Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
File:                     OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json)
Hash identifier:          zXpXXsmukCr60w7OqOkEfy/W7JSEzd59S71cg/HrnCY=
Subject key identifier:   6C:E8:B9:42:76:3D:01:F0:3D:12:AF:44:6E:BA:28:62:4D:40:27:05
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Certificate issuer:       /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial:       019D047785DE4E32B7DD8603502E302CF879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
Manifest number:          095A
Signing time:             Thu 19 Mar 2026 05:00:34 +0000
Manifest this update:     Thu 19 Mar 2026 05:00:34 +0000
Manifest next update:     Fri 20 Mar 2026 05:00:34 +0000
Files and hashes:         1: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: TtL8LKyXD0Jr5wA8DsxGmYqLhqA0jHF87iGwzzv5fLU=)
                          2: eyPCCf2ZrNhsfHlGdwgwdQRwkmY.roa (hash: vFjoF02EXTWhJwtW01TNqh4eG++hwP/SJijut4DjC9Q=)
                          3: vzbqwyfkwTMuJSFJNHC04C2HwL8.roa (hash: vTVicy0euW6tSlGu6K2CtnvRiV0T/ffczunpGmAUAbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:04:77:85:de:4e:32:b7:dd:86:03:50:2e:30:2c:f8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
        Validity
            Not Before: Mar 19 05:00:34 2026 GMT
            Not After : Mar 20 05:00:34 2026 GMT
        Subject: CN=6ce8b942763d01f03d12af446eba28624d402705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:84:1f:8e:a4:3a:a6:c6:16:e7:0c:57:19:45:
                    1e:f6:90:3e:3d:ff:22:5b:85:11:5e:7c:74:b0:cc:
                    79:f1:10:e9:49:c0:e3:ed:2e:7d:ab:7d:62:b3:b7:
                    71:ea:e3:20:4a:96:49:5d:60:b2:c4:61:73:49:d0:
                    91:2b:3d:ba:35:f2:04:a9:e4:2f:85:de:af:7c:7f:
                    fe:8e:6b:86:b5:17:a3:bc:3f:43:49:5e:ed:d3:b2:
                    5f:ea:87:94:a8:84:e8:1d:67:55:ff:ac:31:89:b2:
                    6b:2b:eb:53:1a:48:1f:b1:7f:19:e2:8b:7a:dc:b2:
                    c3:43:f7:e0:a9:14:d5:7e:1a:f3:98:a5:eb:64:59:
                    9a:0d:c4:7f:14:a6:c6:e1:6e:e4:11:67:75:7a:4c:
                    0d:65:45:92:9b:51:5a:df:91:64:c3:7d:c2:79:1d:
                    de:83:48:12:c4:a8:87:86:87:59:d0:0b:86:5d:07:
                    01:d8:a3:c8:1a:ad:9b:4d:a6:e7:99:4b:ee:29:a9:
                    1b:c3:3c:9c:c9:d9:f6:1e:7c:ec:2e:cd:97:84:48:
                    31:0a:5b:2d:dc:bf:f7:37:73:c2:01:3c:07:87:44:
                    c1:6e:1c:5e:38:ae:f4:cc:9e:24:d7:ad:ed:c6:ca:
                    de:60:c2:49:4a:0c:99:7d:50:e2:8f:7d:ac:a2:4a:
                    7b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E8:B9:42:76:3D:01:F0:3D:12:AF:44:6E:BA:28:62:4D:40:27:05
            X509v3 Authority Key Identifier:
                keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e3:0c:5f:8b:72:b0:b6:6a:ab:39:2c:57:c2:e8:e6:16:ef:
         05:1e:72:62:66:2a:b6:39:da:df:7b:b3:97:9b:c3:37:8d:92:
         57:f9:9c:4d:60:be:8c:8b:c8:59:4a:ab:91:5d:5e:96:0c:68:
         6a:47:86:cf:ce:00:8a:32:39:e2:25:9e:92:20:ea:a6:e9:88:
         28:2d:15:55:70:6d:24:74:78:a3:02:c5:8a:ad:e1:43:09:28:
         55:b3:4d:30:91:14:a4:54:87:df:94:90:4f:ee:ef:37:00:79:
         99:27:84:f6:b9:d4:16:fe:7d:60:64:28:1c:f4:dd:02:2c:1d:
         1d:6e:5b:ad:11:7e:ea:60:65:50:c3:11:6d:ea:bb:c0:51:af:
         f0:29:35:b0:da:08:f5:ef:6f:9f:8e:78:b8:08:ad:63:2d:6a:
         46:81:9a:55:30:50:eb:47:b0:e5:02:f2:b1:53:92:bf:55:32:
         79:bb:09:5a:0b:5f:94:f8:f0:59:9e:f6:4b:1f:19:78:4d:06:
         1d:a0:9a:3d:12:79:70:34:9c:1b:d4:4d:ec:a7:4e:d6:c0:df:
         02:2c:cd:85:f1:70:f5:0f:fa:7e:60:1b:d4:da:15:8e:93:c4:
         30:82:70:00:dc:40:dc:88:8c:37:5f:69:9c:a8:19:cf:f7:0e:
         84:d3:66:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:07:14 2026 by rpki-client