Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
File:                     OcqgvSVNGof0uzDbO1E_25r2JfY.mft (raw, json)
Hash identifier:          Ah/f8uiuPW2SJQT8Z6zcCr7QIEZzylfIY4HqzEvdsOQ=
Subject key identifier:   35:AB:DB:CC:4D:F8:A2:AF:B8:B2:0E:C9:CE:AB:8A:9C:46:4E:5C:D2
Authority key identifier: 39:CA:A0:BD:25:4D:1A:87:F4:BB:30:DB:3B:51:3F:DB:9A:F6:25:F6
Certificate issuer:       /CN=39caa0bd254d1a87f4bb30db3b513fdb9af625f6
Certificate serial:       019E1FB5E73EF22EEFF0A43270DF395B5DD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
Manifest number:          0B19
Signing time:             Wed 13 May 2026 05:01:15 +0000
Manifest this update:     Wed 13 May 2026 05:01:15 +0000
Manifest next update:     Thu 14 May 2026 05:01:15 +0000
Files and hashes:         1: OcqgvSVNGof0uzDbO1E_25r2JfY.crl (hash: 68sttuX+oDF7yFpA3nS6A+QEUzKmprA+aqzXqxLz1cw=)
                          2: UlsTdR6iXILlELiEa_LKJSYv9dE.roa (hash: TsAC0FSS4xzyyilfdtL8K8wERh4UskS3qmNYtY3fKi8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:e7:3e:f2:2e:ef:f0:a4:32:70:df:39:5b:5d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39caa0bd254d1a87f4bb30db3b513fdb9af625f6
        Validity
            Not Before: May 13 05:01:15 2026 GMT
            Not After : May 14 05:01:15 2026 GMT
        Subject: CN=35abdbcc4df8a2afb8b20ec9ceab8a9c464e5cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:45:ab:f4:b4:d5:76:3f:f9:db:5d:39:b1:0f:
                    43:bb:4c:b9:5b:ae:1d:da:93:30:3d:28:30:98:99:
                    1c:29:64:6e:4f:92:6e:f2:7e:22:bd:59:fa:fd:60:
                    6e:7b:a2:67:42:60:32:f1:9b:80:4a:9f:af:ef:59:
                    b9:7d:60:59:a6:23:66:2a:3f:b5:5d:79:a7:2a:c8:
                    a5:ae:da:99:6d:48:fe:fa:f8:43:7a:35:5a:29:b2:
                    0a:af:e5:99:3a:8d:76:f0:06:d0:80:ac:b3:f8:16:
                    a5:2e:3a:23:b2:44:02:57:e8:36:81:d6:98:bf:d3:
                    48:16:49:f9:c3:38:54:4c:77:b1:0b:23:da:52:ce:
                    40:4a:ff:a0:81:c1:dc:9c:fb:8f:4d:0f:d4:67:6b:
                    f7:52:23:c0:37:ad:c3:33:93:e2:79:f0:89:1c:dc:
                    81:df:fb:14:36:15:5b:e4:7a:55:ae:8c:36:b9:d1:
                    94:ca:80:1f:75:1a:c6:fb:f3:78:31:02:e0:a2:eb:
                    5f:91:a0:ae:de:25:b5:48:4a:49:50:45:3f:af:8f:
                    f2:f0:a1:60:ed:f4:d7:3b:84:6a:ef:5b:46:9d:5c:
                    9e:42:53:c5:f1:69:db:2c:70:3b:7b:a5:53:ac:de:
                    43:4b:7c:2b:6c:6d:61:47:e9:76:71:5c:34:4a:55:
                    4b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AB:DB:CC:4D:F8:A2:AF:B8:B2:0E:C9:CE:AB:8A:9C:46:4E:5C:D2
            X509v3 Authority Key Identifier:
                keyid:39:CA:A0:BD:25:4D:1A:87:F4:BB:30:DB:3B:51:3F:DB:9A:F6:25:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d2:19:b6:ee:c7:b4:e0:f2:5b:cb:3c:ed:a6:ea:2c:b8:0e:
         20:78:ef:5f:c1:86:9c:bd:77:bc:06:37:dd:8f:79:a5:88:88:
         8a:3f:7c:4e:7a:97:3c:2e:58:1c:e0:82:a5:43:3e:6a:16:e0:
         d0:f1:ee:d5:a0:bb:76:87:45:54:e3:f5:8b:59:bb:a9:81:b6:
         f5:8d:38:2a:4a:8f:fc:76:b3:d0:dc:7f:fe:12:8d:31:ba:75:
         37:68:87:2b:7d:f1:f9:9c:a5:6c:8d:d0:72:5d:ec:c4:77:dd:
         6c:4c:c9:5d:14:1e:ae:2d:98:c1:ba:4c:af:c6:f6:2e:24:2a:
         0a:57:2b:36:4f:a4:2b:db:a2:a5:fb:5c:70:44:58:17:a2:ee:
         75:b1:74:9e:c3:d5:d2:b1:7f:27:88:3e:cb:7b:7c:b1:b0:8b:
         65:6b:c2:c7:ff:62:88:bf:b1:6a:45:cb:58:72:4b:34:a9:19:
         03:1d:fa:a8:2c:28:01:70:47:50:e4:3c:e4:29:cf:7f:69:9d:
         9d:e9:b2:c9:76:fb:53:18:72:80:15:04:0e:60:88:a1:92:70:
         e4:7a:b9:e1:a5:9f:6d:5c:93:23:d4:65:75:88:83:12:cb:39:
         4b:6e:f8:ca:37:b1:76:ce:31:a7:ac:6d:d3:41:5e:2b:93:a3:
         20:b0:10:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:13:43 2026 by rpki-client