Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
File:                     o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft (raw, json)
Hash identifier:          QMhlyUqH0rzLZ6g+0nTp18SyNo3NQhyv9pscS6nd3Xk=
Subject key identifier:   86:63:82:53:8F:32:60:77:12:09:38:B4:C7:C0:0F:55:F1:DA:7E:6E
Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
Certificate issuer:       /CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Certificate serial:       019E1FB5AF1C72F34F6F81457C07172B28BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
Manifest number:          1407
Signing time:             Wed 13 May 2026 05:01:00 +0000
Manifest this update:     Wed 13 May 2026 05:01:00 +0000
Manifest next update:     Thu 14 May 2026 05:01:00 +0000
Files and hashes:         1: TzZ8DBm3Hp04BY0B397tAwAsJ1A.roa (hash: 8hOHuxX3j27ZIrYwIouhG6F7KAUYojmRWpf6OzaimAU=)
                          2: o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl (hash: Hny1VD+lXxTy1Mbhr1xICHyaW19Zek8hxrn11FDwJzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:af:1c:72:f3:4f:6f:81:45:7c:07:17:2b:28:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675
        Validity
            Not Before: May 13 05:01:00 2026 GMT
            Not After : May 14 05:01:00 2026 GMT
        Subject: CN=866382538f326077120938b4c7c00f55f1da7e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:50:28:29:98:3a:b0:48:9a:1f:70:e1:ac:31:
                    2c:1e:f9:2f:a4:dc:cc:e9:db:e2:c7:40:22:47:33:
                    10:0e:8e:b0:f0:88:b2:f0:5c:22:66:a8:b6:a4:31:
                    ac:4b:b9:34:ac:08:b2:09:87:16:cc:ba:09:ef:17:
                    0f:1d:6b:30:b3:0d:5a:81:d1:50:46:de:cb:fc:83:
                    fd:d1:9e:9a:e5:bf:11:d4:52:d1:ae:83:8b:b3:22:
                    c6:be:d4:a3:d9:30:0b:84:fd:6a:76:9c:b9:0c:fa:
                    0b:e5:06:db:a7:92:5a:eb:cd:54:5e:4b:40:c2:f1:
                    b4:ed:87:97:3e:c7:27:7c:4e:95:9d:05:22:e3:a5:
                    d1:6f:69:54:90:b0:d9:bc:b1:b5:fd:bf:a8:1a:d5:
                    0b:eb:57:29:b0:06:4b:ba:9e:08:63:32:f1:c6:0e:
                    90:c1:ba:79:05:d2:bb:ed:54:05:ba:f8:86:c1:cc:
                    e9:cf:a2:9c:00:c1:2f:d4:72:ea:72:d3:2c:8a:11:
                    af:2e:36:f4:44:95:b2:26:3a:10:23:1c:12:1a:cd:
                    74:d8:c5:22:5b:6a:9b:46:01:29:a6:5c:bd:24:b1:
                    6f:57:8a:dd:6f:6b:b1:1f:1d:ce:52:88:5d:15:f0:
                    93:be:09:4a:d2:37:e4:ec:a5:e7:5a:e0:c5:c3:20:
                    26:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:63:82:53:8F:32:60:77:12:09:38:B4:C7:C0:0F:55:F1:DA:7E:6E
            X509v3 Authority Key Identifier:
                keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:1f:9b:83:d3:7e:c2:8d:0d:04:2b:44:18:a5:ed:9f:1e:e0:
         6b:a9:cb:aa:fc:76:31:b5:cc:89:96:60:bb:0f:d3:a0:a0:8f:
         19:9f:75:3b:fb:5d:2e:18:94:00:3c:91:22:d4:94:6c:14:89:
         ec:82:19:49:0c:d2:96:cd:85:dd:9e:c5:20:c0:e8:0a:d7:b9:
         96:a0:f3:26:f6:9e:e1:19:bf:55:9a:a4:5e:fd:43:05:7c:70:
         89:3c:e2:49:40:9d:7a:8f:87:13:76:03:9d:be:d7:c1:87:7c:
         ba:43:15:5f:af:3d:ac:47:33:ac:9c:19:ea:43:64:b2:84:26:
         00:4f:17:70:62:f5:37:a4:a8:64:35:32:92:ce:5b:3b:d5:9b:
         55:6d:07:fc:60:08:99:38:a8:14:36:5b:4c:18:ab:78:69:8f:
         c5:25:10:40:68:3e:41:71:29:62:0f:06:54:48:9a:68:7e:fb:
         3a:bc:9a:0e:53:2b:4f:2f:71:57:27:6e:f7:fa:62:ca:23:b3:
         74:a2:d5:87:b1:f8:fb:97:e2:e6:85:0c:62:d6:12:b4:a2:88:
         06:74:e4:0b:4a:48:5b:09:3c:b0:e3:ce:7b:ff:a5:6d:36:17:
         83:10:38:a5:38:ac:ed:4f:cb:56:46:25:30:f3:32:ec:f2:9f:
         ac:46:84:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:14:34 2026 by rpki-client