Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
File:                     USOacCubRBGfwO-wBSTn3RLeqPY.mft (raw, json)
Hash identifier:          SaQlCFeiy7ZFp0JvE5KR9M0Zula4guThbGOhJ7OqA4M=
Subject key identifier:   12:17:E6:BF:95:65:16:C0:67:B6:E8:2C:01:93:61:2B:5B:2F:3B:74
Authority key identifier: 51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
Certificate issuer:       /CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Certificate serial:       019D28BBD1E496F824BAA43C2A9FDE6EFDA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
Manifest number:          1519
Signing time:             Thu 26 Mar 2026 06:01:30 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:30 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:30 +0000
Files and hashes:         1: USOacCubRBGfwO-wBSTn3RLeqPY.crl (hash: LL5DveuwD6gH6h+Ug+gn4MwozX+jyE1yVYZYD2N+yJA=)
                          2: eImEyRrzQaMBiFlZOhGNpdB8A3o.roa (hash: ohTX7uDCv7TQkH+WJ6CBAXHjVpePbGZrEFWaegxzw/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:d1:e4:96:f8:24:ba:a4:3c:2a:9f:de:6e:fd:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
        Validity
            Not Before: Mar 26 06:01:30 2026 GMT
            Not After : Mar 27 06:01:30 2026 GMT
        Subject: CN=1217e6bf956516c067b6e82c0193612b5b2f3b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:9e:41:ee:e9:a8:ba:1a:37:09:49:70:df:
                    f7:85:cd:65:f9:29:d0:fa:f9:d6:96:4b:93:e1:14:
                    37:b7:c1:a7:5d:d2:aa:64:7f:b3:75:10:e0:06:d3:
                    ec:e5:c7:ec:a0:41:e4:84:ba:ff:34:22:2e:6f:3b:
                    37:fa:ad:c5:71:8c:4f:d4:88:33:eb:80:fa:05:4a:
                    ff:78:23:6f:e1:f6:c7:ef:96:12:2b:b8:5b:bf:e0:
                    8b:45:42:a4:cf:8e:17:57:f1:61:13:ef:a7:ea:83:
                    d0:d1:29:96:44:95:f1:bd:e3:66:c5:02:dd:71:21:
                    d8:07:92:2c:0c:08:66:9a:04:30:ee:38:1b:a5:f4:
                    13:d3:14:93:51:fb:84:bd:81:83:c0:86:f1:af:e4:
                    66:75:e7:05:6e:2a:67:f2:5d:ee:60:40:0c:08:01:
                    96:19:49:ce:8b:fb:57:a5:ca:14:4f:50:ad:79:48:
                    c6:39:4f:af:ae:8b:34:93:c1:ad:d0:40:59:34:eb:
                    d9:56:06:a5:db:9c:d4:65:c6:ce:6a:1a:8c:16:62:
                    71:bd:48:3b:db:eb:26:ce:8a:e1:02:fc:33:1c:0b:
                    aa:a1:cf:c2:7e:fc:8c:89:56:dd:80:05:8e:40:5a:
                    cc:17:9a:a4:42:98:71:70:9d:24:13:67:91:01:b4:
                    8a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:17:E6:BF:95:65:16:C0:67:B6:E8:2C:01:93:61:2B:5B:2F:3B:74
            X509v3 Authority Key Identifier:
                keyid:51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:00:45:00:18:2d:33:aa:b5:ee:c2:ec:46:8f:2a:f7:1f:18:
         db:66:d7:26:46:d6:63:5b:51:9f:ea:06:57:83:d0:83:7f:44:
         6e:56:f9:d5:ed:60:2e:1a:28:31:e3:25:b1:8d:52:87:0b:60:
         4e:0a:e3:00:b1:81:c3:68:36:33:d2:ba:4b:79:07:39:d3:08:
         a1:d9:eb:c9:9c:75:64:6c:7d:1f:f9:05:36:ba:3a:d2:d6:87:
         56:16:48:2d:92:26:ca:5a:16:e2:92:b3:9f:bc:0c:d8:62:5e:
         dd:56:18:28:55:da:0c:c8:70:61:6d:6f:e5:c1:c7:bd:2a:20:
         28:29:4b:ba:93:06:08:ec:66:61:0b:f4:05:44:9a:c4:15:27:
         0a:e7:65:92:e6:77:8a:8d:8b:e1:5e:23:60:a8:9b:c5:98:8e:
         62:69:69:88:e8:ef:ec:53:61:5d:5c:44:24:51:23:66:ce:b4:
         ba:4c:26:33:32:85:53:12:eb:7d:d4:f8:67:a1:ff:0d:32:05:
         4a:5b:60:4a:f2:c6:70:1b:fd:1a:83:c6:44:a7:62:bf:87:bb:
         a6:9f:78:98:63:7d:81:70:57:ea:9b:34:34:df:6a:e6:05:21:
         6a:d7:88:c1:be:56:de:b5:88:b8:74:a0:9d:73:39:6e:cf:70:
         1a:96:f2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:59:44 2026 by rpki-client