Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
File:                     OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft (raw, json)
Hash identifier:          BdohVM8Z7FfsDq8ic7c8ApebA2gZs5Kiw7cXNztbuiI=
Subject key identifier:   91:57:22:B9:73:4A:59:C4:24:22:1D:12:77:DB:EC:3A:C0:F6:BA:12
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Certificate issuer:       /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial:       019E1F114E9215047B8E66F9FE0E72C96718
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
Manifest number:          0E9A
Signing time:             Wed 13 May 2026 02:01:28 +0000
Manifest this update:     Wed 13 May 2026 02:01:28 +0000
Manifest next update:     Thu 14 May 2026 02:01:28 +0000
Files and hashes:         1: 1AdLwVTQwnRojaJc6oKg4bE5e10.roa (hash: SmldC7KFTFrB2ovoO23QX0S7PhV2KBqhDfb2PIUZ9dY=)
                          2: OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl (hash: uZ1jbFHCymIvMZRKHeiWHd1+zUzl5PqLiqD5+wg7QVs=)
                          3: RYsY-o2i4jJuo5LcGcM8XUCbb9c.roa (hash: Dw7b6pkuG5rO21BY1jXBfmGu/ri7kYZ0iuN6r4DYx0Q=)
                          4: YAzw4t4zF4HrK6DQM0Hi6OJnv_c.roa (hash: Czpsw7Ht+JmwRHsAFUGdIdcpmViWugcfHRbmpORJDMk=)
                          5: i1ce_KCZyzzJnWCLHJltrqd5osU.roa (hash: YFwwgtjx89C2fEmhpNXxjUv1MUQKaMCAp+nvJdfMp5o=)
                          6: qw0bNos2uMNz09JenRAlkTtNmd8.roa (hash: SLKj00aaETL606oUEHzZc3k3yjfYWagWu8LRBWMxnBA=)
                          7: sYth0C5gNTA4Nn0ZVlj2vFu-rcA.roa (hash: YQlDl2GO98hMqxb9t2YAM1lWkbesF46HgOB5GJrP+Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:4e:92:15:04:7b:8e:66:f9:fe:0e:72:c9:67:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
        Validity
            Not Before: May 13 02:01:28 2026 GMT
            Not After : May 14 02:01:28 2026 GMT
        Subject: CN=915722b9734a59c424221d1277dbec3ac0f6ba12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ed:3f:42:57:56:97:b7:7d:83:69:40:af:43:
                    91:de:7a:8e:04:e4:cc:3a:ad:9a:22:84:ca:7f:05:
                    c0:a8:4e:00:09:4b:7e:a7:7c:d6:a9:2c:d5:f8:b3:
                    52:c2:54:05:5a:5e:de:a1:d7:95:83:33:d8:b2:a6:
                    ae:d7:c7:5a:ca:ef:33:6b:c0:2f:e8:01:5a:85:dc:
                    9b:a0:a9:62:85:1d:ee:0a:80:28:1a:9a:8c:74:90:
                    96:1f:77:02:77:b8:e5:b7:e5:c5:b5:14:4e:8c:94:
                    05:f7:48:3c:db:c0:f5:e4:b8:a3:cc:a1:22:a7:8e:
                    d0:cb:08:93:a2:6f:d6:76:33:24:9e:c0:60:7a:2d:
                    d9:ac:1e:18:ae:2e:af:25:05:bd:84:b1:61:cb:7a:
                    69:8e:b0:5c:35:38:25:89:44:53:6d:9f:f8:c4:78:
                    7a:53:6b:82:02:c9:15:05:ed:5b:0c:fa:74:2e:84:
                    67:b7:54:fc:53:fa:82:a3:7d:cc:e6:ca:87:59:22:
                    e5:71:6f:27:2e:ab:4e:ba:ef:05:b1:d5:92:17:bf:
                    a2:13:3d:15:f4:06:3a:c9:4b:aa:2f:00:ea:27:ca:
                    71:86:fd:42:40:6d:e7:80:a4:85:49:62:5d:39:1f:
                    1a:40:3a:d5:ef:b2:b4:fa:f1:91:be:86:8d:90:ea:
                    42:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:57:22:B9:73:4A:59:C4:24:22:1D:12:77:DB:EC:3A:C0:F6:BA:12
            X509v3 Authority Key Identifier:
                keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a9:bc:44:56:cc:73:27:df:50:59:49:65:52:49:bb:70:13:
         01:52:05:e2:69:68:bf:a4:d8:77:28:e0:36:88:58:44:e3:08:
         2f:70:27:bf:80:8b:25:c4:0f:87:2d:ec:10:3c:b7:a0:59:da:
         e9:47:c0:21:b5:76:94:67:0f:f1:2e:e9:e6:70:25:c8:a4:b8:
         cb:7f:e1:a6:3b:29:38:94:4e:01:f9:d4:26:dc:4e:92:a8:d9:
         f9:c2:30:0d:88:d3:f9:47:86:1e:1f:f4:0c:0a:a4:92:e9:6e:
         a8:ef:6b:bf:32:b2:22:e6:d5:89:ff:43:2c:2d:31:fd:f8:e3:
         ef:a2:89:93:e2:01:82:ba:12:b8:73:b3:1b:56:b8:81:22:96:
         e9:6d:88:21:51:73:7c:d0:f6:f9:48:0a:2f:d3:ec:d5:b9:27:
         62:f2:36:17:ff:a5:34:3e:93:33:9e:6e:ea:55:61:9a:ea:e9:
         ba:26:fb:4e:f4:10:7d:0a:be:74:20:69:69:8b:c4:3c:e7:59:
         75:3d:67:d8:1a:9c:7c:f3:ca:c1:3d:88:d3:89:7c:d4:3e:61:
         16:57:49:46:4f:45:ed:ae:5e:ce:b3:25:7f:96:ea:19:12:fa:
         03:2f:e2:1c:00:cc:aa:2e:5a:e3:36:17:a5:82:07:e7:fe:bb:
         ad:b4:80:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:54 2026 by rpki-client