Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
File:                     t_OeNnC0P1fxURt43eIIWWQBdFU.mft (raw, json)
Hash identifier:          zppOuVEB1mqpt8nhO0+UZKyMpbtTzv2KKDLciebWb1c=
Subject key identifier:   99:B3:DF:42:8A:40:F9:49:23:9A:03:5A:8A:6D:76:94:58:A7:5B:EE
Authority key identifier: B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
Certificate issuer:       /CN=b7f39e3670b43f57f1511b78dde2085964017455
Certificate serial:       019D2772997244A4DC59E2C57001C533019D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
Manifest number:          100F
Signing time:             Thu 26 Mar 2026 00:01:54 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:54 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:54 +0000
Files and hashes:         1: JFPJOrPs9dXx9GwdhX115yKBrlc.roa (hash: xcbSy3Zef1nqQuOhrN3INeMT7qcWiLG9Wjm4R+KTz98=)
                          2: t_OeNnC0P1fxURt43eIIWWQBdFU.crl (hash: urEgqqnouk9TG0pKpOVxLuQJD9KeXpguv04Z8thPfV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:99:72:44:a4:dc:59:e2:c5:70:01:c5:33:01:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f39e3670b43f57f1511b78dde2085964017455
        Validity
            Not Before: Mar 26 00:01:54 2026 GMT
            Not After : Mar 27 00:01:54 2026 GMT
        Subject: CN=99b3df428a40f949239a035a8a6d769458a75bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:41:e2:59:0e:0a:a4:6b:f6:ff:e4:22:4f:1d:
                    3f:7b:bd:a7:f0:34:01:f4:ca:39:f0:90:be:65:81:
                    bc:a3:88:5f:6e:79:f4:9f:81:9b:e1:c6:bb:ee:cd:
                    5b:bd:ed:ab:ac:17:5a:0b:18:85:dd:0a:83:6e:7b:
                    ea:a7:ed:b2:de:80:73:28:84:e0:a4:6f:7d:f6:6a:
                    92:a8:42:25:f3:aa:23:74:d3:b4:8b:56:41:8d:34:
                    58:09:8f:6f:e5:89:db:df:e5:af:93:e0:0e:92:6d:
                    0f:d0:3f:a9:d5:25:f8:4b:df:e9:69:01:82:01:1d:
                    d1:22:ea:93:fc:b2:8e:f6:c4:68:50:e7:4e:4e:74:
                    48:24:98:27:2c:5d:51:b7:1f:15:01:71:e3:3f:e4:
                    f8:08:c3:17:b1:f7:88:af:2a:3b:d3:03:36:80:ef:
                    a6:4e:5a:af:7b:1e:83:e6:c8:cd:1b:4e:9f:07:25:
                    db:3c:49:96:e6:6c:1a:f0:b7:5c:e8:30:ae:21:5d:
                    94:c3:0f:70:c8:fe:d1:d1:98:ad:17:53:49:fa:8f:
                    88:08:ff:22:a2:20:e2:45:10:2a:c3:98:87:9c:08:
                    2f:ed:bf:ad:64:41:a8:6c:41:83:9f:84:ba:2a:91:
                    ed:ec:57:29:33:6c:8c:a6:45:49:06:a3:d7:ab:45:
                    55:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B3:DF:42:8A:40:F9:49:23:9A:03:5A:8A:6D:76:94:58:A7:5B:EE
            X509v3 Authority Key Identifier:
                keyid:B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:d3:b6:d9:ec:e0:ce:b0:e4:eb:db:ad:eb:b3:e6:1d:25:91:
         4a:13:38:26:eb:f4:f1:ea:64:96:51:93:d7:ef:be:47:58:fd:
         3e:de:47:f3:35:a7:0c:f7:d9:e2:82:b9:c9:4d:73:46:3a:ba:
         bf:65:6f:b0:8d:a6:2f:b3:0f:b3:28:5c:3d:77:3f:59:8f:16:
         ef:05:00:de:16:3b:cc:6e:86:98:22:0f:66:47:8b:89:a1:ea:
         a5:6d:b7:50:15:0e:2a:17:3d:6f:66:b6:20:e8:4d:d5:38:2d:
         91:b3:bb:fe:f6:94:8e:66:3a:26:7d:15:c0:c2:7b:b2:ab:e1:
         88:94:89:aa:a8:8f:39:a7:2d:29:db:79:03:2e:d4:28:0c:06:
         df:d8:b5:94:37:5a:3d:64:d8:6a:3e:ca:b2:c2:65:65:6e:27:
         d7:d9:8c:f8:54:01:10:be:94:91:dc:b2:6c:63:27:94:01:63:
         a5:1d:16:5f:49:12:11:1f:e2:f5:12:47:02:6b:ba:ac:c9:fe:
         6f:f4:64:99:30:5d:27:9b:94:32:45:b4:36:13:2d:5b:8d:5b:
         26:7c:4f:6d:8b:9b:c9:dc:16:01:a0:ec:6f:44:ef:46:50:2c:
         cd:3a:90:57:31:63:ca:f7:61:f9:b3:09:5b:f5:63:4a:cf:fc:
         8b:59:e4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:22:21 2026 by rpki-client