Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
File:                     oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft (raw, json)
Hash identifier:          7ehqFT+ya/k5adiSBpgmK+9DGN4aLYxEMneiC6t5y4c=
Subject key identifier:   9D:DE:D4:C5:6D:B8:82:EF:57:68:14:DF:DE:74:EA:7E:E8:F7:D5:2A
Authority key identifier: A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46
Certificate issuer:       /CN=a122d6d21bd04c46224653a49be029e3c024b846
Certificate serial:       019D329A83A5AEEE1B7113A9E36692C05019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
Manifest number:          0493
Signing time:             Sat 28 Mar 2026 04:01:20 +0000
Manifest this update:     Sat 28 Mar 2026 04:01:20 +0000
Manifest next update:     Sun 29 Mar 2026 04:01:20 +0000
Files and hashes:         1: 3VvlIVLD8nV-Kprr00nGUqwlEG0.roa (hash: ueTtVv9Izvar/a32kf0F4hmGSZUFBIbcRRQsZSddarI=)
                          2: 7HJItND-ZHUyWIc0zlIoIbcu0kU.roa (hash: 9Bz34LYfCAabYfpSmfTeNq9WvdNCYgrnyawzxf6Rfac=)
                          3: cBS-3HpC_a4rHcbd8xWkU8ryqAo.roa (hash: BFwk1ZVFsJ92QmF6WqyS8lrea+ZBvLbcAz/u0+3fQLc=)
                          4: oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl (hash: xNpSadXGj4PEiKLfzR9DiREetThKg1OW3BhNgFLsJsA=)
                          5: wpoL_iSupuiaeUF0rSK5oTJDYgk.roa (hash: tmpMUF0ltyMmfrFAPsjl7BnWO5nUIh5IyWezk54S+Pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:9a:83:a5:ae:ee:1b:71:13:a9:e3:66:92:c0:50:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a122d6d21bd04c46224653a49be029e3c024b846
        Validity
            Not Before: Mar 28 04:01:20 2026 GMT
            Not After : Mar 29 04:01:20 2026 GMT
        Subject: CN=9dded4c56db882ef576814dfde74ea7ee8f7d52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:59:76:8e:2d:79:d9:0e:58:b5:c0:4d:27:d7:
                    c2:f9:97:e6:cc:cb:95:43:b8:18:39:c8:fc:39:81:
                    62:ac:8e:c9:b6:c3:83:4c:8b:af:d1:37:ca:8d:e2:
                    0f:8c:49:c4:34:4a:ca:24:22:41:97:81:b1:45:cf:
                    e0:1a:83:13:01:65:df:f6:8c:6c:81:55:de:72:93:
                    1f:57:f6:5e:65:df:2c:d1:9a:b5:4c:ee:ca:24:13:
                    96:6a:6b:11:c6:bf:c0:2a:aa:5c:de:e4:69:1f:82:
                    b5:34:d1:b6:20:15:88:71:9c:9a:fe:9f:b7:74:8a:
                    db:ca:95:3b:2b:78:5d:59:77:84:47:b9:df:9d:cc:
                    97:36:92:f0:ce:52:39:cc:88:73:62:33:c5:69:15:
                    2f:51:25:1c:3d:c7:e8:ae:8d:61:37:b6:3b:a6:06:
                    94:2b:f3:e0:71:d0:54:70:5b:53:01:1b:37:a0:8f:
                    91:89:c7:4f:f1:4f:7f:41:81:9d:4b:9b:39:76:28:
                    a6:14:b5:f4:c1:31:4f:4a:9a:4d:58:94:a6:05:3c:
                    61:78:19:45:b8:c3:6a:bc:53:88:1c:17:49:63:8e:
                    1d:81:27:68:ea:30:fa:0e:e6:72:a4:ef:e5:0e:1c:
                    7d:e8:1a:4d:4f:d6:f2:e7:85:3c:f6:f3:64:e7:9a:
                    d1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DE:D4:C5:6D:B8:82:EF:57:68:14:DF:DE:74:EA:7E:E8:F7:D5:2A
            X509v3 Authority Key Identifier:
                keyid:A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b5:c9:16:4b:6d:7c:ce:2b:8e:5a:14:4c:7b:a5:88:f5:ff:
         44:36:fd:97:0b:3f:83:23:7b:1e:22:3d:e4:55:2f:c6:e0:46:
         b9:9e:f3:ce:a4:e8:d3:a6:d4:32:24:ac:9c:44:d5:49:28:6c:
         e3:c9:a8:00:12:ff:88:00:56:be:d4:12:63:6e:3b:4d:8e:1a:
         34:a0:47:ea:93:ae:03:04:eb:ba:0b:a9:19:07:1d:90:a6:c8:
         0a:a9:e1:28:83:91:29:f9:b9:b5:eb:05:24:35:e1:0f:47:7c:
         53:4e:84:ee:1c:4d:bc:ab:b8:df:b2:17:18:85:9d:97:b2:43:
         a1:c0:3f:54:86:ab:3c:f6:08:b8:ea:fd:81:88:31:9c:2d:90:
         33:95:de:07:19:ca:16:3d:aa:67:66:85:f2:39:74:f6:8e:e4:
         25:b1:02:1a:2d:fd:37:68:8b:85:2d:05:49:4d:47:6b:57:91:
         6f:55:84:4f:a5:b8:36:d9:55:3b:78:87:65:df:9d:d2:36:6c:
         48:ac:61:a5:c7:f3:d4:2b:85:2b:20:47:78:ef:24:0c:ac:0e:
         d3:a5:5f:95:bf:c3:c6:d9:be:ac:bb:a4:c7:cf:aa:ea:28:b9:
         25:44:47:80:fd:40:de:2c:a1:39:6b:e3:fb:95:de:53:88:37:
         19:d7:eb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:55 2026 by rpki-client