Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
File:                     AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft (raw, json)
Hash identifier:          /cRBrEupYhHG6iKVKP6KsmO+IWJWJ7ZtfckNDzPux0Y=
Subject key identifier:   D8:15:F9:AB:AC:9B:7B:32:52:EC:A1:08:71:62:47:92:78:FB:45:7B
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Certificate issuer:       /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial:       019E1D9061028A45B58B1B0C793037A28647
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
Manifest number:          16C4
Signing time:             Tue 12 May 2026 19:01:01 +0000
Manifest this update:     Tue 12 May 2026 19:01:01 +0000
Manifest next update:     Wed 13 May 2026 19:01:01 +0000
Files and hashes:         1: AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl (hash: RYlUPy6B+KLBq5bNaOnKWl4kzPbO8gR5Dv8/ghw+hBI=)
                          2: JZoFu5TMtgO6GAifQLMq6mNbzQk.roa (hash: NCchRFVvR+s9twFKa/UkTDiMQ9XBI45G1DwlByTQ0pE=)
                          3: aihBYA5xplYmWfW8AOuewemRnFY.roa (hash: wUPGbJwm1otYE0/5qPkx6y5JVuMAsf3lCIi1krAa/d8=)
                          4: gtbETOybprgnBnsdOcXReqiJdJg.roa (hash: MHBLEVDbm/5/3P4t1AJ9tw9OGawy0RxaBcMDfw8zw9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:61:02:8a:45:b5:8b:1b:0c:79:30:37:a2:86:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
        Validity
            Not Before: May 12 19:01:01 2026 GMT
            Not After : May 13 19:01:01 2026 GMT
        Subject: CN=d815f9abac9b7b3252eca1087162479278fb457b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:53:1d:13:89:f2:3a:ef:84:fa:99:55:4b:8c:
                    8e:7c:cb:f5:6e:b4:32:50:c7:fb:45:d2:ba:10:f9:
                    6a:20:f1:7d:ce:9d:b1:3d:3c:97:0e:23:f2:0b:9a:
                    5c:47:f0:8e:5b:0c:fe:7a:40:17:cd:83:bb:1c:2b:
                    ef:bd:ce:76:69:76:77:01:5d:21:e5:7c:83:94:48:
                    e1:f6:1e:0e:1b:e4:4f:70:9b:09:eb:ec:fd:d5:52:
                    1e:c7:b2:1c:b3:e5:ae:90:67:a4:34:df:ae:8d:c5:
                    a3:d2:51:d9:c1:f0:c5:76:ba:63:d1:9d:88:7a:b6:
                    8b:2e:4c:d0:4e:e4:08:c4:5b:0f:55:32:2c:01:64:
                    4e:4f:ad:f0:3a:94:43:7d:8a:4d:92:33:83:26:4c:
                    19:73:84:11:bd:f1:50:ef:27:53:a6:c5:60:5e:8f:
                    4a:d2:f2:e5:9c:1b:a9:fc:41:a0:0e:df:50:1f:49:
                    6e:f7:6e:5c:f2:a2:41:1c:91:79:2d:e5:b5:d3:46:
                    f4:84:f4:73:f5:61:1e:a3:24:ee:4e:c8:2d:bb:69:
                    94:a1:f9:0d:f7:0f:1c:66:7c:a5:7e:09:4f:11:39:
                    10:6f:44:01:7e:6d:38:9c:0d:41:be:86:c6:2a:4e:
                    29:b2:99:6a:51:89:56:cf:7a:c5:cd:6e:01:e3:52:
                    93:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:15:F9:AB:AC:9B:7B:32:52:EC:A1:08:71:62:47:92:78:FB:45:7B
            X509v3 Authority Key Identifier:
                keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:8b:9c:31:d9:88:87:81:d1:83:55:bf:c6:4d:e9:cb:48:fa:
         06:54:03:1a:f0:37:47:b1:4c:ce:b4:2c:42:d5:8a:59:be:01:
         34:b7:14:de:ea:84:22:fd:cf:2a:cf:5b:34:e9:4f:ee:cb:6a:
         34:ad:81:2c:7a:4e:21:60:eb:b3:61:2e:ba:8a:c5:d6:eb:27:
         ca:95:ae:08:b2:47:ff:6d:af:47:9b:f9:ad:7c:cb:d6:4c:e5:
         53:65:a3:19:7c:c8:0b:e9:fb:ba:5a:37:00:d4:3a:55:ee:f2:
         80:17:e3:a4:19:a5:36:8b:73:6f:73:6d:b5:53:13:4d:89:42:
         a4:2b:3a:d3:be:66:b5:76:75:10:38:7b:12:c0:e1:9f:d2:5f:
         f1:fc:a5:a7:c8:cd:ba:ce:2c:e6:53:34:62:d9:29:72:ea:d4:
         57:3c:46:0f:1f:b9:83:43:a6:fa:91:43:24:fe:2c:0a:d9:e3:
         b4:d2:43:67:0b:ad:cf:e4:63:e0:84:68:22:a8:25:7e:8c:ff:
         ff:e9:79:40:e0:67:f6:81:ce:ea:65:18:21:83:99:a4:62:fd:
         84:2d:69:a1:21:38:6e:c8:ab:a3:15:11:ce:7d:65:21:eb:a6:
         cd:3b:2d:a0:c8:53:91:bb:ab:2a:33:9d:77:69:3d:bd:a4:f2:
         d5:6e:0b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:17:09 2026 by rpki-client