Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
File:                     C0ojfRF9934LiqUS9vJfsgf5orE.mft (raw, json)
Hash identifier:          dhRtnbFeISR0C373fYojPrCKG7YoC7stE9kAJcfd3qk=
Subject key identifier:   F5:C3:87:95:51:85:6C:A9:2A:C8:8B:5D:7A:8E:93:21:88:29:B5:40
Authority key identifier: 0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
Certificate issuer:       /CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Certificate serial:       019E1D909EEA8948118A358853D8D10F9E5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
Manifest number:          14A1
Signing time:             Tue 12 May 2026 19:01:17 +0000
Manifest this update:     Tue 12 May 2026 19:01:17 +0000
Manifest next update:     Wed 13 May 2026 19:01:17 +0000
Files and hashes:         1: C0ojfRF9934LiqUS9vJfsgf5orE.crl (hash: U8QREfR/e/CTyNOhSKnW6WC6/WPRyhaho4/FVjYKRog=)
                          2: sV7_z3SZk6LqLitV-wqEx_InYyY.roa (hash: uJQknWD1q4gFVKPsqZnSjyh2z6Bj3wZE5RXoYc2FcBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:9e:ea:89:48:11:8a:35:88:53:d8:d1:0f:9e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
        Validity
            Not Before: May 12 19:01:17 2026 GMT
            Not After : May 13 19:01:17 2026 GMT
        Subject: CN=f5c3879551856ca92ac88b5d7a8e93218829b540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:67:9f:c1:af:5f:53:2b:66:f3:b8:ec:5a:ba:
                    1d:03:95:54:ce:a4:60:52:06:50:48:85:07:f8:c8:
                    3a:82:d9:f5:22:dd:7d:a9:a7:53:65:24:27:24:93:
                    b7:b5:b2:2e:20:dc:1d:8a:fc:d7:c9:8b:a1:e4:c7:
                    e6:2c:17:5b:5b:4d:9f:93:2a:65:02:ae:ed:0e:f2:
                    b5:80:62:43:7f:30:83:41:53:3f:85:2f:16:28:f4:
                    c0:55:08:dc:3d:60:fb:ba:69:92:b1:ef:87:30:89:
                    f2:dc:e6:6e:b2:0a:bb:7f:91:0c:86:4b:b8:7d:f1:
                    c4:5a:23:3e:b9:00:86:2c:05:4c:c3:24:53:06:e0:
                    ca:5d:11:72:0e:71:c7:f3:0e:2f:27:56:40:01:b5:
                    3c:75:c9:ad:54:93:aa:65:45:6a:20:7f:1f:bf:19:
                    5f:d0:6e:52:02:47:8c:5b:3c:c5:ff:69:35:6c:57:
                    b6:b3:9a:89:e8:b0:fc:a6:3a:42:dc:91:ce:e3:6a:
                    d2:c7:ee:10:46:5e:97:06:5e:11:3f:c9:45:75:22:
                    b9:b3:8f:02:b6:bb:09:e7:ac:cc:e4:36:ee:8f:ff:
                    2b:76:37:1e:d1:ee:6b:cd:a3:5e:36:e1:0f:02:06:
                    83:f7:2a:c4:a8:b5:fb:cb:4c:20:80:ea:ec:9b:83:
                    27:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C3:87:95:51:85:6C:A9:2A:C8:8B:5D:7A:8E:93:21:88:29:B5:40
            X509v3 Authority Key Identifier:
                keyid:0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:dc:23:15:ee:61:78:e8:07:2b:5f:e2:d5:b0:1e:34:64:36:
         03:22:4c:f7:1f:5b:ac:0c:76:a6:a9:70:a3:ff:5f:4f:ac:c8:
         59:c3:7c:97:7b:ba:0b:2c:0e:a0:64:65:30:7f:70:26:20:3a:
         31:4c:33:bd:65:e3:cf:fb:96:2f:ea:24:80:af:bd:2a:fa:ed:
         07:60:b7:70:aa:18:fb:b6:7d:ef:7e:c4:05:d3:fe:3e:16:3b:
         8a:d5:92:40:f3:c4:0e:b4:a5:81:bc:e7:15:54:b3:ba:ff:c6:
         81:f2:ab:53:4f:5c:ef:e9:d1:15:ec:bc:03:2a:b5:cb:13:4b:
         d9:30:51:c6:15:59:3f:f1:cd:4b:1a:86:d4:86:1c:ce:10:5a:
         3f:f9:b4:cf:f6:ac:bb:84:23:f0:5b:03:cf:0d:00:db:42:bb:
         4b:7c:d6:ea:9e:1d:fe:8b:6b:6d:26:d4:b6:29:fb:58:b4:3d:
         a4:eb:43:97:cc:aa:27:a7:9f:e1:57:dc:b1:e1:e3:62:b9:ec:
         4c:0d:d6:3b:92:59:6d:56:75:74:6a:55:7e:4b:6f:32:b1:5a:
         01:39:d1:cf:fb:f5:16:89:e4:e2:ea:f7:41:95:ff:c7:be:01:
         67:70:06:83:c8:4b:c6:aa:31:19:97:93:9b:79:e8:68:2f:37:
         1d:07:59:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:35:56 2026 by rpki-client