Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
File:                     OuFF_jt5sr9oqtvgB9721yrvKsM.mft (raw, json)
Hash identifier:          /tIh0sPyPiAHrTUEsDDySUUyq1/fqWvi4YVWceKtCi4=
Subject key identifier:   B7:CE:85:31:9A:47:68:A0:7A:24:59:67:5C:F3:80:8F:A0:71:66:A8
Authority key identifier: 3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
Certificate issuer:       /CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Certificate serial:       019D28BBCD61AD068FF8B37BB53714F9D122
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
Manifest number:          1198
Signing time:             Thu 26 Mar 2026 06:01:29 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:29 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:29 +0000
Files and hashes:         1: 9dlwjsoeaynXvLD6hU--GhYSrqM.roa (hash: mUWy20UuJGJ5BznEAMczwLkiJHHJsFmSVmANdbalu+k=)
                          2: OuFF_jt5sr9oqtvgB9721yrvKsM.crl (hash: CV1s0aAW4QCjjdlbBwFbUWaPDwB3LE/FkZb2Xi29WZA=)
                          3: rM_jdXy84vXGo0-WUXb97B2X5Vc.roa (hash: GjuFk6jemR6ii4hI/oxG1vqpEf4r+3pyDc+nTJsViK0=)
                          4: sEmorA-ZRll0p0UMYOTfT8auHu8.roa (hash: NXJluQHm5Ujqo8vGjkexvbDRO7wfW2RmWXBToETA0t4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:cd:61:ad:06:8f:f8:b3:7b:b5:37:14:f9:d1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
        Validity
            Not Before: Mar 26 06:01:29 2026 GMT
            Not After : Mar 27 06:01:29 2026 GMT
        Subject: CN=b7ce85319a4768a07a2459675cf3808fa07166a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:47:7f:0d:36:85:ea:8a:f3:45:0d:ce:1c:bd:
                    4b:a2:dc:2c:0b:3d:e4:f4:52:ab:40:05:df:54:90:
                    b1:10:d9:59:35:34:c2:1e:f5:bb:52:bb:c5:7c:79:
                    0a:65:fa:12:ab:25:ad:71:ea:76:3b:96:8e:9f:d0:
                    62:b7:09:71:ca:a7:bc:b3:d1:90:09:36:db:ba:54:
                    14:8e:40:7a:85:f9:ce:12:18:7a:89:7c:d7:1e:4c:
                    ca:52:04:ec:ca:73:59:80:02:18:10:46:eb:f9:ce:
                    7a:7d:10:99:05:dd:aa:d4:be:15:cb:8e:2e:0d:25:
                    9f:1d:d5:3f:f8:4b:db:54:f0:44:bc:49:c8:68:9e:
                    e8:66:71:05:c8:f3:f6:36:36:af:2c:da:67:69:a8:
                    de:93:d6:94:a6:98:e6:05:c8:76:c8:bc:02:09:f7:
                    37:5f:8d:b4:94:bb:08:44:fe:58:03:75:eb:80:23:
                    d8:8d:7f:95:91:e3:d8:07:fc:8b:68:1d:b4:7f:47:
                    03:4f:7b:61:c6:f7:a6:7c:93:0e:66:01:42:3c:ff:
                    e2:11:94:0e:03:68:e3:53:c7:58:7a:b7:66:9c:f0:
                    e0:aa:ff:3b:6e:30:68:66:58:d8:d6:6b:46:73:de:
                    97:cd:49:83:fd:e6:27:5d:ae:d9:1a:06:eb:6d:09:
                    14:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CE:85:31:9A:47:68:A0:7A:24:59:67:5C:F3:80:8F:A0:71:66:A8
            X509v3 Authority Key Identifier:
                keyid:3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:09:f1:4f:e3:d2:45:61:e6:5e:84:d6:ce:64:b7:48:f2:cd:
         b3:e6:16:53:c7:69:ca:07:19:86:56:a2:68:7a:39:b0:8c:3a:
         fe:dd:ab:d3:5e:4c:45:03:44:a0:c6:95:b7:8a:eb:f3:eb:ce:
         94:98:30:9e:c3:1e:15:9a:0b:94:8f:6c:42:7f:8d:11:cb:34:
         6d:e7:77:5c:7d:3e:ce:38:ec:04:74:35:63:db:8b:95:20:fd:
         28:4b:79:d7:84:35:7a:fa:f1:fd:bd:38:3c:36:3e:46:cc:3e:
         ae:d6:0f:0f:bc:96:31:b2:ef:16:e5:68:32:1d:e4:b0:b5:15:
         fe:ed:b6:52:72:ff:04:5f:c8:7d:2d:f9:31:4f:c9:22:ac:5b:
         bd:5f:d4:0a:bb:42:78:83:cb:74:df:6f:c5:e3:dc:7b:3b:9d:
         90:ad:67:67:39:b1:59:91:a4:09:94:4d:90:1c:59:60:78:92:
         d6:51:18:4c:66:36:46:17:bc:b0:57:3e:38:65:37:f5:fb:ea:
         be:ff:79:3c:62:34:e6:0c:81:bb:60:b0:1e:09:7b:d2:32:2a:
         a0:30:89:65:03:de:d9:50:40:2d:a3:fc:95:bd:9a:46:f1:43:
         db:ab:68:6a:2e:42:df:82:c4:54:e2:c2:35:41:20:ff:40:1e:
         46:69:c3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:58:34 2026 by rpki-client