Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
File:                     Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json)
Hash identifier:          nzUBBEuBS3Jdrig7I18VvCb9XwfuHoval2zxEb7d2qQ=
Subject key identifier:   CE:1D:1D:14:03:3E:AD:73:BA:FB:D6:57:A0:8D:70:2E:23:BB:E6:97
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Certificate issuer:       /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial:       019E1DFE0EBCCE310E98D581E8513CC00E16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 21:00:49 +0000
Manifest this update:     Tue 12 May 2026 21:00:49 +0000
Manifest next update:     Wed 13 May 2026 21:00:49 +0000
Files and hashes:         1: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: 7OKz9cZCeZPMypKn5V3mInFAke4bgfkK6KgtLuxRI4g=)
                          2: xs2nJzo3Rk58Z2BcwamLcHEwnDA.roa (hash: ZJ+YcdwxYrTOk2uKzIqFnqUJ/TPq1N6JkOSkhw/1KeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:0e:bc:ce:31:0e:98:d5:81:e8:51:3c:c0:0e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
        Validity
            Not Before: May 12 21:00:49 2026 GMT
            Not After : May 13 21:00:49 2026 GMT
        Subject: CN=ce1d1d14033ead73bafbd657a08d702e23bbe697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:17:c2:bc:07:11:6c:bc:ad:22:d1:cb:f8:
                    d3:4f:4c:2a:2a:a4:4e:69:af:75:92:fe:28:cf:4a:
                    9a:bf:d2:fc:8e:46:a4:a6:f2:93:31:aa:d8:cf:a5:
                    96:96:98:c6:d6:a9:4e:5c:3b:f8:2c:28:19:3e:4a:
                    cb:62:a7:91:dc:7f:e2:c6:f2:4f:30:cf:8c:5d:b7:
                    11:90:c6:2e:28:e1:be:4b:11:40:65:c1:37:69:ce:
                    22:75:5d:31:95:6b:87:6f:44:48:b0:89:d2:fe:6f:
                    a5:92:23:7c:bc:0f:16:f6:c8:f1:f5:68:14:07:ef:
                    5d:1b:1e:cc:d8:8b:aa:d3:7e:bf:bd:d3:a7:8f:4f:
                    03:27:79:45:4b:42:47:02:94:05:15:e3:93:c4:72:
                    34:cc:30:fc:26:9c:58:de:7a:bf:e9:0e:17:71:e8:
                    37:33:bf:6b:5b:d5:1c:bb:95:9a:23:02:f3:ad:52:
                    d2:82:06:58:bd:f8:18:f7:f7:af:e8:7c:54:50:12:
                    57:f7:71:04:79:e8:29:b9:e4:c9:2e:83:0b:36:9c:
                    f2:3c:96:0b:ab:61:54:39:dc:50:17:b7:10:8d:e2:
                    61:94:04:06:79:4e:98:a9:79:18:cd:ad:e7:e5:e3:
                    4c:3c:f0:37:5a:75:c6:ed:7b:c5:93:d4:62:b3:05:
                    9f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1D:1D:14:03:3E:AD:73:BA:FB:D6:57:A0:8D:70:2E:23:BB:E6:97
            X509v3 Authority Key Identifier:
                keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:2c:07:28:15:89:99:de:68:3b:7a:0a:00:20:89:e2:f2:de:
         15:b4:39:97:c6:c7:8e:dc:97:e6:6b:80:3a:0f:4a:c9:0c:60:
         0e:df:59:3e:c4:fc:95:86:c7:da:c5:07:01:22:02:1d:a8:f2:
         90:52:33:1c:67:1e:95:a4:99:79:2e:d1:4f:71:be:ef:03:55:
         fb:6a:da:1d:dd:d9:10:70:37:eb:d6:fc:ac:df:8b:fc:ec:32:
         d1:7b:9b:c6:7e:b2:aa:57:19:06:23:a1:55:17:a9:3e:95:b1:
         6f:08:5f:d2:70:77:f5:4b:31:ff:93:0b:57:4c:64:d1:a8:90:
         c4:d4:6f:b8:99:fa:da:7e:c6:99:9a:6f:74:93:a6:eb:0a:e3:
         51:c0:f6:81:6e:69:66:0c:ff:44:51:7a:9e:82:b2:7c:63:0e:
         63:0d:c0:6c:64:97:32:e7:3d:c3:8c:ca:cb:88:3d:da:34:f3:
         8a:48:d8:b9:77:7d:8a:2f:95:6d:c3:ba:7a:e4:f3:41:68:a6:
         c4:af:c7:74:1d:ba:bf:a2:da:55:4c:fd:73:c3:17:77:ac:51:
         4e:7a:17:1f:ec:09:19:aa:24:9c:28:c7:e5:dc:6b:b2:0d:b2:
         75:b7:8f:93:a5:b3:3a:99:d4:3d:60:97:e0:bf:8b:e4:4f:35:
         97:9b:6b:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/g68zjEOmNWB6FE8wA4WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZGRhMGEwMDk1MzAzYTkxZjM4ZTQzYWI0ZDM3YjYxOWMz
YmVhMWQwHhcNMjYwNTEyMjEwMDQ5WhcNMjYwNTEzMjEwMDQ5WjAzMTEwLwYDVQQD
EyhjZTFkMWQxNDAzM2VhZDczYmFmYmQ2NTdhMDhkNzAyZTIzYmJlNjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdYXwrwHEWy8rSLRy/jTT0wqKqRO
aa91kv4oz0qav9L8jkakpvKTMarYz6WWlpjG1qlOXDv4LCgZPkrLYqeR3H/ixvJP
MM+MXbcRkMYuKOG+SxFAZcE3ac4idV0xlWuHb0RIsInS/m+lkiN8vA8W9sjx9WgU
B+9dGx7M2Iuq036/vdOnj08DJ3lFS0JHApQFFeOTxHI0zDD8JpxY3nq/6Q4Xceg3
M79rW9Ucu5WaIwLzrVLSggZYvfgY9/ev6HxUUBJX93EEeegpueTJLoMLNpzyPJYL
q2FUOdxQF7cQjeJhlAQGeU6YqXkYza3n5eNMPPA3WnXG7XvFk9RiswWfAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4dHRQDPq1zuvvWV6CNcC4ju+aXMB8GA1UdIwQY
MBaAFDndoKAJUwOpHzjkOrTTe2GcO+odMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMt
N2NhOWI4ZTkxYWM3LzEvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMtN2NhOWI4ZTkxYWM3
LzEvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCwHKBWJ
md5oO3oKACCJ4vLeFbQ5l8bHjtyX5muAOg9KyQxgDt9ZPsT8lYbH2sUHASICHajy
kFIzHGcelaSZeS7RT3G+7wNV+2raHd3ZEHA369b8rN+L/Owy0Xubxn6yqlcZBiOh
VRepPpWxbwhf0nB39Usx/5MLV0xk0aiQxNRvuJn62n7GmZpvdJOm6wrjUcD2gW5p
Zgz/RFF6noKyfGMOYw3AbGSXMuc9w4zKy4g92jTzikjYuXd9ii+VbcO6euTzQWim
xK/HdB26v6LaVUz9c8MXd6xRTnoXH+wJGaoknCjH5dxrsg2ydbePk6WzOpnUPWCX
4L+L5E81l5trPQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:31:38 2026 by rpki-client