Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
File:                     O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json)
Hash identifier:          Dn3HBpBJuKcTVrRTdz34MK3FZPzqlpsrd9EMcatAp/A=
Subject key identifier:   8F:55:67:73:46:D9:1D:FC:6A:9A:9B:46:EB:33:EE:00:0B:B5:36:F5
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Certificate issuer:       /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial:       019E1F7EA5B10CFC944FE471237945F35C3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
Manifest number:          1911
Signing time:             Wed 13 May 2026 04:00:54 +0000
Manifest this update:     Wed 13 May 2026 04:00:54 +0000
Manifest next update:     Thu 14 May 2026 04:00:54 +0000
Files and hashes:         1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: YH3vga+iG4Qh6w21AidnTqzYeRPWwFdzRcCgH/jii7M=)
                          2: uypIIfN_gqEh3lmpScBuFQ0y2x0.roa (hash: qYsj/xVAas+VL1pl193+WdJRRlNb+wnpITbwyt+RIfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:a5:b1:0c:fc:94:4f:e4:71:23:79:45:f3:5c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
        Validity
            Not Before: May 13 04:00:54 2026 GMT
            Not After : May 14 04:00:54 2026 GMT
        Subject: CN=8f55677346d91dfc6a9a9b46eb33ee000bb536f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4b:37:c1:5e:8e:1c:02:71:b4:ef:bb:5f:f2:
                    23:b3:54:d5:b5:22:9f:fb:4a:14:82:a0:81:48:3c:
                    4e:f7:47:60:f7:cb:3d:f1:3e:d6:38:da:c7:5d:ca:
                    4e:99:d1:53:ba:60:1c:7e:98:e2:54:31:3b:13:31:
                    a3:6d:8f:20:88:51:09:c4:0d:f6:59:3c:f2:fa:15:
                    48:84:13:01:c3:1f:65:1e:27:ea:d3:3c:28:c5:35:
                    72:48:bb:95:32:cb:73:41:21:a3:3d:31:27:8a:69:
                    8e:87:74:af:fc:27:e4:f4:b5:7f:be:03:4f:b9:d5:
                    dd:e0:f7:14:83:16:cd:da:74:bc:90:85:8a:0f:af:
                    ca:63:7c:0c:a7:c1:19:b3:96:3a:59:dd:c4:8d:0d:
                    eb:a4:ff:f0:c5:f1:35:f6:11:39:c1:91:d1:6a:e5:
                    18:5a:e0:56:59:45:0a:53:82:9c:83:d3:6e:80:bd:
                    aa:41:19:f1:86:60:f8:cc:9d:d0:15:6d:7b:98:15:
                    79:92:50:aa:5f:b9:a3:2e:34:6e:2a:6f:94:c7:6e:
                    76:50:90:7a:48:1f:58:cc:e6:cc:c5:9d:06:46:04:
                    ad:05:c7:b6:4a:d7:56:fe:75:14:3d:ea:54:d6:2c:
                    70:d2:6b:c0:4b:17:14:c0:4b:6d:0c:38:56:64:f7:
                    f9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:55:67:73:46:D9:1D:FC:6A:9A:9B:46:EB:33:EE:00:0B:B5:36:F5
            X509v3 Authority Key Identifier:
                keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:1a:6d:e3:4f:d6:9b:50:84:77:a7:b2:29:f4:89:b0:31:b9:
         89:03:ea:29:c8:66:80:a1:c1:46:6d:8d:c4:ca:d3:67:1e:59:
         11:22:41:3d:8c:99:d6:72:f7:cf:3c:80:c3:89:d2:f5:a4:56:
         04:2d:d7:38:26:1d:94:a9:01:22:93:28:17:5b:db:50:9a:c1:
         17:01:40:f2:f6:6b:62:01:0d:19:51:e4:91:46:b4:00:2e:45:
         e3:3e:23:18:51:50:14:8a:d3:15:40:d1:c8:4b:33:f0:f3:11:
         59:3f:fd:86:e3:fb:9d:0f:e7:5b:de:16:2a:a3:eb:96:54:c5:
         a8:4b:b4:d1:f9:7d:f2:7f:68:e9:cc:80:a8:54:c7:37:1f:0a:
         26:84:16:21:9d:66:4b:77:7a:a9:e3:25:a1:75:83:85:40:cc:
         7a:2f:93:d6:bc:4a:92:de:8f:ca:57:c7:d7:48:e8:61:c8:3a:
         b9:3e:79:21:33:cb:5d:b2:d0:9d:7f:eb:94:6b:0d:aa:2e:1b:
         a7:68:3b:fd:ea:63:be:db:16:c0:4e:74:85:ef:ca:32:e6:83:
         77:c6:10:8c:1c:4d:cd:d6:16:c2:3d:48:73:5c:76:85:8a:cf:
         fb:7c:5d:89:e3:3e:91:5f:3d:63:dd:aa:58:73:fe:b1:e2:16:
         d7:91:c5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:54:09 2026 by rpki-client