Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
File:                     AsSROCOjGf66InDhuiygnkNb1Vs.mft (raw, json)
Hash identifier:          UnY040iofCJv3ATlHvNSX7c3tLF+HRbCuhak9NNRhFA=
Subject key identifier:   0B:32:CA:FC:C1:9A:FB:1C:9F:59:F1:81:71:60:3E:80:9F:57:3D:2E
Authority key identifier: 02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B
Certificate issuer:       /CN=02c4913823a319feba2270e1ba2ca09e435bd55b
Certificate serial:       019E1D230B47ABCF94C153D76A2E612F5CD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
Manifest number:          15BC
Signing time:             Tue 12 May 2026 17:01:36 +0000
Manifest this update:     Tue 12 May 2026 17:01:36 +0000
Manifest next update:     Wed 13 May 2026 17:01:36 +0000
Files and hashes:         1: 78GH541y_GC91MG56lJ3e17d5jY.roa (hash: i45PmY0T64j48BiGwibORCNORjlWsT5N8M4MLmyvoJs=)
                          2: AsSROCOjGf66InDhuiygnkNb1Vs.crl (hash: JcjtDAR8QjW/I+U3DWFTyPQapTQs54t7tmlX01fXFYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:23:0b:47:ab:cf:94:c1:53:d7:6a:2e:61:2f:5c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c4913823a319feba2270e1ba2ca09e435bd55b
        Validity
            Not Before: May 12 17:01:36 2026 GMT
            Not After : May 13 17:01:36 2026 GMT
        Subject: CN=0b32cafcc19afb1c9f59f18171603e809f573d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:97:a8:c0:9c:3b:8a:70:42:71:7a:a6:a6:85:
                    56:2f:17:ed:01:ca:c6:f3:18:08:22:64:3c:8a:1b:
                    30:42:a2:83:ed:f0:dc:ec:48:04:dd:21:cc:c4:6b:
                    bc:5e:ea:40:40:ff:4f:c7:d1:a1:89:47:dd:e8:b0:
                    b1:9e:7c:0d:b5:99:96:42:8e:01:55:00:26:94:58:
                    c6:40:d4:4b:dc:36:a5:99:9f:0b:0f:4e:b7:3a:4e:
                    c2:40:ad:d7:3f:0a:f6:9f:dd:be:ec:88:95:ad:9d:
                    0f:9b:3b:31:bb:ba:f7:ce:77:45:b5:20:70:0a:35:
                    e5:3f:4c:bc:8c:85:74:f8:0c:82:0d:02:3f:45:a3:
                    1b:25:21:31:90:26:4c:32:44:26:8c:27:99:f6:a3:
                    0f:c6:a1:cb:7d:96:63:60:ec:a5:fe:97:28:13:f6:
                    81:29:e2:63:71:cd:14:49:b7:18:a3:47:1d:18:a6:
                    aa:50:f1:4d:08:c3:8b:8c:0a:aa:b6:33:90:ad:73:
                    52:98:ee:8d:6c:d1:ef:74:b6:29:47:12:16:23:7c:
                    09:11:c2:df:14:cb:bf:79:cb:08:a9:31:a7:dc:48:
                    61:09:99:1d:6a:0e:b7:e9:34:8f:61:f4:5c:86:65:
                    1c:10:7a:9c:ef:86:6c:17:7c:b9:09:01:3a:32:55:
                    71:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:32:CA:FC:C1:9A:FB:1C:9F:59:F1:81:71:60:3E:80:9F:57:3D:2E
            X509v3 Authority Key Identifier:
                keyid:02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a5:cf:2b:67:38:27:77:e1:0d:6b:dd:2b:ad:35:93:a4:89:
         fd:53:8c:ca:4e:88:70:67:f9:76:32:f0:3f:36:ec:33:f4:a9:
         07:64:fc:eb:a7:11:0c:3f:31:3f:f1:20:19:bf:ee:74:6c:56:
         74:e3:5b:1d:86:2f:f3:fb:da:84:44:56:bd:20:ea:fe:66:b1:
         5e:aa:b4:13:f5:67:52:4d:8e:6b:36:2c:b9:aa:ec:2f:ea:20:
         84:9a:a9:e8:de:a1:ce:29:bf:ba:ec:3a:47:80:2e:78:60:41:
         c6:8b:01:5b:72:85:6a:f0:05:9b:88:cc:89:d7:93:33:7b:83:
         a3:a4:c7:b8:15:37:f9:9e:8d:b7:07:5e:fa:cd:30:e1:db:18:
         33:83:12:2f:98:7a:17:78:82:a0:9f:80:ea:ce:91:de:24:27:
         97:86:9b:e0:26:f2:6d:e2:d1:70:0d:4a:2b:a7:26:41:7e:70:
         70:da:6a:a7:05:b3:5b:c4:07:4a:8e:65:be:84:d1:7a:f6:32:
         63:e8:37:81:8d:df:c5:3b:ac:47:4b:f4:80:78:6b:d0:f1:34:
         39:05:22:27:c1:a0:97:80:e6:17:88:52:d9:75:51:40:2e:d7:
         00:bc:84:3a:c9:47:4a:18:3d:e0:d9:cf:2a:be:30:cf:24:4f:
         41:58:cd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:30 2026 by rpki-client