:73:6a:74:4c:c6:af:94:43:
                    c0:e1:3e:cb:a6:6a:f8:f9:b2:63:a5:27:aa:ca:d8:
                    39:76:1c:57:f4:68:86:2b:69:79:51:30:1e:d1:da:
                    ae:81:ee:1e:05:e5:37:a0:d1:c4:c3:04:cc:5e:05:
                    e5:53:91:f6:29:95:e4:21:60:4f:57:39:f5:e6:84:
                    8a:ca:98:cd:2e:31:e9:06:26:2b:6d:ce:f6:0a:77:
                    b0:bc:8a:c9:07:22:f0:45:f6:2c:c3:2f:2b:4e:c2:
                    a2:26:a4:a2:34:e7:0b:82:18:26:95:2c:a6:6d:18:
                    ca:73:51:88:52:23:e5:59:3c:7c:84:39:be:4f:cc:
                    dc:0b:a4:1b:fe:b3:a7:14:63:6e:58:86:70:c8:26:
                    cc:3d:3c:50:d9:5b:fe:80:d9:92:aa:ea:59:e6:53:
                    31:ff:6c:59:7f:5f:54:2b:b5:1c:5f:2a:1e:7a:2e:
                    a6:9b:b5:1f:a1:ce:be:28:52:b2:05:77:c3:81:22:
                    1d:27:e5:d9:1f:ce:96:67:ed:89:80:4e:7c:c9:35:
                    61:4a:ed:54:ea:a2:20:9e:86:4c:22:72:0a:13:d0:
                    d2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:25:75:68:23:3B:3B:06:0E:33:86:19:2E:61:13:9B:30:A3:2C:59
            X509v3 Authority Key Identifier:
                keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:fc:e9:21:3d:04:93:0d:0b:89:d6:16:74:bc:f4:0b:c2:68:
         d2:e2:a5:fb:e3:7d:b2:87:8d:ac:17:e0:8a:fb:26:34:d3:dd:
         d0:61:28:2f:6a:c0:47:48:fc:c0:ec:e9:15:e9:dc:62:3c:17:
         9f:98:07:81:93:3c:23:7b:5d:05:a2:bd:af:e8:af:71:fc:df:
         f4:42:08:10:5f:61:19:69:49:69:40:8b:72:b0:71:fd:43:a4:
         09:6e:75:f8:37:90:14:bb:e8:3d:8c:ab:8f:a1:24:6b:cc:30:
         1e:bc:09:bb:d6:da:c1:32:c0:5f:6e:ec:02:11:66:4d:8b:46:
         3b:12:ee:57:03:a2:4e:ea:5c:8f:de:f9:9e:bc:6b:f8:c4:c9:
         5e:ae:91:ea:f3:70:a0:fd:6f:dd:ed:bc:3c:e3:d6:5a:76:55:
         ab:29:fe:82:5d:3a:12:42:f1:f4:89:9f:d2:5f:f4:0c:be:52:
         8d:06:a8:d1:bc:93:2a:cf:72:33:fd:37:e2:48:1b:e1:4c:9f:
         a9:f5:a6:19:0f:95:fd:7d:ee:3f:be:ce:2b:5a:ae:26:4f:4b:
         3c:96:ee:76:c6:02:61:92:10:72:83:75:cb:d7:15:38:cf:50:
         4b:2d:21:cc:85:ed:a7:3f:74:98:c7:3f:b7:7e:4f:7a:65:a2:
         b5:a4:c8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:13:02 2026 by rpki-client