Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
File:                     Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json)
Hash identifier:          1QoPVfIBC+u+S+zVmieUUnaTTgRpo6tHzjpLRFjgWAQ=
Subject key identifier:   B6:46:C9:5B:CA:0D:3A:9F:E6:81:63:3A:37:10:B7:AC:B9:F7:60:21
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Certificate issuer:       /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial:       019E1EA2DD46A992C66206A521E81A8AACC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
Manifest number:          1906
Signing time:             Wed 13 May 2026 00:00:50 +0000
Manifest this update:     Wed 13 May 2026 00:00:50 +0000
Manifest next update:     Thu 14 May 2026 00:00:50 +0000
Files and hashes:         1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: isxlutYpAYpJvlrJoJCILu0QkiDPURhqQDzbGmdLVn4=)
                          2: aRhK0X7eTNVO7V2USrWib9Yy4MM.roa (hash: MPa5mbsL7LVHTMVq5SnfaR8X/yauxPgapPFTzRs4F7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:dd:46:a9:92:c6:62:06:a5:21:e8:1a:8a:ac:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
        Validity
            Not Before: May 13 00:00:50 2026 GMT
            Not After : May 14 00:00:50 2026 GMT
        Subject: CN=b646c95bca0d3a9fe681633a3710b7acb9f76021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:59:61:49:4e:df:6f:51:00:7d:df:66:b5:4a:
                    08:e5:66:34:17:d4:cd:02:ff:d6:ea:fe:7a:61:78:
                    56:88:fe:66:d5:f7:b4:52:75:7a:59:a4:98:1f:e2:
                    69:e5:5f:9c:6f:83:70:09:1f:13:a2:f9:43:91:bb:
                    43:65:46:dd:c9:a9:4c:a7:2c:c5:2b:d5:19:08:45:
                    37:0d:14:10:7d:46:5b:aa:b6:b8:87:01:a9:9b:d9:
                    4a:96:c3:e1:4a:b1:fe:06:02:f4:00:a0:0d:83:ae:
                    5f:66:06:77:e3:04:4f:17:3b:65:35:3d:8d:32:89:
                    89:fb:0d:f8:43:f0:66:79:66:46:f3:ee:99:21:ac:
                    01:dc:e4:c6:ab:c6:56:c1:a8:21:9c:4c:2f:bf:e3:
                    07:cd:00:88:6c:40:ae:74:22:78:0b:7d:93:f7:4d:
                    72:92:06:52:e9:94:fe:02:39:fd:99:7f:fa:a6:19:
                    c0:3a:9d:45:ef:6a:af:50:1b:39:47:a7:7c:7e:ff:
                    7a:17:19:25:10:db:43:31:80:4d:cd:09:1b:9f:d9:
                    33:72:83:91:b8:64:01:3c:e4:30:3d:8a:42:28:bf:
                    2c:55:4f:dc:50:7c:53:05:49:d2:ed:0f:6a:8a:0f:
                    ea:83:a3:d6:12:45:eb:4b:45:3e:5a:61:c8:54:11:
                    b8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:46:C9:5B:CA:0D:3A:9F:E6:81:63:3A:37:10:B7:AC:B9:F7:60:21
            X509v3 Authority Key Identifier:
                keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:fd:1b:2d:46:01:fb:12:c0:13:0d:f5:77:77:df:e1:50:6f:
         5a:8b:7c:c9:3a:64:8c:49:be:3f:c0:a2:e1:cc:e5:dc:41:f3:
         82:4c:de:b2:d5:18:8f:e9:5a:79:c1:0a:af:1d:e7:ae:70:c8:
         c9:b4:fb:f5:8d:ba:0c:50:fa:9f:fa:a2:a5:8c:f0:d2:c9:c8:
         f3:d5:f3:73:fa:06:22:2b:ea:18:50:f8:47:3d:7b:45:73:40:
         1e:5d:d1:d6:ce:9e:92:61:b3:63:18:55:69:3c:7f:a9:60:22:
         a4:69:c5:6f:34:1a:20:0f:e1:0a:bb:d8:46:bd:b6:75:ba:24:
         a4:27:ca:ae:17:f3:93:12:49:53:05:f3:09:66:1e:24:dc:05:
         fb:9c:56:ea:5e:f3:0f:37:de:98:2f:89:4c:5b:97:e0:e5:f3:
         ff:43:5c:a5:3a:14:76:1e:46:24:e4:78:bb:3d:75:15:ae:21:
         c9:2c:f9:42:ce:f5:62:be:26:09:fd:21:6a:a3:47:61:aa:5b:
         ef:0d:df:66:e2:28:d6:fb:82:ab:d7:9e:56:43:d9:fa:75:a7:
         e1:0b:78:be:d9:4a:6f:48:24:08:6f:9a:f1:ff:50:cc:81:49:
         e3:53:2a:e7:ca:06:9b:80:c4:4f:5c:a6:ab:51:ec:06:4d:e2:
         f6:85:04:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:30 2026 by rpki-client