Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
File:                     OEypWHqC_DdH9GngCUXZ1VhaNbI.mft (raw, json)
Hash identifier:          owVyFtQ5BVw4Ix6erUqhMRqCX2AFNC1YfxND91HB4Y4=
Subject key identifier:   31:EB:FD:B8:0E:8A:57:45:B7:C9:CF:CD:B2:74:BE:AB:E3:6E:1F:1D
Authority key identifier: 38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
Certificate issuer:       /CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Certificate serial:       019D265EE9CC75564E59877A21F3CF4130A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
Manifest number:          04C3
Signing time:             Wed 25 Mar 2026 19:00:47 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:47 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:47 +0000
Files and hashes:         1: OEypWHqC_DdH9GngCUXZ1VhaNbI.crl (hash: Dloafegxb1eq5ztYBXSywUzJLEUYOQxGV43gZr75sbQ=)
                          2: m5e2ZDv7_-1udsvxigJbqqXmd_E.roa (hash: yOpoP5KeMEFEDYD+ejQW8hpR1s0gtVHvkYr8rcVTFC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5e:e9:cc:75:56:4e:59:87:7a:21:f3:cf:41:30:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=384ca9587a82fc3747f469e00945d9d5585a35b2
        Validity
            Not Before: Mar 25 19:00:47 2026 GMT
            Not After : Mar 26 19:00:47 2026 GMT
        Subject: CN=31ebfdb80e8a5745b7c9cfcdb274beabe36e1f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5a:0d:e2:61:a8:36:32:63:fe:ee:f8:94:01:
                    e4:04:2c:62:e4:a2:14:6a:da:e6:df:ca:98:21:83:
                    d8:ae:f5:ba:45:ff:be:ce:38:e6:50:7e:21:5c:5e:
                    ca:f2:bd:8d:ca:9f:e5:c3:4e:f8:97:9b:eb:52:4c:
                    10:7c:e2:17:81:91:0d:85:0a:50:db:1f:09:36:4b:
                    e1:0b:03:ff:0c:1c:ca:bc:69:78:36:a0:8a:db:67:
                    2d:df:6c:65:23:a7:54:99:d0:a3:f4:a0:1c:a1:c4:
                    0c:e6:d0:d0:b4:29:02:67:69:d6:25:b1:41:c1:c9:
                    15:21:f0:c6:d0:b7:0f:da:6a:ef:4e:d5:13:87:a2:
                    be:a4:73:12:73:c4:13:df:cf:3b:8b:94:8b:e5:6a:
                    11:83:e5:f1:af:ee:35:5d:28:a8:e7:cb:a6:b1:32:
                    1b:29:93:44:02:bb:43:d4:f5:93:26:fe:8e:b5:cd:
                    9e:74:e3:2c:1f:97:89:17:eb:a5:59:62:0e:75:d1:
                    c0:5a:c7:77:12:a9:5d:52:6a:69:cc:3b:b2:a4:dc:
                    e6:17:f5:cd:f3:a0:a0:c6:22:66:9c:05:3b:95:00:
                    2d:a5:71:af:40:48:83:6c:17:29:93:af:73:cc:5d:
                    ec:88:29:b5:28:2d:19:a6:f5:66:83:7a:64:78:01:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EB:FD:B8:0E:8A:57:45:B7:C9:CF:CD:B2:74:BE:AB:E3:6E:1F:1D
            X509v3 Authority Key Identifier:
                keyid:38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:eb:66:5a:b5:ba:e1:b5:c8:ea:bf:47:55:36:fe:ca:da:3d:
         79:26:16:cf:82:f8:ab:fd:6f:a4:f3:d7:6f:4e:69:39:bc:03:
         33:09:25:67:07:fa:21:69:0f:2c:49:b8:14:7a:53:7a:af:9e:
         c8:8f:cc:34:af:de:16:6e:96:ac:5d:f5:38:02:1d:73:e8:d4:
         a8:01:20:51:93:8f:35:84:33:22:d0:76:45:ca:a9:2f:de:62:
         b0:16:86:63:61:54:2e:14:f0:1f:92:a5:5c:19:43:c0:bf:e7:
         4e:6c:23:ce:2b:17:55:d7:db:7b:02:00:aa:da:7c:2a:f3:9b:
         ed:a1:37:cd:41:4a:9f:99:2d:f7:9f:64:33:d3:29:e8:84:05:
         55:65:d9:d4:86:01:3f:7a:9d:af:a0:27:8e:77:10:91:51:9b:
         ec:9c:e4:ad:c7:e8:c3:56:a3:22:53:3c:95:1e:0e:67:3a:bb:
         0b:e9:92:6c:a6:c6:66:5a:95:59:82:77:00:89:b8:dd:d3:80:
         13:30:9b:a6:43:5f:d9:66:af:78:c4:be:a4:26:f2:c3:ff:44:
         be:6a:4b:59:d6:c5:7a:e0:95:4b:fc:ee:96:be:41:02:74:e9:
         1f:c3:a7:04:6d:2a:6b:99:e9:80:2e:f3:6e:ea:ec:a1:6e:ee:
         36:ca:5d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:31 2026 by rpki-client