Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
File:                     OzNj5H5p68XRwiUd3V2sfJiYmSI.mft (raw, json)
Hash identifier:          76SF99VRCHOwdtCk3WnfIoBG2XARl/elZPCB4x4MOkY=
Subject key identifier:   69:CC:E3:EF:E4:E7:B2:4F:60:BE:1B:E3:2F:46:C4:E3:A4:93:B9:38
Authority key identifier: 3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
Certificate issuer:       /CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Certificate serial:       019E1FECEA11D1ED2E156A7EC021DD6F1E1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 06:01:20 +0000
Manifest this update:     Wed 13 May 2026 06:01:20 +0000
Manifest next update:     Thu 14 May 2026 06:01:20 +0000
Files and hashes:         1: OzNj5H5p68XRwiUd3V2sfJiYmSI.crl (hash: 7+wRClYVnmuZ4W5zNqI4bt+YLedJUkhQl6CKgOr1SoA=)
                          2: j6GSjngp4zBMa0A6Up3-vP_HpYA.roa (hash: eFIS08YcHeuG7OXuLasqB4hIQnIZETYTn/VjLjZa0pQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:ea:11:d1:ed:2e:15:6a:7e:c0:21:dd:6f:1e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
        Validity
            Not Before: May 13 06:01:20 2026 GMT
            Not After : May 14 06:01:20 2026 GMT
        Subject: CN=69cce3efe4e7b24f60be1be32f46c4e3a493b938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c2:81:cb:a1:22:21:1a:1f:c9:99:d7:0d:b6:
                    1f:ab:84:8d:32:42:a8:b1:7c:c1:54:7b:3c:99:e8:
                    18:35:91:cf:af:ea:03:cd:02:7d:ef:ed:f5:bf:72:
                    fd:f9:47:7a:5b:4a:2b:7b:75:f7:56:bd:ea:bf:36:
                    bc:ee:c5:cc:ad:d6:ec:5e:89:9e:91:0e:8d:0b:d4:
                    36:3b:b1:2b:ee:02:68:18:f7:31:b8:cf:54:8c:44:
                    36:1b:3e:de:6d:61:77:2e:f0:90:e1:66:c4:a3:a9:
                    d8:c2:24:42:f9:a2:ac:3d:76:1e:ee:51:21:41:75:
                    5d:d5:9f:28:80:8a:90:87:02:92:08:f5:fa:d9:25:
                    bc:c2:c7:d4:44:1e:44:40:41:55:5d:d8:bb:86:44:
                    71:f8:16:81:82:20:f4:74:a6:58:1a:9d:63:c4:d4:
                    c8:1e:0f:a6:f3:50:82:ae:53:de:25:b3:3f:e6:fd:
                    9f:5b:9d:16:b7:5b:46:9d:f1:75:9f:62:c7:f3:e7:
                    26:b3:cc:9e:26:b8:2e:69:80:1c:a9:74:9d:99:b9:
                    3b:d3:65:91:43:f1:3d:2a:88:6e:25:91:37:69:05:
                    40:52:0d:39:48:b4:70:7e:ec:08:1a:22:04:af:0a:
                    04:15:64:3b:a9:3d:d7:48:45:7e:94:68:45:75:a4:
                    fe:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CC:E3:EF:E4:E7:B2:4F:60:BE:1B:E3:2F:46:C4:E3:A4:93:B9:38
            X509v3 Authority Key Identifier:
                keyid:3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:23:10:59:c3:d7:54:79:48:1b:b8:26:01:b2:08:63:1c:8a:
         00:9b:60:4b:ec:dd:72:60:9e:86:6b:fc:8a:f6:40:bb:21:cd:
         92:15:49:7d:fa:c7:48:d0:1a:8f:2d:27:ea:e3:ad:a0:a2:68:
         01:78:5a:3a:52:f1:77:5f:e6:a1:eb:43:81:22:30:67:5c:8d:
         1d:16:31:a2:81:e7:63:b9:6f:10:88:f8:89:90:31:dd:1f:a9:
         af:16:1b:05:c1:25:46:47:12:b8:d0:5a:37:6c:92:09:4e:ae:
         f1:7a:4b:e4:82:64:17:35:7b:cb:50:d2:08:1c:7e:19:f7:30:
         f4:bb:06:18:c9:3c:ff:4d:02:f6:27:c3:44:44:61:40:ab:f9:
         bc:8c:b6:a1:23:e1:cd:aa:57:50:3a:90:56:7b:78:63:05:30:
         e9:72:3e:07:5b:ba:c3:40:78:df:4f:69:04:1c:a0:bb:c4:ff:
         ea:25:28:62:fe:d8:98:7c:e1:c9:a7:10:d4:3c:95:fe:9b:0c:
         22:0f:22:ae:b4:16:b4:fb:8b:11:6c:ec:f0:54:2b:f4:33:e8:
         0b:38:51:83:02:91:43:9f:74:51:e5:8f:99:66:ba:a2:b3:d7:
         73:f9:3f:85:46:d3:fc:c2:c8:51:98:de:a9:62:cf:22:cb:06:
         18:4d:59:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:55:32 2026 by rpki-client