Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
File:                     osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft (raw, json)
Hash identifier:          wU0I+nB66mBKVsB9TAc5bpOzHpCWERHNnWVCgjqtXUs=
Subject key identifier:   26:CB:8B:40:0A:03:4F:6C:7D:7B:82:10:A7:9C:EA:B7:AF:5C:8C:49
Authority key identifier: A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
Certificate issuer:       /CN=a2c56441d83df94bbd0e60144a554639e40e0535
Certificate serial:       019D26964C28A6A0B5EDF413AB058FDAC4AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
Manifest number:          1078
Signing time:             Wed 25 Mar 2026 20:01:17 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:17 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:17 +0000
Files and hashes:         1: dvdR9JcJ1adEKhDQHP6JqbDnN2Y.roa (hash: VM5iSA8uwKH8wYL20uR8+pC8sXRM47ndx6laWeDwxAU=)
                          2: osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl (hash: L35Ubczoexq4ua2vAlOleUy9XUDWpEWF/Aa492cz8WM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:4c:28:a6:a0:b5:ed:f4:13:ab:05:8f:da:c4:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2c56441d83df94bbd0e60144a554639e40e0535
        Validity
            Not Before: Mar 25 20:01:17 2026 GMT
            Not After : Mar 26 20:01:17 2026 GMT
        Subject: CN=26cb8b400a034f6c7d7b8210a79ceab7af5c8c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6f:a9:36:eb:f1:70:97:09:16:59:c9:bf:cc:
                    87:3c:f2:d6:c4:14:b8:17:13:f1:a7:08:c9:2d:bb:
                    2f:5a:f1:e1:2b:d6:18:56:01:7a:d7:59:56:6b:a5:
                    4c:f3:3e:e8:86:5d:63:02:fe:91:6b:53:0f:c1:03:
                    1c:69:08:85:7b:29:a5:99:cb:ae:4c:90:d3:97:ea:
                    38:89:3f:4a:d9:55:ca:cb:74:e1:1b:b9:c0:8f:1d:
                    4f:94:e2:5d:8c:75:3a:66:bf:38:ce:a7:34:7d:e9:
                    e2:f2:69:1b:95:b9:9a:af:14:56:b2:57:8c:53:19:
                    30:d8:e6:75:6a:52:86:91:42:82:8e:0e:98:03:7f:
                    fe:51:b4:ee:d6:e8:f6:ae:81:24:41:13:f4:bd:18:
                    a1:3a:ed:8d:a1:7f:4d:14:dc:5b:a6:27:69:ee:fc:
                    12:4d:bd:02:57:0e:3d:fa:47:c0:e3:f3:82:c9:98:
                    5c:a9:6f:e2:c6:b4:02:ee:fb:83:2c:14:db:7c:d1:
                    64:47:df:4d:57:c7:7f:ce:f6:bb:32:6a:af:9e:16:
                    11:8e:f4:1f:65:b4:45:9b:66:2c:0d:4b:56:b8:8f:
                    6f:7d:23:74:de:a4:06:eb:39:71:d4:86:e9:a6:4e:
                    ac:ca:83:ba:36:ee:c5:6c:39:ef:31:6c:6f:bb:15:
                    f2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CB:8B:40:0A:03:4F:6C:7D:7B:82:10:A7:9C:EA:B7:AF:5C:8C:49
            X509v3 Authority Key Identifier:
                keyid:A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:9c:47:d9:ea:f4:61:87:42:32:82:df:f7:09:6a:19:e1:43:
         cd:35:40:45:f6:63:06:1f:5f:2c:99:7f:e2:cb:9f:73:ee:96:
         6f:f6:bd:67:1f:47:f5:99:fb:3b:bc:b0:00:0c:18:06:51:a7:
         2e:c2:85:30:50:a4:f3:9b:09:6d:4d:72:fb:b2:73:8f:35:f1:
         bc:4d:68:5c:e9:c4:9d:93:f2:79:bb:e1:3a:78:7f:f9:6b:40:
         a0:61:1d:34:10:23:f8:eb:84:d9:53:a9:1d:8b:ea:03:28:e4:
         47:4e:c0:60:23:42:9a:87:67:7c:87:cd:69:0a:4e:d7:af:9f:
         4c:46:f2:0b:c7:40:78:b6:9b:fe:68:92:e0:bd:8d:60:da:01:
         a2:23:e4:c6:52:7e:a9:fb:57:70:ae:1e:a0:4a:6d:54:35:9d:
         e1:ef:41:7c:c9:89:9b:50:c4:e9:8b:49:e1:09:69:b9:5e:d5:
         e5:46:58:96:f0:46:83:be:02:ac:4b:fc:5d:49:ce:17:bd:72:
         54:08:9e:f1:75:73:3c:08:ee:79:49:b4:af:eb:54:a5:93:23:
         db:3c:a0:99:d1:a2:b0:f1:15:8d:c3:7e:c4:d8:6a:d2:f7:ac:
         b7:28:85:69:3c:1b:ed:38:4e:9d:05:2a:b6:07:31:5e:8e:25:
         92:9c:77:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:44 2026 by rpki-client