Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
File:                     0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft (raw, json)
Hash identifier:          cEWaD8OBpYqTnfbKQljN8B0EFaMbTsgzMBQFajJYZwk=
Subject key identifier:   0C:F9:8C:16:13:F8:56:57:DE:9F:29:87:D9:C5:D3:60:B1:C3:4F:0E
Authority key identifier: D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
Certificate issuer:       /CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Certificate serial:       019E28F016A36AB7C70EC7D232078DDB8451
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
Manifest number:          101E
Signing time:             Fri 15 May 2026 00:01:23 +0000
Manifest this update:     Fri 15 May 2026 00:01:23 +0000
Manifest next update:     Sat 16 May 2026 00:01:23 +0000
Files and hashes:         1: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl (hash: o6RTizgHGytnz9A8wgm2HhV38tZOdoSX32X5q5kDCXE=)
                          2: jZT-rA7xXgV9ISXMAJBVRKLq758.asa (hash: 1yFM7L3x3s5BQ7YW45Q8MwC00LEtrcdpmLfR0GtoPSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 00:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:f0:16:a3:6a:b7:c7:0e:c7:d2:32:07:8d:db:84:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
        Validity
            Not Before: May 15 00:01:23 2026 GMT
            Not After : May 16 00:01:23 2026 GMT
        Subject: CN=0cf98c1613f85657de9f2987d9c5d360b1c34f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:77:70:7c:be:08:f9:94:a0:fc:1c:a4:e5:45:
                    85:dc:c3:67:68:2a:1a:0c:49:6f:5f:4b:0b:a8:95:
                    60:ad:59:de:8c:c7:03:50:ac:fc:a1:a5:93:e7:c2:
                    c1:0f:b9:04:54:8b:6d:e3:d8:5f:73:82:4d:b2:93:
                    5c:29:f4:33:ca:26:41:96:c9:7a:0d:02:b7:5d:8e:
                    5a:6a:5a:e8:d2:8d:24:c1:4e:c7:23:57:64:84:5e:
                    ec:64:ca:bb:69:1f:08:2f:02:44:9a:c5:81:73:51:
                    09:ff:67:35:5e:aa:2d:5c:1b:24:84:ec:c2:0a:0f:
                    89:f5:66:a1:be:7f:1d:d1:51:fa:b6:77:41:21:c1:
                    11:b9:ea:64:29:aa:0b:2a:fd:9e:65:9d:10:96:eb:
                    ab:86:a5:f0:93:51:2a:3e:2a:df:a2:4a:9c:76:f8:
                    04:94:6b:a2:70:bf:d2:4d:e4:0b:d5:db:8e:e9:c0:
                    0d:a5:8e:9b:bf:0f:56:23:17:10:b0:24:f4:56:67:
                    7b:91:e9:40:ff:89:cc:74:52:50:fb:15:bc:be:26:
                    8f:82:35:ab:68:81:17:56:af:5c:97:f1:9b:07:4a:
                    ba:60:b4:20:20:86:47:be:23:c5:f4:a3:6d:b9:dc:
                    f1:49:cf:18:5a:ca:0b:e1:85:32:de:1b:ce:17:38:
                    93:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F9:8C:16:13:F8:56:57:DE:9F:29:87:D9:C5:D3:60:B1:C3:4F:0E
            X509v3 Authority Key Identifier:
                keyid:D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:55:44:73:7a:8c:41:e2:75:a3:ce:1b:97:2c:82:52:56:3a:
         76:65:6f:07:f8:af:4a:bb:16:b4:f1:4e:2b:b8:28:24:e2:0f:
         44:cb:71:56:04:ba:4b:e0:e6:3f:b7:01:86:6a:b0:c9:01:0b:
         29:4a:ce:e5:98:42:87:b3:3f:a9:94:2f:f6:cf:15:76:08:fe:
         9a:bf:6a:44:55:d2:7c:0b:82:25:d4:96:dc:01:aa:be:6d:90:
         b4:82:f6:ce:f0:ef:96:20:4a:73:de:cf:c0:2c:78:2d:73:1b:
         b2:51:1a:27:3b:65:75:9c:bb:ab:54:ed:93:5b:b9:f0:30:42:
         8c:bb:44:82:4a:6c:23:0a:42:57:1d:83:e2:44:28:8e:3c:da:
         a1:43:c1:48:75:be:3f:31:51:f6:6c:69:02:0d:32:3e:62:01:
         cb:2e:33:95:8d:37:43:05:06:9a:9a:28:c5:b6:25:ac:8c:f4:
         de:49:8a:fb:ba:b4:c2:c3:7b:7c:94:ab:1d:77:a9:15:9d:c4:
         81:a1:69:cc:98:63:a4:b0:9f:c9:6a:10:9d:cb:e1:1e:c4:b8:
         38:f9:80:c6:38:62:ab:47:3c:a6:d3:99:2e:3e:2f:10:7c:bf:
         90:d5:da:53:4f:e2:c4:c5:21:91:b5:11:82:85:47:d8:b4:5a:
         a2:62:bf:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:27 2026 by rpki-client