Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
File:                     OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json)
Hash identifier:          2lQKlTCTm01qraPIEdWkNB03HTb2gnw32za2IuIpsWs=
Subject key identifier:   92:FB:F8:51:E1:33:5B:38:8F:17:93:36:F3:F6:28:4F:0E:9F:09:26
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Certificate issuer:       /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial:       019DE7B4B814A1CF8DAE6C35D10C66CEA8E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
Manifest number:          18F4
Signing time:             Sat 02 May 2026 08:01:13 +0000
Manifest this update:     Sat 02 May 2026 08:01:13 +0000
Manifest next update:     Sun 03 May 2026 08:01:13 +0000
Files and hashes:         1: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: R6aZ9DoPucTP32qddJfXhtuN+ZBgACom3ya7sD6hUQQ=)
                          2: WDi0x8_2l-5Bh0Kx0kgLvxWni0g.roa (hash: ZvSkcDxGhvi+aJsfbms5jhxFpHcmll85L+dtrGm8zwg=)
                          3: csloCIt3CTSVgebL58dJpxOdtC0.roa (hash: esH7P1ArdXIQnwu6qXLQUiXFhHbcU/4jPuyvpFcE9cc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 03 May 2026 08:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:e7:b4:b8:14:a1:cf:8d:ae:6c:35:d1:0c:66:ce:a8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
        Validity
            Not Before: May  2 08:01:13 2026 GMT
            Not After : May  3 08:01:13 2026 GMT
        Subject: CN=92fbf851e1335b388f179336f3f6284f0e9f0926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ab:ce:04:25:7b:e7:0f:45:06:9d:a6:bd:09:
                    a1:2f:5c:87:a4:ee:5d:20:08:74:02:ba:7d:23:2d:
                    be:fc:4a:bf:f1:eb:49:35:89:a1:ae:de:fe:70:1d:
                    c5:72:32:47:f5:b2:c4:87:8d:79:95:c1:7c:5e:59:
                    c7:72:f4:71:c9:f1:6c:b8:b4:d6:06:cf:f1:ff:4e:
                    9e:d4:00:c2:c0:91:08:51:fd:e2:b1:55:8d:9a:ad:
                    ec:ba:74:15:a0:77:b2:29:23:d3:f4:fa:e0:9b:a7:
                    8f:f1:d2:2b:96:ba:89:fc:31:90:ca:d9:6d:7f:6d:
                    24:d3:98:75:23:62:88:6d:bd:e0:e0:84:9e:90:02:
                    c8:80:82:cc:b6:5a:bd:03:7c:10:b6:8f:79:59:20:
                    30:b3:e4:e5:29:7a:ad:2e:6e:09:f2:bc:12:cd:71:
                    36:7d:05:b8:26:17:21:67:98:53:a8:e4:e8:69:d8:
                    42:88:7e:8b:39:17:71:df:99:3c:65:95:5e:1b:93:
                    da:0a:7f:8e:ca:7a:2b:4c:94:c2:15:24:44:4b:7b:
                    d3:45:72:9b:f0:96:a9:f8:74:d5:95:5e:18:4c:d6:
                    4e:14:db:2b:85:8e:cb:a2:e2:01:4a:ab:b7:fa:59:
                    85:ab:41:ec:55:b8:d8:47:87:91:4b:50:47:9e:30:
                    a9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FB:F8:51:E1:33:5B:38:8F:17:93:36:F3:F6:28:4F:0E:9F:09:26
            X509v3 Authority Key Identifier:
                keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:6a:29:0e:96:2c:2c:c6:7f:d9:95:e4:b9:6c:e6:ac:e6:11:
         d2:f5:2c:35:9c:38:5d:24:a9:7d:45:53:2e:0f:06:8d:02:85:
         31:f5:44:2a:30:e4:07:07:3d:93:13:a7:b0:58:fd:06:a0:8b:
         74:0a:06:8e:b8:11:c6:29:76:dc:9c:79:1f:c6:3f:03:19:9d:
         2c:95:65:74:93:5b:09:3e:9d:ef:58:65:a7:b8:94:04:4a:e8:
         ab:cd:3e:00:ac:d7:d4:57:88:0e:57:d4:84:37:82:0a:89:b8:
         3d:c0:63:12:1e:d5:48:f0:95:bb:32:9a:e8:9b:25:3d:50:92:
         e6:f3:10:d3:7f:51:e5:fd:b9:87:18:4e:cc:ab:ee:25:46:63:
         4e:7d:25:22:20:53:fd:06:c4:20:af:98:b2:fc:ad:4d:20:50:
         79:b5:fe:50:3b:10:ba:a7:b5:4c:4b:b0:a4:02:55:73:73:13:
         23:ba:d5:4f:10:99:b2:ed:f8:7c:5d:ed:bf:f5:99:80:35:eb:
         aa:7b:cf:93:d6:bd:3c:5d:53:34:c6:29:e3:90:45:8c:94:0a:
         9c:36:fa:c9:32:51:df:44:04:99:05:2c:7a:dc:b2:f9:72:af:
         a7:ea:b0:b8:ca:e9:1d:c5:3c:53:9f:85:60:ae:b9:10:02:5e:
         a0:1e:1c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 17:10:31 2026 by rpki-client