Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
File:                     oet7cZVO3_yjWEyF-gj7EiQv7NU.mft (raw, json)
Hash identifier:          /3uaFNBkQ0IPluq0by/R8aQslKnIEcSZj4eGyYZTuJQ=
Subject key identifier:   58:A4:C5:F5:10:19:81:44:93:EF:85:E9:15:50:12:57:CD:81:F8:A3
Authority key identifier: A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5
Certificate issuer:       /CN=a1eb7b71954edffca3584c85fa08fb12242fecd5
Certificate serial:       019E21A42CAC26A7BFF0E71E2876FB323E7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
Manifest number:          01D9
Signing time:             Wed 13 May 2026 14:01:07 +0000
Manifest this update:     Wed 13 May 2026 14:01:07 +0000
Manifest next update:     Thu 14 May 2026 14:01:07 +0000
Files and hashes:         1: lE1Kxf9PJiSztZNrzwwBPAVYUcU.roa (hash: jNZxU5D1EKLny/wqaNa70XGzWgiNnFCUNtLqg86RKFE=)
                          2: oet7cZVO3_yjWEyF-gj7EiQv7NU.crl (hash: e2fiUeydsfE6B7WTqv+c5aVcsYy+yUXdiE4thw63t6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 14:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:a4:2c:ac:26:a7:bf:f0:e7:1e:28:76:fb:32:3e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1eb7b71954edffca3584c85fa08fb12242fecd5
        Validity
            Not Before: May 13 14:01:07 2026 GMT
            Not After : May 14 14:01:07 2026 GMT
        Subject: CN=58a4c5f51019814493ef85e915501257cd81f8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:31:6a:a0:08:52:ef:5b:01:b7:e3:e6:81:d9:
                    bd:c5:ea:09:e3:be:2e:31:86:69:73:e3:51:44:a0:
                    3f:67:18:ab:41:cc:4b:73:65:b1:08:f1:d0:91:b1:
                    a6:72:d3:6b:5d:64:49:67:d1:9e:61:3f:7c:d8:cd:
                    ea:47:d4:ca:25:e6:e7:2b:a3:f3:52:6e:dc:d5:0a:
                    b9:cb:6c:9d:18:8a:05:82:30:fd:b4:bd:85:33:91:
                    5c:5f:d3:d6:95:76:c5:73:47:e2:27:32:b0:a4:4b:
                    ac:a7:0e:5b:c8:0f:f8:aa:14:d7:05:6f:77:48:af:
                    b7:08:c0:95:74:4d:f8:bc:b3:7d:b8:b0:7f:b7:1d:
                    60:7e:ea:7d:bd:3d:bb:16:8f:f1:f6:36:bc:bc:d2:
                    2b:21:df:e2:c8:e0:5c:7d:73:dd:ef:6d:9f:c6:fa:
                    10:f8:e6:de:c7:f3:7a:e8:57:ff:50:88:ae:a1:fa:
                    96:e1:5e:59:e7:b6:bf:e9:85:31:cf:73:60:f0:30:
                    5b:1e:95:25:fb:ee:f5:4b:1f:1b:87:c9:69:91:59:
                    0f:c2:f3:2a:af:37:03:fa:00:55:d2:62:ab:94:06:
                    24:96:53:dd:36:34:34:fc:39:1e:a4:31:b6:a0:21:
                    d6:73:08:ba:b9:68:31:3c:f3:1a:0b:26:21:f8:ef:
                    68:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A4:C5:F5:10:19:81:44:93:EF:85:E9:15:50:12:57:CD:81:F8:A3
            X509v3 Authority Key Identifier:
                keyid:A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:5b:ea:e9:64:3c:34:ee:46:76:77:1a:80:cc:d5:c9:bf:bd:
         ce:f1:b7:65:6a:d9:dc:33:9b:62:63:d5:3a:28:9f:6a:6e:16:
         dc:ab:32:6f:c0:a0:08:1c:8c:d7:90:74:5c:da:03:39:84:9c:
         a0:93:c0:62:8f:2d:2c:bc:c3:10:bd:9b:72:98:79:7f:1d:07:
         49:f6:6f:28:eb:7b:3c:c4:e6:6b:e8:e4:a0:0c:dd:e7:24:de:
         38:34:66:f8:85:83:cc:51:bd:ee:74:0b:ea:e4:50:d8:8f:8d:
         9e:57:22:b6:45:20:c4:6d:fe:1c:a3:51:b9:bd:2c:4e:e7:38:
         84:35:9f:e1:05:9a:36:5b:79:4b:b5:b6:c4:cc:f2:c7:3f:09:
         1a:7f:2a:92:10:de:cd:20:d4:96:4d:cc:c2:82:2c:f9:eb:e4:
         a1:78:dd:33:ca:1e:1f:80:87:f3:1f:a5:29:44:e4:74:c0:12:
         34:5d:a9:13:33:69:da:fd:0c:33:e9:25:28:f3:96:41:92:3e:
         3a:af:3e:76:1a:6f:c9:88:35:8a:80:e7:5a:af:09:30:1d:59:
         01:f1:0e:40:dd:b2:b4:9f:93:d6:52:43:82:af:9d:a5:75:c1:
         02:72:9d:25:86:7c:58:1a:99:f3:d8:57:81:f9:d0:0d:36:5f:
         b5:ac:ed:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:48:45 2026 by rpki-client