Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
File:                     C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json)
Hash identifier:          E+woT2NYzCVJKZfsWUovjvoeSiAl1g0MSoSkD3ivaxo=
Subject key identifier:   09:54:E8:85:34:3B:1C:2A:81:AA:39:EA:AE:B3:59:69:11:B7:B5:99
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Certificate issuer:       /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial:       019E30A9878D6728D242145FD817E236A3F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
Manifest number:          0DD0
Signing time:             Sat 16 May 2026 12:01:17 +0000
Manifest this update:     Sat 16 May 2026 12:01:17 +0000
Manifest next update:     Sun 17 May 2026 12:01:17 +0000
Files and hashes:         1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: dEZu+imRKzwYttrR3FY6ix7v20PFWFJDAdcPBr5DppM=)
                          2: ReyUn6tKBOELp3PqtRdTiZN56xc.roa (hash: o1NTV7KD/4RS51aQo1dWC0QW0kteepHZMeaZiAB8YZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:87:8d:67:28:d2:42:14:5f:d8:17:e2:36:a3:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
        Validity
            Not Before: May 16 12:01:17 2026 GMT
            Not After : May 17 12:01:17 2026 GMT
        Subject: CN=0954e885343b1c2a81aa39eaaeb3596911b7b599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:91:5a:a8:a9:f7:6e:ac:79:fc:8e:a6:8c:a5:
                    60:6b:da:53:ec:94:e6:78:67:c5:f6:a6:c7:3e:1f:
                    60:e5:4b:dd:4e:d2:fc:71:c2:3b:cf:ae:da:cd:3b:
                    26:3e:7f:9e:f2:00:1c:30:43:4d:80:e1:81:09:d8:
                    39:a2:e4:30:31:a9:a5:5f:48:38:88:2f:9b:d6:0a:
                    0a:32:2e:ea:cc:d9:15:20:1a:24:75:94:b7:ca:65:
                    b9:b2:03:38:4b:b4:e0:bc:90:af:d6:8a:32:11:9b:
                    4e:af:e4:77:dd:3d:19:eb:67:a7:10:69:ae:29:b8:
                    80:db:55:58:c0:07:4d:0e:12:d1:05:b2:b1:4c:d3:
                    94:74:c0:92:51:4b:75:bb:df:db:3d:47:2d:7c:30:
                    32:58:43:29:34:c2:b6:5c:b6:33:18:54:f9:dc:6a:
                    48:fb:1c:75:4d:6b:a8:f3:22:2a:3b:c2:22:dc:0f:
                    75:b7:00:4d:cd:97:83:b0:d3:49:36:0d:9d:cf:f4:
                    37:ea:8f:d0:0e:87:54:16:25:3a:33:c1:dd:9a:04:
                    5c:f9:f4:1f:40:31:3f:32:01:ff:b2:9c:91:13:75:
                    a3:8c:7c:7b:af:f2:de:6d:cd:bf:9b:34:d3:4f:3c:
                    29:c7:d7:c6:c9:51:71:21:e6:4c:03:18:5c:e5:94:
                    72:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:54:E8:85:34:3B:1C:2A:81:AA:39:EA:AE:B3:59:69:11:B7:B5:99
            X509v3 Authority Key Identifier:
                keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d8:c2:7f:92:ab:58:48:58:0c:19:6f:0d:b7:4b:f5:f9:60:
         8d:32:9a:0c:0d:7b:ed:0c:83:76:d4:45:75:a6:ff:94:17:16:
         02:7e:a5:0c:43:bf:8b:4b:34:1a:63:db:24:c1:2d:f5:5c:90:
         42:5a:bd:3c:9a:f1:50:b6:f2:44:89:4b:62:be:b1:1d:c1:78:
         02:64:5f:50:cc:d5:16:73:18:e0:e6:6c:d3:e0:31:6c:b1:b5:
         5c:7b:f3:4e:a8:8b:10:69:a3:47:80:57:d6:0d:ec:d2:2c:af:
         86:5f:c0:7a:0b:44:9d:9a:8c:9e:b1:ab:92:23:11:f3:7b:52:
         d2:22:6a:87:77:8a:2a:8d:16:72:0e:9c:aa:12:8e:ab:3e:2d:
         01:97:4f:d5:0e:cc:c9:06:fe:0e:4a:cf:88:97:88:17:bc:7e:
         dc:7c:c8:28:69:92:f1:30:31:9c:59:ff:a7:a1:28:3e:b6:ca:
         ba:64:05:1b:88:6a:7c:8d:89:f1:8f:19:a1:84:fd:82:36:19:
         ad:e3:6c:56:e6:41:9a:0f:3e:c4:4f:3b:48:56:3d:b7:53:6b:
         31:69:10:76:c9:71:41:cd:bf:fe:04:af:68:76:d6:ad:7f:73:
         63:13:d1:7e:2e:52:f7:79:1b:96:49:d9:e4:e5:e6:b9:18:1d:
         ba:fa:2d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:31 2026 by rpki-client