Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
File:                     PubOz_2bi7oY1HTns5k-Ch0U27M.mft (raw, json)
Hash identifier:          iXA22+PzUHs93MOys0myjPPlWybHi+D9pqFMxXB+qlE=
Subject key identifier:   0B:D9:93:FC:6B:BA:0B:B6:E8:FA:1E:5D:CC:F4:23:FA:81:B6:92:69
Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
Certificate issuer:       /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Certificate serial:       019E1D91237B23827F81AF3F2376283E7DE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 19:01:51 +0000
Manifest this update:     Tue 12 May 2026 19:01:51 +0000
Manifest next update:     Wed 13 May 2026 19:01:51 +0000
Files and hashes:         1: HgjQlaKjOcxyBGYejwW2nEs1AV4.roa (hash: A/JVdLkAtd7xSgRJY34UCglbvZrgY4rTBx9M0XvHris=)
                          2: KbPCfCpgY4busEPKG3wKIKYL4ts.roa (hash: /r3wKFeByv8IWPnZi01I5rTvuzXRQVBcL8LQjvMalwY=)
                          3: PubOz_2bi7oY1HTns5k-Ch0U27M.crl (hash: r+HzkfKJcYgdUTjJX6IwqZduNYf1I1Uo9ckZ1+TJIic=)
                          4: TR9cohMhMoQQxWhWiR1qGs1BMC8.roa (hash: LYdTaX6pjmd3oJ4vpjV9U20LQlY3HXHKSPGaKNT6k0M=)
                          5: VVHWjLC5gXhkxNQ7IVFDXzmzeZI.roa (hash: xCZynqZw2sX0L0GEOZPMQ2Okzgf6Cs5V0s8Gbvable4=)
                          6: na7v2RTX0iJO5QICr8PmbCw-LUM.roa (hash: jwROABglDlbIBf0fqlrQ82IKxKEdLiyV166j/7Y15oM=)
                          7: ycbxLoTJEDsv40EPKCzklrp5vCU.roa (hash: ik9FtWC2uSrCFeO2vECTjX7gm9PiFa3XhpXGDwO8G94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:23:7b:23:82:7f:81:af:3f:23:76:28:3e:7d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
        Validity
            Not Before: May 12 19:01:51 2026 GMT
            Not After : May 13 19:01:51 2026 GMT
        Subject: CN=0bd993fc6bba0bb6e8fa1e5dccf423fa81b69269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:90:09:59:40:5f:c3:92:f4:a6:0e:b5:ee:e7:
                    cf:6d:9f:34:4f:34:16:01:de:cc:61:0c:1e:89:58:
                    25:8a:a1:93:0a:ca:d4:ab:2d:32:4a:e6:27:14:8e:
                    7f:05:57:ec:a0:93:4b:8e:25:40:1c:65:2f:40:2c:
                    35:cb:cb:3e:51:5c:aa:1a:d6:b9:a6:61:79:3c:b2:
                    e1:e1:a1:90:60:5f:9a:09:3e:0f:cc:ea:e8:75:a8:
                    d6:15:fc:22:10:46:e0:10:eb:f7:b2:33:a6:1d:10:
                    f7:05:4f:37:cc:50:56:bc:63:2e:32:6a:c9:89:64:
                    b2:7f:71:37:72:7f:cd:e8:50:1f:dc:7d:9f:71:56:
                    56:62:12:74:9b:75:07:1f:a1:23:ee:42:f6:cc:5e:
                    36:87:44:88:8a:62:3b:67:0e:d3:8b:a0:d4:11:89:
                    31:6b:d2:88:f7:a0:10:cd:a4:66:04:7a:6f:58:3e:
                    5f:a5:6d:7f:40:c0:69:fd:6a:65:62:b2:b4:ec:43:
                    3d:9a:45:f6:26:2b:c9:ae:2a:62:37:8d:2f:75:4b:
                    f0:7c:55:50:b2:0c:97:8b:6c:99:ff:f5:33:3a:70:
                    96:92:3a:e1:67:2d:e1:54:f9:3c:d4:08:b8:d0:a7:
                    7e:71:d1:57:38:8a:98:5b:d5:db:3c:fd:bc:e2:13:
                    bb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D9:93:FC:6B:BA:0B:B6:E8:FA:1E:5D:CC:F4:23:FA:81:B6:92:69
            X509v3 Authority Key Identifier:
                keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:81:15:eb:b2:1e:ef:52:d0:a6:3f:12:65:a6:bb:ba:c1:ec:
         20:45:e4:c1:33:1d:84:20:cb:99:2a:7f:a9:47:d6:65:a2:41:
         a4:09:76:bc:12:96:10:f1:dc:56:78:42:a3:f1:d7:44:9b:f9:
         13:35:2f:45:c1:d0:1d:cc:d0:77:c0:d6:09:b8:91:52:0a:76:
         ff:2a:f4:56:5b:57:3d:13:54:4c:de:e6:b1:dc:48:08:67:18:
         96:e4:c1:6e:15:45:80:f7:2a:4d:75:b7:bd:16:17:39:17:95:
         8a:0a:a9:7f:85:72:07:b4:9a:4d:77:61:30:62:40:1a:d2:9b:
         0e:15:ff:31:53:d1:95:3a:d5:09:04:d6:d9:a9:39:68:43:c1:
         17:77:ea:02:e1:a6:fd:d6:7b:5f:e8:d8:c7:fe:94:11:2d:79:
         14:54:4a:04:4b:56:3d:e6:38:74:0d:92:88:4d:f5:a3:cd:a2:
         6a:a8:91:f6:c5:f9:bf:04:82:65:ef:ef:89:b8:52:5f:40:97:
         3e:ee:61:b1:9d:bf:29:1e:d3:86:1e:55:fb:a2:f0:0c:7a:5a:
         5f:d3:78:36:8d:48:47:93:58:fa:8c:85:a9:ae:99:cf:a8:15:
         d8:23:05:18:e6:28:4d:ee:ec:2a:ec:6d:f5:c7:b0:25:4d:2e:
         88:4a:4a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:34:58 2026 by rpki-client