Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
File:                     oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft (raw, json)
Hash identifier:          1jOWFA5SloAvqgjD/vFGQ3ex2i6QatYYQagXSDVWyRA=
Subject key identifier:   F1:78:FB:A6:2D:E7:AB:7D:63:9C:AA:AD:C3:E2:28:1B:80:22:EC:24
Authority key identifier: A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
Certificate issuer:       /CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Certificate serial:       019E1D911FF2FC456A5FF7B843E3E5113DA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
Manifest number:          0AD9
Signing time:             Tue 12 May 2026 19:01:50 +0000
Manifest this update:     Tue 12 May 2026 19:01:50 +0000
Manifest next update:     Wed 13 May 2026 19:01:50 +0000
Files and hashes:         1: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl (hash: wq+GG73t2fsye/6Fk/s1peJu+i0ONswMcaK1ts2XNsg=)
                          2: rTTUeShcOXNB_38gPBfANBYb9Rg.roa (hash: SNHTIMM1yFWrTxfEjv177J1xrcwVvQjJHLgNi04rw5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:1f:f2:fc:45:6a:5f:f7:b8:43:e3:e5:11:3d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
        Validity
            Not Before: May 12 19:01:50 2026 GMT
            Not After : May 13 19:01:50 2026 GMT
        Subject: CN=f178fba62de7ab7d639caaadc3e2281b8022ec24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:6a:81:ac:16:cc:a9:8d:42:7a:11:8a:ce:76:
                    03:15:f0:9e:01:ed:88:41:cc:47:12:cd:ff:18:f2:
                    23:38:69:41:14:4e:4a:15:22:31:5c:35:15:7b:1b:
                    29:d5:b8:a9:0c:7b:86:80:69:dc:16:73:a5:01:db:
                    c8:d2:14:3d:f0:ef:f1:5a:42:64:90:e5:cf:a9:77:
                    06:be:8c:b1:6f:2b:56:02:2b:4e:19:65:70:03:28:
                    f5:99:6f:db:af:5e:ae:a9:4a:35:17:4d:ef:fa:bb:
                    22:54:e5:ec:94:6a:6c:d2:de:b3:e8:44:09:e9:f7:
                    1b:ef:cc:13:6e:4b:ec:d6:3c:1e:fa:6f:51:ad:ea:
                    25:c7:28:d9:5b:3d:72:2f:47:3d:7b:75:0f:14:76:
                    d6:ad:5a:88:b6:3f:ae:fd:e2:c0:0c:d1:06:36:32:
                    a9:0d:b6:49:16:5c:4d:e5:36:26:f4:2c:0e:49:a7:
                    56:66:d9:86:da:96:3b:49:67:1b:52:b6:4b:3f:10:
                    d5:a4:0c:d9:39:8c:34:1f:6f:5f:a0:79:e8:da:c4:
                    15:31:3a:2f:3e:10:6c:47:91:74:bd:f1:55:2e:d9:
                    a4:95:55:fd:13:36:b6:38:b7:45:8f:7c:83:75:80:
                    54:76:38:11:8c:ae:0c:7f:4c:75:4a:a3:26:3a:19:
                    79:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:78:FB:A6:2D:E7:AB:7D:63:9C:AA:AD:C3:E2:28:1B:80:22:EC:24
            X509v3 Authority Key Identifier:
                keyid:A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:04:3f:c8:de:f4:f8:78:b1:bd:ab:c2:16:8b:df:63:e6:48:
         f9:03:18:f2:7a:79:a3:27:01:99:68:b0:4d:ba:15:e5:de:74:
         41:5b:e1:6a:cc:6d:b6:e3:76:f5:9d:54:15:ca:1e:4c:75:30:
         79:a5:ad:70:95:ea:cc:7f:30:fd:19:b2:4f:0f:4e:df:7d:a5:
         3c:7d:8a:9d:2e:8d:2d:35:7c:ec:2a:ff:cd:dc:35:0e:5f:15:
         57:23:2e:e6:50:49:10:e1:fe:c3:bc:53:de:61:4b:c6:45:9f:
         21:07:da:aa:c7:58:b6:4c:50:bc:63:be:6e:2f:3f:f3:e4:c9:
         4c:d5:59:fc:e9:52:20:12:3a:7a:04:dc:03:31:7f:40:95:e4:
         6a:d6:31:ef:bc:9e:d6:b7:c0:e3:8b:fb:60:75:5b:ea:ed:f9:
         76:79:00:aa:8f:47:d4:82:db:25:59:63:d1:4a:23:43:8a:54:
         28:76:7b:9d:e4:fe:9e:7b:af:36:e6:d3:d6:89:53:d1:49:e2:
         46:b5:18:a4:0a:84:38:ad:cb:6b:1b:80:e5:92:b1:cb:eb:7e:
         75:86:2e:71:27:1e:87:3e:df:fb:aa:86:26:a8:b4:62:5d:b4:
         cd:ee:c9:8f:ce:a3:ce:9f:0d:10:96:8e:fa:55:4a:12:4a:3d:
         0c:66:8e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:39 2026 by rpki-client