Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
File:                     pOd3fHr7fUObRvaBxMe_aoJS4xU.mft (raw, json)
Hash identifier:          T7OIY3/WIDhXk9iey5I/QlyUi42uaqupW7fsM/2dftc=
Subject key identifier:   AE:A3:7F:F3:F6:E7:AC:B9:5F:1C:5E:D8:F3:51:1F:C5:1B:A6:90:12
Authority key identifier: A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
Certificate issuer:       /CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Certificate serial:       019E1D901435B2D5FD3A2E836C617D94E617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
Manifest number:          0FF1
Signing time:             Tue 12 May 2026 19:00:42 +0000
Manifest this update:     Tue 12 May 2026 19:00:42 +0000
Manifest next update:     Wed 13 May 2026 19:00:42 +0000
Files and hashes:         1: buuNqOKeytQjK-fw0E6NNtyOW_g.roa (hash: QnGFqGYlvy+0tU6e4bILPLthTrwM/mOAa/IAuKQfucs=)
                          2: pOd3fHr7fUObRvaBxMe_aoJS4xU.crl (hash: Ad30c4VCE2wXH9x9OtqxiOxug/J10VRlOCwyl9WKuGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:14:35:b2:d5:fd:3a:2e:83:6c:61:7d:94:e6:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
        Validity
            Not Before: May 12 19:00:42 2026 GMT
            Not After : May 13 19:00:42 2026 GMT
        Subject: CN=aea37ff3f6e7acb95f1c5ed8f3511fc51ba69012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:da:4e:e7:b1:14:06:1e:a7:4f:be:32:9e:
                    c1:f2:6d:c0:a2:80:6b:e5:fc:a7:65:51:89:45:86:
                    02:ce:9c:fd:53:63:d6:dd:79:79:49:f3:04:8f:0c:
                    91:5c:05:e1:a7:21:51:80:5f:34:10:15:fa:e8:30:
                    52:12:f2:43:b7:6b:4a:b4:cd:a9:d7:d8:52:8c:77:
                    24:80:74:ef:e2:01:3b:9b:70:91:ae:48:01:67:71:
                    a7:47:00:f2:d4:08:59:76:d4:be:e5:c6:4e:10:d8:
                    59:94:3d:8a:53:e4:2a:5e:a3:47:20:41:4a:dc:27:
                    27:97:6b:bc:2c:46:24:20:cc:f9:b5:cf:fa:a3:1d:
                    00:f1:f1:5f:7f:cf:04:0e:3d:0c:e6:a5:e1:ea:d8:
                    8f:34:5f:09:dc:e8:ff:d8:16:f2:1b:2f:b3:44:11:
                    a4:23:9d:70:21:24:6f:4d:39:da:bf:45:ce:b9:2f:
                    37:be:c0:cb:24:90:11:df:67:4e:b3:f8:63:ed:6e:
                    4b:b4:8b:fe:ed:a2:e8:d9:c1:de:d8:26:1f:c8:f6:
                    db:f2:a3:01:b7:10:8a:9e:22:f4:b4:bf:07:b2:d6:
                    dc:57:88:49:25:59:14:da:c1:11:7d:78:d8:e2:69:
                    21:87:e5:2f:15:20:be:5a:04:d2:45:7e:1b:24:53:
                    ae:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A3:7F:F3:F6:E7:AC:B9:5F:1C:5E:D8:F3:51:1F:C5:1B:A6:90:12
            X509v3 Authority Key Identifier:
                keyid:A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:3f:9e:99:78:05:4c:eb:e4:fc:db:7d:93:11:4d:7c:73:80:
         0a:c7:cc:a1:3c:91:9d:89:3d:b8:40:27:2e:07:8b:31:67:5e:
         c1:bd:d5:84:e9:d6:43:b0:8c:fe:d2:13:c7:f5:23:88:1d:df:
         ab:3c:93:bf:44:b7:17:a2:32:07:03:ac:cb:75:cd:d2:15:89:
         e1:75:54:d9:58:08:2f:8a:8d:ef:47:11:31:36:bb:58:31:8f:
         bd:a1:f8:5e:39:74:11:5d:af:9f:11:7f:8b:10:b9:26:6f:56:
         1c:ca:c9:e9:c8:e5:d7:7a:0a:f5:a3:dc:38:1f:a1:57:80:c1:
         81:cb:78:9d:52:1a:58:77:4b:13:77:3c:5c:3f:97:7c:3a:16:
         54:76:db:a3:2d:37:c7:d3:ad:b8:3e:17:58:85:a9:cb:34:a7:
         f7:ae:0b:45:9d:79:54:a3:34:94:8b:c3:17:0a:94:b4:56:25:
         5e:89:ac:72:d0:96:c4:b4:cf:60:11:d8:14:98:14:1e:a5:00:
         fe:87:82:f2:a5:d1:cb:39:b4:e1:f6:ee:c1:4e:b6:84:2f:30:
         a3:65:ce:e7:22:53:40:5a:8c:fb:b9:3f:1f:57:98:a6:97:4d:
         bd:ac:98:e6:65:9c:e9:fe:f7:b4:c9:6c:a5:e4:64:eb:64:e9:
         88:46:1e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:33 2026 by rpki-client