Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft
File:                     oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft (raw, json)
Hash identifier:          YiSefSvdWn53fS8s3Pf7lPDP2EOZwovxpflb0BjVnVY=
Subject key identifier:   08:54:B3:EA:01:D5:4C:B8:E8:9A:F4:98:E9:38:6B:BF:6F:76:1D:7B
Authority key identifier: A0:06:CA:06:96:5B:EE:68:1C:35:31:B4:26:B5:99:A4:01:E1:A5:A4
Certificate issuer:       /CN=a006ca06965bee681c3531b426b599a401e1a5a4
Certificate serial:       019D2703C0D6F19538743BCEE348E4B90512
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft
Manifest number:          0990
Signing time:             Wed 25 Mar 2026 22:00:50 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:50 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:50 +0000
Files and hashes:         1: gHMMMWkWSCRAZd1J-595ETu4GXM.roa (hash: 6RcYJsi4dqgKujLAkFe++oNBxFNAvLOZbGFMikg7LtU=)
                          2: oAbKBpZb7mgcNTG0JrWZpAHhpaQ.crl (hash: iOPQFAmb1L544E8/tJNClsvBaEJLFgC+u6etfaJT8sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:c0:d6:f1:95:38:74:3b:ce:e3:48:e4:b9:05:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a006ca06965bee681c3531b426b599a401e1a5a4
        Validity
            Not Before: Mar 25 22:00:50 2026 GMT
            Not After : Mar 26 22:00:50 2026 GMT
        Subject: CN=0854b3ea01d54cb8e89af498e9386bbf6f761d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:87:6e:5f:10:42:cc:9a:14:36:ca:2d:67:c6:
                    cf:cb:9a:61:40:0b:46:56:ab:4f:26:4f:37:56:01:
                    20:c0:dd:e4:dd:bf:34:ec:66:16:0f:0c:0b:4d:96:
                    55:c2:6a:40:a4:76:b0:82:3a:33:d2:7b:37:2a:60:
                    d7:8e:e3:7b:2e:92:ae:d1:a1:28:78:ee:e8:45:7f:
                    a0:60:df:9e:37:60:18:e5:30:ab:ff:26:be:5b:a0:
                    2e:8c:eb:cd:5a:34:18:ba:bf:c7:b8:aa:52:00:4a:
                    50:92:85:7f:35:9c:c4:f8:4d:e1:24:42:00:0b:e8:
                    da:42:d1:19:45:1b:4b:79:26:9c:bb:b7:57:a2:cd:
                    d7:41:3b:82:35:05:ea:f0:5d:83:eb:aa:78:1a:3e:
                    9e:38:2d:d8:6d:20:5c:8c:9d:6f:30:89:f7:69:73:
                    04:d0:dc:c9:f1:74:b0:e1:3e:41:72:d8:cd:b1:97:
                    65:58:8f:57:81:f6:86:95:21:e6:27:10:01:f3:b7:
                    97:db:14:cd:d1:45:41:fb:40:c3:55:b7:b2:52:f6:
                    6c:69:d6:2f:23:78:09:c1:77:70:78:37:9f:3f:70:
                    62:05:79:77:a2:42:79:0a:22:62:7d:ed:29:dc:67:
                    ce:00:a7:f6:e4:d4:18:0c:42:fa:28:d1:e2:f5:8d:
                    fb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:54:B3:EA:01:D5:4C:B8:E8:9A:F4:98:E9:38:6B:BF:6F:76:1D:7B
            X509v3 Authority Key Identifier:
                keyid:A0:06:CA:06:96:5B:EE:68:1C:35:31:B4:26:B5:99:A4:01:E1:A5:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:9b:0a:ec:ae:93:80:88:aa:8d:b2:d7:3b:4f:10:5d:00:8a:
         b0:fe:51:e2:f3:75:fa:98:62:6b:3b:1f:9f:0e:ba:f0:22:c7:
         db:65:b4:cb:b6:54:5d:d6:7e:d2:64:c3:97:ff:7e:23:19:1c:
         c5:02:af:8b:5a:6e:6e:35:b8:14:9a:9b:ea:64:ff:85:13:1b:
         06:f5:81:9e:8b:c3:47:9d:e9:19:7d:94:b7:73:fb:03:1c:9f:
         46:8c:bd:c0:19:5d:52:a7:4a:aa:aa:59:f2:fd:ab:d5:0e:33:
         a5:37:a0:f9:6f:ff:7e:4f:40:59:e6:e4:b9:fb:4e:1a:6c:3e:
         c6:38:07:37:b0:71:e7:77:05:0d:c7:fc:42:bb:16:cd:78:ac:
         ec:1a:7e:06:77:fc:a6:fa:63:fa:74:de:01:ec:54:61:ef:ad:
         47:3d:59:bb:a0:a9:2d:91:37:09:9f:9d:27:4b:88:ee:4f:12:
         aa:68:b6:fa:92:ad:52:1c:87:a8:cf:b9:22:bb:0b:36:79:9e:
         e0:3d:0b:a5:e7:03:97:2f:94:61:5d:35:38:dd:07:75:75:21:
         18:ef:2a:68:6a:20:11:7b:b0:8b:ab:ce:a2:2e:02:9d:61:84:
         17:aa:69:44:2d:fd:dc:08:f9:bf:2a:df:34:25:8a:bb:a8:05:
         eb:0e:0b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:29 2026 by rpki-client