Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
File:                     OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft (raw, json)
Hash identifier:          RnjpPDuTbi3TrbC3vNN1ajrH6bBg0qnmwx9X9LR2YsE=
Subject key identifier:   79:73:54:8A:9D:DE:C5:2D:5F:BA:43:09:4B:A3:60:1A:C4:1C:77:C9
Authority key identifier: 3B:07:64:71:3E:5C:8B:1D:7D:2E:CE:04:8E:4E:BC:13:94:28:ED:C3
Certificate issuer:       /CN=3b0764713e5c8b1d7d2ece048e4ebc139428edc3
Certificate serial:       019D3A5432114007A454DE3547E50900B486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
Manifest number:          80
Signing time:             Sun 29 Mar 2026 16:01:29 +0000
Manifest this update:     Sun 29 Mar 2026 16:01:29 +0000
Manifest next update:     Mon 30 Mar 2026 16:01:29 +0000
Files and hashes:         1: LcI_BXMvY5aSE3vIzLyzwrL0zuw.roa (hash: slELEFAipdts8+oeGkNV3YMhCrDdwvjfJkdcNFFBnug=)
                          2: OwdkcT5cix19Ls4Ejk68E5Qo7cM.crl (hash: UcIYybiPQHx7wMaZ72ixX6molnN7j/HZu67RbFW0i7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:54:32:11:40:07:a4:54:de:35:47:e5:09:00:b4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0764713e5c8b1d7d2ece048e4ebc139428edc3
        Validity
            Not Before: Mar 29 16:01:29 2026 GMT
            Not After : Mar 30 16:01:29 2026 GMT
        Subject: CN=7973548a9ddec52d5fba43094ba3601ac41c77c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:98:d6:28:15:95:0f:79:66:66:c1:56:4f:fd:
                    e4:3c:57:e4:55:1b:ca:b9:91:4d:1e:b4:42:ea:d9:
                    98:07:a9:70:ae:ca:61:ba:ab:0c:87:8b:c3:08:7f:
                    be:63:9d:8d:f1:21:d3:0c:3f:06:02:af:04:5d:15:
                    a8:85:7c:1c:b9:55:e2:1e:c4:02:31:cb:cc:48:01:
                    c1:32:e0:f9:72:70:dd:09:eb:50:61:a7:42:4d:9a:
                    96:e7:33:e4:83:1d:ad:91:4f:62:ef:47:a7:b1:79:
                    d3:eb:47:38:9d:ab:0b:3d:01:cb:91:8e:b4:5c:83:
                    a1:a0:50:8e:05:b5:b1:73:83:67:c1:91:ac:00:f6:
                    61:fc:a0:f7:eb:f1:a3:f6:71:6e:68:62:a5:d3:5b:
                    d5:25:5d:1a:28:0e:34:da:f0:ee:2e:4d:87:75:f5:
                    54:18:2c:a5:4c:65:61:a0:bb:b8:6e:a6:e0:54:91:
                    b8:f8:25:78:1c:c2:26:e2:6e:60:a5:fc:15:f9:48:
                    d4:6b:99:2a:c6:df:c2:34:80:3c:6a:f8:42:60:f1:
                    31:8e:44:6c:ba:7f:63:b8:b6:a9:5d:c8:bd:20:11:
                    8b:4b:da:5f:a0:0b:04:ff:ad:4a:14:a4:74:b7:44:
                    0c:74:ca:e3:3e:b2:e6:2e:b3:9e:5c:11:78:43:87:
                    49:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:73:54:8A:9D:DE:C5:2D:5F:BA:43:09:4B:A3:60:1A:C4:1C:77:C9
            X509v3 Authority Key Identifier:
                keyid:3B:07:64:71:3E:5C:8B:1D:7D:2E:CE:04:8E:4E:BC:13:94:28:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d9:6f:a2:f3:ed:ad:ce:29:ca:75:29:0a:d7:0e:fb:e2:ec:
         b2:a1:31:38:04:df:05:eb:52:33:38:8e:69:35:b2:86:94:1a:
         6e:e3:22:71:15:93:1d:0f:52:fe:79:db:66:67:b1:e9:50:0b:
         9d:43:d6:a6:5f:d6:07:bf:e5:67:7a:99:65:ae:9f:43:9a:8a:
         09:13:1f:ad:70:02:51:12:95:0d:8c:b5:d0:d5:6f:e5:31:00:
         80:29:f7:16:2e:25:66:0d:a3:57:4c:9f:7e:9b:2a:5d:86:f9:
         d2:cd:13:af:7a:3e:52:15:18:31:ad:b2:fb:68:96:b4:4b:bb:
         e8:c1:5b:9d:12:d4:f1:40:9f:ae:01:f3:18:a8:08:6b:7f:4e:
         81:74:c4:a0:1a:ff:3e:e5:aa:d5:ce:00:92:00:da:10:c4:f3:
         a2:54:a3:c2:93:94:e7:f0:91:47:f7:3b:61:89:9c:49:8b:73:
         29:b1:25:41:11:50:fa:f0:e1:14:c4:cb:6e:a0:f6:44:80:88:
         62:30:39:7b:83:30:17:de:68:8d:e4:ad:56:0e:5f:f3:3b:65:
         20:17:e1:14:e5:f9:79:ba:bf:96:41:e1:1a:2d:72:09:c8:be:
         23:50:16:d1:a2:74:4d:51:fc:0f:c2:d6:a9:12:c7:3a:59:42:
         62:cd:00:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:37:27 2026 by rpki-client