Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
File:                     odAxU3OwmwYapZ8SnVkuq_ezqu8.mft (raw, json)
Hash identifier:          3i3Da7krN85v9SfQZRehXZgwAFWNUQirEkWX6W96870=
Subject key identifier:   3E:23:35:51:45:9B:28:77:D6:04:E5:5D:21:40:D9:18:1B:AF:E8:6E
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Certificate issuer:       /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial:       019E2091E94D3E4FE1D54B3B27E2DABCBEDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
Manifest number:          1918
Signing time:             Wed 13 May 2026 09:01:33 +0000
Manifest this update:     Wed 13 May 2026 09:01:33 +0000
Manifest next update:     Thu 14 May 2026 09:01:33 +0000
Files and hashes:         1: 2RbqMRULp-QNoJeRuz3DuXb82SY.roa (hash: vkQ1ietSun4egH0TCTbvv8l/0HXrnZiF/HLYLQxFwJA=)
                          2: IQ2oYAGI7FrbtQw-njklceThbc4.roa (hash: 1eifSLs21UBJXwatNLGZliT9NqFPGyep7LbzCHQLsqw=)
                          3: SVczDT9Xfgd978coimjrauYBi54.roa (hash: 2NMvhKAO0Kl3ePDaF0jcCfpcJYKyAuppoiBwwyO6Eiw=)
                          4: odAxU3OwmwYapZ8SnVkuq_ezqu8.crl (hash: 4nQUiDW+jk6ex29udVOQbdYB7XoJXd5dwxhpFBWm6nU=)
                          5: shiZOYC90xd1VuoCTl7MNpPZEuA.roa (hash: imVXTSeIhO/2/5DnYBR7yK1z3YTxchN3faFGSGjnVFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:e9:4d:3e:4f:e1:d5:4b:3b:27:e2:da:bc:be:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
        Validity
            Not Before: May 13 09:01:33 2026 GMT
            Not After : May 14 09:01:33 2026 GMT
        Subject: CN=3e233551459b2877d604e55d2140d9181bafe86e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:1e:15:de:cf:93:a6:9a:4f:73:e6:fa:3a:
                    e6:90:63:42:2c:42:50:a9:eb:53:44:8e:65:a4:e7:
                    76:f5:1c:45:fa:1c:86:b9:1c:db:fa:d7:d3:6b:4c:
                    84:22:d2:5c:5c:29:53:71:3e:7a:bf:69:55:e6:51:
                    5f:fe:70:29:46:50:44:58:06:a5:3a:9a:96:fa:e8:
                    4e:0c:d0:67:8b:42:b2:16:17:c5:f9:ef:f7:c8:49:
                    17:a6:5f:31:5f:70:88:99:6c:b8:6d:23:06:d9:84:
                    38:40:ed:1b:85:86:69:ff:01:0f:f1:4b:4b:bc:54:
                    5a:f2:b0:b9:61:72:39:36:b7:f2:f2:96:b5:b4:92:
                    28:76:01:e3:ef:18:0e:1c:f9:a9:64:6b:03:34:0d:
                    d7:89:c0:58:d3:e2:cd:1d:a8:d1:5f:81:da:42:88:
                    09:c9:f9:57:9b:1e:2c:31:16:b8:05:9d:8e:3a:0b:
                    88:9a:22:15:3d:d6:6b:8b:d3:95:0e:d5:e3:64:68:
                    3e:e8:d4:26:48:8d:08:de:a4:23:c9:4e:76:1b:1b:
                    73:d8:64:13:fb:7b:fa:0e:e5:13:71:d9:c1:9f:91:
                    7d:8c:4b:ae:fd:10:bb:dc:a3:26:19:df:42:e2:39:
                    00:65:22:e2:65:a4:4b:5e:84:67:3a:59:f5:ce:33:
                    37:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:23:35:51:45:9B:28:77:D6:04:E5:5D:21:40:D9:18:1B:AF:E8:6E
            X509v3 Authority Key Identifier:
                keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ed:24:1d:9d:b5:f1:d9:e5:f2:76:30:ad:14:24:a2:e8:65:
         f5:67:7d:ed:d5:80:8d:ea:f3:f2:e9:f4:75:9b:8b:40:63:f2:
         0c:42:93:cd:b9:04:1f:0c:9c:55:0a:f0:3b:90:fc:c1:4e:e3:
         15:be:de:d1:77:ea:20:12:0b:2d:07:49:be:2c:88:42:0b:bb:
         27:21:44:ee:75:f9:a3:0c:cf:f6:0d:91:97:ba:be:4a:e4:0f:
         73:9a:13:f3:62:4b:08:20:ab:df:8c:bc:d1:61:2b:fe:68:db:
         3d:3d:62:16:52:47:0d:5b:d4:af:56:6c:a2:a4:97:67:a0:97:
         1a:76:90:db:8d:43:a3:7a:09:2a:2f:a1:74:38:a9:d4:c8:a6:
         5f:70:83:bc:f5:8f:0c:d6:62:16:36:a7:8a:c6:49:19:6f:6c:
         48:f3:b3:c0:19:15:3d:d2:40:1d:51:ca:af:30:d1:46:88:25:
         d9:b3:99:4e:7a:3d:41:56:ce:e2:5c:7a:03:02:00:49:64:24:
         d2:d7:de:85:11:fb:ec:e2:25:ae:3d:ce:2d:3c:6f:23:0d:e2:
         8c:e1:2c:39:14:7f:03:06:b0:00:d4:99:ba:28:81:ff:6a:85:
         05:fb:10:24:2d:be:2e:e5:be:f7:93:32:f2:82:f5:c1:c1:d2:
         2a:a8:9c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:04:04 2026 by rpki-client