Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
File:                     obgXVrYRDyp1SVx0yCDg5zTuimw.mft (raw, json)
Hash identifier:          hakqo3pH5GIrgtJ+XUS53+NkK3mN9sCm1lIj4J1IAnA=
Subject key identifier:   6C:B0:3C:5E:95:EC:3A:B8:E5:B0:D2:B8:76:AB:2D:FF:FF:08:33:E2
Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
Certificate issuer:       /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Certificate serial:       019E3261A4FE2754E176DDC647EC32AA0620
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
Manifest number:          0DF1
Signing time:             Sat 16 May 2026 20:02:00 +0000
Manifest this update:     Sat 16 May 2026 20:02:00 +0000
Manifest next update:     Sun 17 May 2026 20:02:00 +0000
Files and hashes:         1: Lp8SvbEirw77bD6bjqTRJH9RHag.roa (hash: E4a/u2pu0/SKcHKL3Q1hBcB3nQ4uQ6kbjvNNFt2G5aE=)
                          2: obgXVrYRDyp1SVx0yCDg5zTuimw.crl (hash: x2qBCUhTILRFhpseo9hrM+GV8ODWMS7xk7gmd+JgQDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:61:a4:fe:27:54:e1:76:dd:c6:47:ec:32:aa:06:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
        Validity
            Not Before: May 16 20:02:00 2026 GMT
            Not After : May 17 20:02:00 2026 GMT
        Subject: CN=6cb03c5e95ec3ab8e5b0d2b876ab2dffff0833e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8b:1c:29:c7:f5:d2:d4:4b:9d:01:f0:4c:07:
                    91:bf:c7:ec:81:61:05:3d:4e:a8:98:bf:94:f8:91:
                    5c:f1:cf:2e:46:c0:09:db:63:79:99:7f:53:e2:f6:
                    a4:7f:50:e6:bd:ec:28:a9:65:1d:f7:9f:b7:36:db:
                    26:77:ab:a3:6e:25:3c:a1:12:02:0e:e2:10:0c:db:
                    ea:5c:a6:4c:85:70:12:0f:da:e9:6e:35:1f:e7:d5:
                    06:66:ed:b5:a0:7c:bd:a8:a6:e1:f7:5f:0f:68:46:
                    b8:1f:98:e3:95:06:0b:e2:39:51:63:14:6b:e8:e9:
                    dc:0a:24:58:da:f2:ef:ce:33:a6:b7:e8:d9:3f:4d:
                    0e:79:5a:f2:83:54:7c:44:08:5d:95:a7:6b:1f:ee:
                    e0:9b:78:96:2a:a3:37:7d:ba:d5:23:9e:b8:0f:71:
                    ba:38:a4:96:b8:e7:6a:00:9a:3e:6a:d8:e0:1c:f5:
                    bf:5a:c7:0a:05:d8:a0:00:f4:aa:d9:0f:dd:ca:81:
                    72:cf:d5:4f:b0:e2:69:ed:1b:97:d6:48:03:b2:3e:
                    b0:dc:97:79:5b:1d:fa:24:d8:2e:fc:67:e8:bb:c5:
                    f1:57:d0:c6:c7:10:5c:85:ca:33:f7:72:62:ff:23:
                    6b:cc:3a:28:30:e0:c7:8b:be:d0:b0:7e:1b:d8:5c:
                    ae:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B0:3C:5E:95:EC:3A:B8:E5:B0:D2:B8:76:AB:2D:FF:FF:08:33:E2
            X509v3 Authority Key Identifier:
                keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f6:8b:6e:df:f3:93:1a:9b:4e:f8:6e:62:c1:d2:ea:f7:e8:
         4a:e1:51:bc:89:a7:8e:76:4f:79:33:75:71:d0:01:0a:a6:48:
         24:bc:f2:68:e2:da:6c:b2:8e:0d:24:c8:19:f8:86:e7:81:30:
         b9:3b:eb:f5:d6:5c:cf:11:f7:10:7c:c5:a4:80:11:41:56:3e:
         ac:6c:29:b2:a5:c4:25:ee:08:1b:a4:89:c1:a2:c2:c3:ab:ad:
         d9:55:98:cf:a5:09:73:fa:a4:23:0a:1e:c9:59:28:31:dd:c6:
         c2:7f:33:19:cc:f9:55:c2:da:09:4a:e1:dd:34:9c:60:98:6b:
         b1:3d:8f:6e:9c:29:f9:03:6e:fa:43:18:c4:7f:99:55:53:96:
         5d:a4:34:dc:93:64:49:b4:81:30:29:bd:9e:9c:ab:cc:d9:43:
         f5:6f:aa:81:36:54:b7:50:50:63:1f:b2:e4:1d:3d:a7:90:83:
         ef:8d:33:db:b8:d1:49:3f:1d:7c:58:f1:38:ed:b2:20:75:fc:
         fe:cb:5d:93:2a:80:2d:20:0b:31:72:c6:3f:36:3d:40:7f:ec:
         fa:22:2d:c2:56:9d:b2:0f:e1:87:5c:a5:41:4c:dd:71:1c:cd:
         b4:1c:8b:65:c8:cd:27:96:91:4d:9b:17:9d:e8:32:68:99:fe:
         4c:c9:bd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:28:22 2026 by rpki-client