Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
File:                     oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json)
Hash identifier:          m/KDNm2Po6rKoJtbhmzzsthf/tVKfCMrLXjQj9PiFIY=
Subject key identifier:   08:CE:7C:EB:A1:D4:C8:D8:E4:A7:C2:4F:3F:C4:66:F0:39:E9:19:D2
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Certificate issuer:       /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial:       019E2926F51F227C9C810D5216A9F0D28135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
Manifest number:          0E52
Signing time:             Fri 15 May 2026 01:01:19 +0000
Manifest this update:     Fri 15 May 2026 01:01:19 +0000
Manifest next update:     Sat 16 May 2026 01:01:19 +0000
Files and hashes:         1: C_BG8Ml6dP3iR096R9X-fJO1n7E.roa (hash: 3QfX9jxSSnvJJan/fsFYYDVyLrGyvJpCwPAUh/Poma4=)
                          2: UaQ-s38Z57ecJNUbRdVAzUGv8GA.roa (hash: 4xw5dIxtZo++aDtcmN5R2tGAogLl64Jnmc82+4RR2Mo=)
                          3: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: B2+S02r0AacEKJi1ha5AIPX4aw7SC/XJU0UK4njBtbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 01:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:26:f5:1f:22:7c:9c:81:0d:52:16:a9:f0:d2:81:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
        Validity
            Not Before: May 15 01:01:19 2026 GMT
            Not After : May 16 01:01:19 2026 GMT
        Subject: CN=08ce7ceba1d4c8d8e4a7c24f3fc466f039e919d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f7:5f:89:11:c6:c5:37:26:d2:2a:ec:00:6a:
                    66:ce:92:bc:d5:4e:9e:f9:2e:f6:4f:90:c2:4c:03:
                    b5:a6:6f:eb:19:99:38:85:87:b4:da:a3:77:d1:9f:
                    fa:9d:50:9e:3f:16:7d:43:72:39:58:9d:b6:ff:80:
                    1f:62:4d:b2:d2:4c:95:90:21:a6:5d:ad:61:4f:ba:
                    ed:e5:02:11:4e:9a:75:e2:c7:08:6d:2d:49:67:81:
                    bc:e3:f0:8e:c2:53:0e:2e:54:0b:3a:1e:5d:04:4b:
                    7b:05:6a:f9:ef:56:4a:85:c6:3e:03:e7:31:80:4d:
                    2f:ff:31:7d:75:a4:e2:20:93:64:ad:6f:ad:6f:68:
                    9d:68:e6:53:3d:e0:7f:7a:f9:7e:64:69:5b:eb:48:
                    72:cb:a4:60:e6:7d:10:82:d4:b7:7c:b4:e3:fa:c4:
                    6e:61:79:ec:00:eb:5a:cd:04:e0:a3:92:e0:64:13:
                    97:8f:89:8f:c3:26:1e:a2:63:7c:0a:55:d9:60:48:
                    2c:ca:2e:0c:bf:0d:20:c4:ef:d0:b9:57:4a:dc:b8:
                    cf:a6:03:da:3a:fd:ff:76:be:59:fa:70:db:7d:c5:
                    62:de:91:ee:bb:32:17:b5:d7:6b:f8:9e:59:58:27:
                    cc:d8:09:36:25:84:43:53:86:47:79:2a:49:a9:35:
                    b4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CE:7C:EB:A1:D4:C8:D8:E4:A7:C2:4F:3F:C4:66:F0:39:E9:19:D2
            X509v3 Authority Key Identifier:
                keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:03:36:95:bf:60:02:17:d9:32:9c:a2:71:fe:9b:91:8c:05:
         16:ff:d6:ba:ae:b2:e2:43:e0:2f:3d:49:c3:63:0d:55:1e:b2:
         44:55:7e:9a:ba:6d:9f:91:88:cb:43:5b:b2:da:a4:bd:46:ad:
         2a:cb:b7:d4:e5:81:3a:2d:35:45:5c:91:71:57:d5:84:d3:e0:
         42:c2:93:db:ed:cc:75:a8:ab:b9:ea:d4:f8:b7:24:a0:34:9e:
         7c:db:31:57:78:b0:07:c1:50:9a:cc:f6:65:8f:e2:81:89:99:
         3d:fb:76:a5:62:8f:2b:04:88:17:7d:96:66:6e:ea:17:76:d3:
         73:17:be:f7:83:10:21:f4:94:da:83:6c:a8:f7:8a:19:68:cf:
         8b:92:e7:6c:60:4c:71:cf:98:44:6e:c7:95:0e:d9:0d:8e:2a:
         b3:16:86:6c:a1:b3:0b:0e:50:0f:81:03:5a:53:f0:3e:9f:59:
         22:52:2d:78:bb:74:a2:ce:6f:1d:4e:64:34:fc:67:f3:ae:fb:
         8e:13:3f:98:3e:c7:3b:f2:14:b2:e5:05:6d:e3:59:5f:af:a6:
         26:19:58:76:67:0c:aa:d8:c0:68:c6:ca:08:67:34:40:ef:fc:
         f5:dd:2f:53:96:65:33:23:71:55:04:52:7a:1d:10:9b:e2:87:
         50:df:2f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:03 2026 by rpki-client