Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
File:                     oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft (raw, json)
Hash identifier:          0nEWvVhuPvXx9cZYbxPGdAfx3GGILD6lWtTF4LYrOVY=
Subject key identifier:   9C:00:E7:96:6D:3C:2A:9E:C3:94:AC:02:3C:8D:65:37:40:2A:EF:56
Authority key identifier: A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58
Certificate issuer:       /CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58
Certificate serial:       019E20C842E23BE141DAAE1CFCC81F01D51D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
Manifest number:          1905
Signing time:             Wed 13 May 2026 10:00:55 +0000
Manifest this update:     Wed 13 May 2026 10:00:55 +0000
Manifest next update:     Thu 14 May 2026 10:00:55 +0000
Files and hashes:         1: UDOQeKm21_HbogaX80qPDYGLszg.roa (hash: oQCYUWGJBiukXuu22aVYGVLYnrdXQVCn7RQqhgm8PBQ=)
                          2: oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl (hash: i8V2Lay04rLiYJlEoZVVbogwMkAvhnN45DPdPg1KwtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:42:e2:3b:e1:41:da:ae:1c:fc:c8:1f:01:d5:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58
        Validity
            Not Before: May 13 10:00:55 2026 GMT
            Not After : May 14 10:00:55 2026 GMT
        Subject: CN=9c00e7966d3c2a9ec394ac023c8d6537402aef56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:4b:ac:85:f8:4c:97:56:ca:c0:fc:ba:1c:a5:
                    48:2a:79:5e:24:a0:08:53:61:b3:30:9a:cd:fe:f0:
                    3b:a8:48:2c:a7:80:99:26:30:a0:35:09:98:a1:20:
                    a9:39:32:5f:20:e1:be:7e:1d:45:00:fb:7d:2d:df:
                    52:7d:29:f7:3e:54:82:f4:85:91:7f:0a:f4:cf:ab:
                    6f:49:0c:47:01:2b:9a:83:16:b7:6a:2e:b1:9c:bb:
                    3e:2a:ff:0f:2d:8c:59:dc:27:1a:7b:81:cf:7c:92:
                    5b:eb:99:42:a8:65:e3:c7:c1:6c:f8:e0:80:38:6d:
                    45:cf:47:12:a8:19:51:6d:67:5e:90:b9:20:d9:2e:
                    fb:93:5a:ef:ce:19:a3:8f:81:c8:60:eb:be:a0:38:
                    22:f1:22:07:6a:2b:f1:32:45:4f:4e:fa:51:c8:0e:
                    61:31:b8:4b:45:a3:91:ad:26:19:d5:52:48:57:b6:
                    69:52:63:64:dc:46:bb:14:95:a2:51:b9:c4:58:2d:
                    5c:dd:ee:2b:c7:c3:06:64:32:12:e1:bf:5a:dc:62:
                    50:a8:05:42:e0:69:1a:1f:40:c7:cf:c0:86:29:c4:
                    a3:a6:73:da:fe:a9:53:27:08:a4:e8:ab:75:56:7a:
                    5c:ec:46:1a:da:e2:a2:f4:be:ee:ba:4c:bd:14:80:
                    2a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:00:E7:96:6D:3C:2A:9E:C3:94:AC:02:3C:8D:65:37:40:2A:EF:56
            X509v3 Authority Key Identifier:
                keyid:A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8b:46:cd:69:9b:e2:02:fa:db:68:ff:74:8d:f4:8a:dc:f8:
         b6:2a:21:b0:64:9b:96:1b:2f:99:b5:08:7f:07:0a:fb:99:e2:
         0a:5c:52:2a:53:59:1a:43:ec:72:02:0a:ff:79:9e:d3:d8:a5:
         71:68:23:ea:9d:a5:5e:c5:e8:5a:4e:8e:0f:69:6d:a5:ef:72:
         58:df:4f:81:8e:82:d5:99:74:12:41:7a:08:0e:83:28:74:35:
         b7:d1:7e:3b:4f:a6:8e:3a:ed:96:f8:f5:ea:98:1c:60:5f:1c:
         86:49:dc:9d:5f:f1:c9:e8:7d:ee:37:22:83:f5:44:f5:ad:da:
         8d:ed:93:b1:d5:fa:bc:0b:26:37:f2:17:dd:c0:45:7a:a1:0f:
         ab:2e:d1:10:3f:87:41:4c:1c:35:75:99:be:6c:b2:96:2a:c1:
         ec:c3:36:be:dc:c8:81:d7:75:96:19:2d:70:74:31:9e:91:8e:
         96:d1:1b:d5:5c:84:76:a1:3b:3a:65:57:e2:d4:00:26:18:fa:
         52:d4:e4:89:25:0a:e1:5b:72:5c:07:6f:02:7f:2f:a2:58:ea:
         2a:07:bf:e8:02:5b:64:ec:f9:5f:61:92:1f:92:bf:20:94:5d:
         e9:29:1c:98:63:b0:f2:8b:fa:0c:54:f9:b3:8a:fd:1f:13:80:
         38:a9:b7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:34:28 2026 by rpki-client