Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File:                     OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier:          RXLQgwe31a98H+WGuYtmmgN7T3HiVWIRaauGrwayhkY=
Subject key identifier:   41:12:EC:A0:E2:09:AE:BC:CA:0A:6A:CF:81:1C:2C:20:E6:C9:AF:78
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer:       /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial:       019E30054450BB763D4EE4F0A3F17FB9B0EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 09:01:51 +0000
Manifest this update:     Sat 16 May 2026 09:01:51 +0000
Manifest next update:     Sun 17 May 2026 09:01:51 +0000
Files and hashes:         1: FTsdE4w9A76bc9C2_7wNecbSPNY.roa (hash: rHj2MTYxRe64SZo8LvwXUUXTxEmUO5sPExmz8iIy3Rs=)
                          2: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: tIq9vJf5nf6brpUAUMWsfrOJpb3GfBiZpTjkYYZtm4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:44:50:bb:76:3d:4e:e4:f0:a3:f1:7f:b9:b0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
        Validity
            Not Before: May 16 09:01:51 2026 GMT
            Not After : May 17 09:01:51 2026 GMT
        Subject: CN=4112eca0e209aebcca0a6acf811c2c20e6c9af78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:47:f5:9a:5e:70:79:af:28:18:99:9e:ba:c3:
                    cd:3a:5a:55:73:da:34:c9:53:57:79:34:c1:7b:b2:
                    f0:b1:c6:e2:48:e4:63:87:f3:7f:ba:01:39:76:1e:
                    98:0a:e2:5d:73:16:08:2e:c1:89:2c:e1:11:7f:46:
                    44:e7:ea:39:0e:27:e6:de:a0:e0:03:6f:d2:96:86:
                    5b:23:1b:50:f3:f3:10:5c:8d:0c:fe:3d:12:38:13:
                    4a:e0:3f:7f:fe:2e:06:82:b2:70:7b:97:8d:95:20:
                    50:e8:4d:d1:f7:6d:85:44:16:a6:2e:25:a7:65:a5:
                    c1:ac:37:44:31:b6:43:cf:e7:0f:18:04:82:44:6d:
                    2f:ea:b4:c3:61:57:1e:df:75:b7:c3:34:1c:73:32:
                    b3:e9:9b:c1:2d:77:db:de:dc:9d:a4:35:1b:3a:02:
                    d8:58:db:38:9a:ab:b8:fe:52:06:af:a4:91:36:22:
                    c2:ba:5f:b9:9a:2c:47:a0:66:86:08:8d:97:a7:6c:
                    01:eb:08:e9:20:d0:93:e3:74:5e:43:b0:6c:c4:2f:
                    33:59:f0:81:6c:54:27:4d:03:2c:a3:48:d3:d7:e9:
                    1f:a0:ef:47:2f:24:29:97:3e:d0:66:4c:04:34:25:
                    d2:49:be:63:b3:fb:40:7f:61:9d:21:f8:58:a7:f3:
                    ac:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:12:EC:A0:E2:09:AE:BC:CA:0A:6A:CF:81:1C:2C:20:E6:C9:AF:78
            X509v3 Authority Key Identifier:
                keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:93:10:5b:54:21:dd:76:b5:6f:62:fa:0a:03:4a:c9:88:e6:
         bf:f7:e4:42:05:4f:66:d7:8e:a0:c2:63:18:a2:96:3d:bf:89:
         e5:8b:fd:d8:a2:49:bb:a4:93:aa:10:ac:dc:bc:67:8c:0f:5d:
         9d:ee:fe:51:dc:0f:fd:5b:2b:a7:38:be:b4:3a:c2:ea:5d:21:
         9b:2a:eb:2a:10:a3:fe:06:f2:77:0d:32:e0:34:e7:29:f9:fa:
         5b:55:67:2d:c8:c0:b5:4d:9f:18:af:15:72:d0:84:c8:21:f0:
         08:e1:6b:80:ff:dd:ac:ff:51:9b:05:7c:20:9b:59:e4:9f:3b:
         8a:92:59:a7:17:1e:25:22:40:42:a0:04:c9:50:e4:f8:60:1a:
         8f:db:05:e8:bd:ad:23:58:70:ef:c6:46:7f:2e:11:15:1a:ed:
         c8:d2:26:51:74:99:f6:8a:d7:bc:2c:dd:1e:73:78:a3:14:15:
         b2:7b:9b:d4:e9:01:a2:71:4c:14:42:19:20:ba:95:d6:f6:1d:
         ee:33:ac:df:a4:50:64:49:43:0f:4d:44:bd:d7:b0:b9:5f:e8:
         5e:79:1f:c5:13:f0:69:a9:8d:72:3b:d2:b3:92:08:ef:90:ee:
         d8:fd:89:f3:ee:c0:01:3b:2a:7d:be:73:24:30:23:d0:8d:8d:
         b6:47:cc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:31:54 2026 by rpki-client