Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
File:                     1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft (raw, json)
Hash identifier:          QN4zP8Ma1fX9ceOOm+gTdGJeSnHY3EaP3RDEPtt7mH8=
Subject key identifier:   17:5A:1D:4E:E7:F8:A0:5C:E8:D5:43:70:19:1F:33:21:AB:70:F7:97
Authority key identifier: D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
Certificate issuer:       /CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Certificate serial:       019E1C7DD14F6A092FB165A4891EA02301D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
Manifest number:          1331
Signing time:             Tue 12 May 2026 14:01:08 +0000
Manifest this update:     Tue 12 May 2026 14:01:08 +0000
Manifest next update:     Wed 13 May 2026 14:01:08 +0000
Files and hashes:         1: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl (hash: q7kzY/DJIYo1ez6mpT5OjjuDZriJcrZlGG7LGYAq8xg=)
                          2: QUWFgCmw4YvFuNhA76fhRZo1qdA.asa (hash: qlWMvZSHFjKwoiR9XSDKRHRr7ChwOKhh6yQ7lTCbwBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:d1:4f:6a:09:2f:b1:65:a4:89:1e:a0:23:01:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
        Validity
            Not Before: May 12 14:01:08 2026 GMT
            Not After : May 13 14:01:08 2026 GMT
        Subject: CN=175a1d4ee7f8a05ce8d54370191f3321ab70f797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8c:60:e8:e6:56:1f:a8:b1:f5:e2:ae:0c:5c:
                    65:bf:f4:c9:3a:52:13:3e:44:89:e9:1e:0c:74:00:
                    06:07:d1:18:28:6f:8c:d0:70:0c:d4:fe:80:c6:46:
                    be:eb:6c:e7:a8:78:55:dc:af:c9:85:ba:28:c1:d6:
                    10:b1:a1:28:e3:e4:72:3f:ad:b9:9b:4a:c2:7e:96:
                    31:8a:38:ab:5c:d6:d8:21:e3:37:ea:9d:cf:e2:4b:
                    5b:b2:75:4e:57:7d:2e:04:ca:d4:72:c6:41:38:21:
                    ea:8e:e6:91:30:33:4a:67:24:00:5d:7e:84:a7:43:
                    08:af:57:d5:24:d9:8a:06:97:72:a6:ae:db:28:a7:
                    62:82:5a:40:ae:e2:9b:93:7f:9e:1c:b1:f1:ce:56:
                    0f:0a:87:3e:d2:ab:48:1d:06:e0:be:f2:44:f9:f9:
                    77:e2:42:e2:40:cc:82:e6:11:c5:1a:f7:33:26:3d:
                    ba:34:97:99:f3:fd:51:ed:85:5e:41:98:86:fb:eb:
                    c2:17:cb:0c:ed:f6:84:27:01:00:e7:e8:ae:52:88:
                    60:cc:4c:47:f5:09:b2:db:f4:28:64:21:aa:1a:6c:
                    a0:e9:33:67:f2:5a:8d:c5:ec:72:14:bd:2c:bb:ac:
                    7e:13:2e:77:45:2e:53:1d:78:0e:58:2b:83:64:dd:
                    ad:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5A:1D:4E:E7:F8:A0:5C:E8:D5:43:70:19:1F:33:21:AB:70:F7:97
            X509v3 Authority Key Identifier:
                keyid:D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a9:90:c7:7e:50:d8:a2:f9:89:0a:b8:89:4b:b8:bf:20:b1:
         3d:99:e1:2b:45:75:fe:71:51:30:5c:87:49:7a:25:0e:6c:4d:
         5e:9b:70:93:e8:65:46:87:5e:ea:16:dd:bb:c2:9f:12:74:77:
         24:2f:90:3c:f2:01:26:27:89:e5:2b:d0:2b:d8:99:9c:eb:51:
         35:e2:53:cc:e1:23:a6:ea:66:ce:97:db:2e:9e:26:30:d8:8a:
         21:5e:a5:cc:f0:c4:0f:ae:8e:12:d2:17:93:c2:2d:06:8a:9f:
         6e:a5:c8:f9:c7:55:a5:32:14:b3:39:b2:4e:eb:f4:46:7a:ff:
         50:3a:4b:f1:cc:69:d3:f8:2e:04:a2:fd:c8:ae:b0:41:da:71:
         07:4c:df:d7:b9:ba:da:c6:07:91:b3:87:40:4f:09:39:3f:6b:
         f8:e1:54:fc:40:dd:09:8e:8f:54:f0:ff:34:fb:7e:7c:cb:95:
         5a:eb:1f:2a:4e:98:16:28:6c:96:dc:94:22:08:a2:7d:a1:ba:
         69:34:d1:09:be:45:28:cf:e6:f8:95:b0:e6:c0:78:61:d9:e6:
         5f:8c:ea:6c:0c:9d:7a:98:ba:a6:0b:df:10:30:cd:75:49:11:
         29:a1:77:6c:1d:92:31:ff:1d:0c:f0:b3:2a:1e:02:c6:f7:b8:
         d3:31:72:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:58 2026 by rpki-client