Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
File:                     OBbhmySn6M_xifq6wohSzYdIo4A.mft (raw, json)
Hash identifier:          pcfoOPBMDVwtrzEFhCLwC0FW4fWguk9QJntAH0gi+1g=
Subject key identifier:   7B:F6:D3:FA:23:E3:B6:6A:CB:E2:35:24:9A:A5:AD:11:95:62:59:96
Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
Certificate issuer:       /CN=3816e19b24a7e8cff189fabac28852cd8748a380
Certificate serial:       019E1BD8A6C37D9E70B9733C510583396770
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 11:00:43 +0000
Manifest this update:     Tue 12 May 2026 11:00:43 +0000
Manifest next update:     Wed 13 May 2026 11:00:43 +0000
Files and hashes:         1: 10zU5k5ICxgrM5-Ip5yncI3GNGs.roa (hash: LEG/jSgiyt7BovVPDQkdWrVInvTbnRp5DG6v8hbqY1s=)
                          2: OBbhmySn6M_xifq6wohSzYdIo4A.crl (hash: YIxVshz1JxFVjwHp29BgrDGG7+oy2j/4aaQTdvOHjys=)
                          3: QmWmoP1KHfrR9eTOqZ6x9ezRXSY.roa (hash: xqu4qFo0DMMx0+rjC1DPBvqtwUrbm4PocY0IAf7sGdo=)
                          4: pm2S8QCe4l9WpfwvU_iLSL0zIlI.roa (hash: siFYWGu9y7ejpY470okiO/aX4nO9BjP28kUxghwfExg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d8:a6:c3:7d:9e:70:b9:73:3c:51:05:83:39:67:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380
        Validity
            Not Before: May 12 11:00:43 2026 GMT
            Not After : May 13 11:00:43 2026 GMT
        Subject: CN=7bf6d3fa23e3b66acbe235249aa5ad1195625996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:70:9e:12:00:4f:1a:ba:1a:69:8c:9d:46:0c:
                    dc:33:b8:16:2f:85:cb:6d:b7:0a:f9:a3:e1:46:3b:
                    3c:d5:75:45:63:da:e4:18:12:77:5e:96:a7:b2:09:
                    83:77:1f:55:3b:69:d8:36:e5:1a:62:1e:78:da:d5:
                    6a:f8:86:ee:4e:c7:bf:31:73:13:72:f6:b5:c0:22:
                    52:14:7f:26:10:45:51:d5:e0:df:a9:fc:e5:ac:f0:
                    4b:8a:d4:96:47:f0:3c:1b:58:80:e5:e9:70:51:b8:
                    e4:92:5d:7f:5b:9b:f1:ab:4e:f3:ae:df:87:f0:26:
                    ff:61:d3:ff:44:22:40:b7:7a:2a:d0:21:ea:0a:a8:
                    e1:d6:5b:2a:b2:cc:33:dd:72:be:f7:ab:44:23:8c:
                    e4:c7:e5:91:3b:60:82:c1:6d:c2:b1:28:64:77:c6:
                    d2:6a:5d:67:92:77:95:3b:dd:90:98:88:50:d0:6c:
                    82:d8:38:2d:1b:6e:b5:c6:c5:5c:03:37:2c:b8:00:
                    f2:89:0b:a5:15:74:1e:ba:35:a7:a8:2c:64:4f:cd:
                    95:6b:53:61:d7:8b:ab:35:de:9b:a5:47:f2:fd:5d:
                    a8:cf:45:22:5e:2d:72:cd:5d:74:0f:cc:83:2d:85:
                    01:c7:38:15:90:cc:a8:bb:bb:11:76:99:11:27:7d:
                    47:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F6:D3:FA:23:E3:B6:6A:CB:E2:35:24:9A:A5:AD:11:95:62:59:96
            X509v3 Authority Key Identifier:
                keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:32:62:50:af:f1:fd:56:43:5e:9e:c3:26:5e:b4:7d:81:0a:
         3f:06:52:35:08:61:66:55:9b:a4:30:b5:e5:61:39:d4:fa:78:
         da:20:74:b6:f9:e6:2e:42:9c:5c:a6:88:58:17:e3:89:4a:a2:
         da:29:fd:ce:0c:14:39:43:dd:52:86:ff:17:03:26:60:93:c5:
         bf:07:54:54:51:cf:8b:f6:04:aa:50:aa:7d:7f:4f:a0:3f:40:
         d4:c9:69:7d:db:62:28:22:27:89:f6:6d:fd:25:e1:40:b5:4c:
         aa:29:6e:0a:ba:61:54:eb:68:c1:90:e4:51:64:5f:74:7f:28:
         5c:4a:c7:96:4f:96:60:d1:93:b5:5d:7c:83:17:ff:da:03:c2:
         36:ff:46:c1:a9:c6:dc:ae:a9:39:78:0d:4d:ce:9f:94:f8:1f:
         14:f1:39:7c:4e:72:ee:80:69:31:73:01:01:cd:85:63:d8:db:
         1e:c4:97:81:d9:25:df:23:f2:7e:93:2e:76:6a:67:3a:c9:f9:
         63:96:93:2b:8b:53:2b:d4:68:f7:ff:ee:cf:4a:dd:b0:9e:b4:
         5a:95:e4:c9:7d:b2:ca:0f:4c:ff:e9:b9:4e:5a:f0:41:20:79:
         0a:f8:ac:15:79:98:a1:9c:ea:7b:de:d3:05:21:3a:20:58:8a:
         99:6c:2f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:18:19 2026 by rpki-client