Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
File:                     oOOBtudsuVIOjY9Wd27KD-F2zEA.mft (raw, json)
Hash identifier:          nW4sWoE1MWvMbzD9QzFiEyMdIu10zbkiLpNuWUwo2Ys=
Subject key identifier:   8E:D9:49:11:66:D0:41:C8:63:31:C0:B9:76:63:D4:71:7E:7B:B2:A9
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Certificate issuer:       /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial:       019E1E3505E8091B61A6B3126F8893CBD8BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
Manifest number:          1917
Signing time:             Tue 12 May 2026 22:00:51 +0000
Manifest this update:     Tue 12 May 2026 22:00:51 +0000
Manifest next update:     Wed 13 May 2026 22:00:51 +0000
Files and hashes:         1: BWTvXgAXmLi5C-gjg1XGZb6Xx2k.roa (hash: 42jeeBbxleiQhbuMxXur6p7rLIKmwfR/0QUFcIvSOuI=)
                          2: EqeB8tqHFp5nwKidq-l-rJcDnGA.roa (hash: LkoQtN+QmOCni6JN0Z5FUtSBkw3mqkVOTFE6VSZr0m8=)
                          3: U13FecX6J3UOL0Ga46JJjAYTBnM.roa (hash: jhsgEsNANGrcwvVO7xJiaTQ5oa51oynlcgVfqCGIYnY=)
                          4: V2TMTG4WDi8rsRzuUJ35K6X29Mw.roa (hash: M4JvfosFkWwb5FMHFRCzlviyPCyGNqJtznLLB1q9hHc=)
                          5: oOOBtudsuVIOjY9Wd27KD-F2zEA.crl (hash: gj2kMSaImsOFpqX1mEK+rS+5QG3HQrQ9YyIK4WyWiHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:05:e8:09:1b:61:a6:b3:12:6f:88:93:cb:d8:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
        Validity
            Not Before: May 12 22:00:51 2026 GMT
            Not After : May 13 22:00:51 2026 GMT
        Subject: CN=8ed9491166d041c86331c0b97663d4717e7bb2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:09:3d:cb:a2:89:41:9f:45:cf:58:bd:17:32:
                    36:a3:7d:a0:1e:c6:c7:f7:4c:5f:92:6d:bb:b7:98:
                    42:b7:63:f2:a8:68:f4:1d:d3:47:cc:ce:2b:4d:d3:
                    78:23:98:25:f7:fd:b9:f2:4a:cb:dc:a0:5e:b5:38:
                    ce:0f:4b:c1:fb:a1:02:28:62:f1:6c:61:ad:35:0c:
                    29:87:55:38:08:9b:29:2a:21:55:9f:ca:00:84:c2:
                    f3:cc:0a:94:5b:fe:79:ab:31:18:b8:4c:db:f4:8b:
                    dd:fe:77:13:6c:b5:2b:73:bd:ba:76:6f:3c:6e:5d:
                    f0:db:ce:16:b4:ba:c3:c5:f6:a2:29:7d:5e:31:87:
                    cf:98:02:61:b6:30:5a:8f:ab:a6:ae:d2:89:a5:61:
                    7b:3f:db:f9:4b:b9:8a:d3:6b:79:0f:94:71:f8:01:
                    6d:0c:b2:15:b8:67:28:7f:a2:62:29:93:c6:f5:61:
                    59:1e:20:2e:5c:49:c5:f8:b1:e4:20:0d:78:98:db:
                    85:f1:d3:62:94:3d:95:e2:50:77:d8:5d:b2:da:6a:
                    73:02:7a:73:ab:87:73:ce:bd:f3:b2:c5:60:87:6b:
                    1a:ae:00:6c:77:79:ad:40:58:59:18:45:bb:71:91:
                    38:20:06:21:26:c6:d7:3d:63:35:ee:7e:1a:a1:97:
                    1a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D9:49:11:66:D0:41:C8:63:31:C0:B9:76:63:D4:71:7E:7B:B2:A9
            X509v3 Authority Key Identifier:
                keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:f3:d1:ce:e2:b7:2c:8c:45:ab:cb:c4:9b:08:82:72:c9:c2:
         a3:70:ab:ef:e0:8c:2f:be:c0:53:ba:67:e7:68:b3:e0:08:99:
         ca:e4:46:c8:9b:da:92:f6:1c:0f:0a:38:70:08:6d:b5:b9:bc:
         84:08:a8:e9:9e:80:e7:ce:18:19:41:48:0c:f5:ea:aa:a7:0b:
         32:62:c2:e1:e4:55:c6:47:71:25:75:9a:d4:06:b3:58:2a:c8:
         91:9d:77:92:b0:e8:3a:4b:bf:6e:14:89:83:54:4d:8d:61:a2:
         bc:18:ea:48:49:92:be:b0:b5:85:77:2f:ed:18:3b:d4:1a:d1:
         85:94:ba:16:aa:1c:d6:fe:ed:9b:fd:f0:b1:4b:1a:c7:ca:29:
         61:cf:13:17:ae:c6:51:f5:05:47:85:b7:e3:4b:c7:59:be:40:
         06:1d:04:8f:f3:aa:d2:57:4d:cd:72:64:ab:fc:18:d1:a9:85:
         07:9c:36:a8:54:3b:9a:9d:70:9d:84:69:2f:25:5a:36:6b:8b:
         ac:2a:dc:62:88:96:f5:e9:da:8f:54:64:a8:3b:58:29:c3:27:
         d2:90:f8:c6:20:45:d6:3e:6e:c0:af:7a:e1:da:6c:47:54:64:
         98:0c:db:07:67:f6:c5:73:7d:71:f6:fb:a3:30:dd:67:6a:e2:
         89:b8:ec:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:45:59 2026 by rpki-client