Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
File:                     OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft (raw, json)
Hash identifier:          tPKQtK9NKySbFtALJ5EQg+Z9nGyjF9Ds76kxMJmTo9s=
Subject key identifier:   67:38:1F:C9:D2:7B:26:7A:20:44:71:B3:BD:CE:6A:75:F8:CA:03:F8
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Certificate issuer:       /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial:       019D2884384D4C2319AE0EF040B6535F1D03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
Manifest number:          0900
Signing time:             Thu 26 Mar 2026 05:00:46 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:46 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:46 +0000
Files and hashes:         1: 3k7FbVwhmyQLuAj9pPe4WjPFPlo.roa (hash: O6sRXL4a8MdMFVOkKhZtZjs9oQiB3OUE5r6W391+yms=)
                          2: MWO04HZg4nna7ngSZWOngsPF3DY.roa (hash: XPa/7hvS1/ReU5t/3rvWEjSNDwT2ztfSW93g1iKSOio=)
                          3: OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl (hash: eC1J8ssrp19khSGTrqR5PCBp4bWGdM4HO7ZuFVP4FwA=)
                          4: b6wl6UOnM78Lu17GHxPqFqDhyUE.roa (hash: kA09Zc9zhv3l/lp97KkUt2qpUA/O9aXdkknPhTyEEwI=)
                          5: uHtev5eSqC8WE6ycypYpvyTzkPE.roa (hash: tOHZcVwKgbX/CIyGzALYSP5QrShCApH/2VThn/R79QA=)
                          6: vaYIteS5igEIIJAvOFUUxlbL9iw.roa (hash: FZNQU0LvtoOoER0joQEpoEINbntZYjJgCFYakf2fGAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:38:4d:4c:23:19:ae:0e:f0:40:b6:53:5f:1d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
        Validity
            Not Before: Mar 26 05:00:46 2026 GMT
            Not After : Mar 27 05:00:46 2026 GMT
        Subject: CN=67381fc9d27b267a204471b3bdce6a75f8ca03f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ba:f0:f1:88:b8:70:3e:03:4e:88:fe:59:58:
                    40:96:1d:d6:90:1a:fc:53:c5:a8:f7:97:be:bd:ba:
                    83:7e:5b:1b:cf:e8:17:9b:d8:fc:36:69:29:17:99:
                    09:17:ed:6c:b5:49:56:8a:83:cb:0b:57:ef:90:0a:
                    98:63:e9:d7:3f:65:3c:8c:29:e7:72:e7:ac:83:2e:
                    6e:39:10:c8:42:72:60:a7:98:3f:df:2f:ab:45:08:
                    b9:8c:1e:3f:80:06:13:d9:4a:c9:0c:2e:12:9b:fb:
                    99:f1:e0:bc:b4:52:66:21:1b:1f:23:52:d3:91:1b:
                    c2:32:aa:da:97:35:08:41:d7:c5:dd:0c:e1:3e:a0:
                    f0:b7:51:6d:90:f8:bc:d4:60:b6:a6:5a:d0:27:c8:
                    bd:0a:60:73:c8:f4:f1:51:34:ad:8a:23:e6:5d:0c:
                    5a:bd:69:b2:ef:a8:a4:5d:e9:7e:69:ca:7c:4d:57:
                    1c:7e:14:97:ac:cd:ed:8e:eb:63:11:87:59:07:34:
                    2f:15:e1:30:d0:c7:76:4a:b6:e2:8c:7f:28:f9:bb:
                    9a:65:dd:78:d2:a4:e5:da:30:1c:9e:b7:f0:39:42:
                    64:3e:47:17:d5:7a:d1:a8:69:07:79:8e:1f:96:07:
                    d1:3b:ea:0a:ab:6e:18:27:66:f1:b9:d4:c7:52:4e:
                    cc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:38:1F:C9:D2:7B:26:7A:20:44:71:B3:BD:CE:6A:75:F8:CA:03:F8
            X509v3 Authority Key Identifier:
                keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b3:11:df:95:12:fa:7e:63:2d:dc:92:f2:05:e6:ed:45:89:
         db:29:65:b2:1d:76:1b:9d:ef:48:d0:f1:59:a4:31:cb:e0:10:
         35:80:94:8b:90:67:6a:27:2d:1c:91:96:79:ac:99:e7:d4:ed:
         b6:46:d4:1b:c7:42:28:f3:39:0e:29:8d:42:b6:ff:52:1e:a3:
         85:fb:c6:dd:aa:11:5d:c6:b4:8a:f3:12:cc:c9:8a:6b:9e:6c:
         16:93:3d:57:92:9b:35:fd:c7:de:a6:ef:0e:e0:47:ec:1f:70:
         4d:19:1d:98:79:6a:4e:fb:33:34:d1:ed:03:f7:a6:9d:84:78:
         50:ef:e7:be:51:57:5b:3e:de:33:39:66:9b:83:7f:95:2b:75:
         2f:4f:7e:2a:fd:1b:1c:07:d7:27:21:c1:74:87:b0:16:6c:76:
         84:7c:aa:c0:d8:b9:31:e6:dc:c3:ce:b6:cc:5e:00:ae:a7:4d:
         ef:0c:79:2f:3c:33:e1:3a:22:a8:e9:67:40:0b:f9:c8:ee:22:
         8a:07:64:9f:93:d9:37:fb:d9:c3:f4:a9:ef:76:e1:fa:ec:39:
         e8:f7:40:c4:27:60:2e:4b:ed:2b:a0:cc:31:1a:b0:cb:5c:b4:
         c0:0e:59:5e:ce:30:6b:26:69:7d:2d:d4:7a:94:db:cd:d7:03:
         a0:45:a6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:11 2026 by rpki-client