Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File:                     o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier:          12Tz7YHorlZeLiR0w39BJZ9bzDKjwZ51bH70IN1Jrww=
Subject key identifier:   4C:66:7D:5A:C7:63:4D:28:77:C2:73:CA:03:A7:BE:95:96:0B:B5:20
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer:       /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial:       019E1FB5740D2A8452FE72F41AB9A789731B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number:          154B
Signing time:             Wed 13 May 2026 05:00:45 +0000
Manifest this update:     Wed 13 May 2026 05:00:45 +0000
Manifest next update:     Thu 14 May 2026 05:00:45 +0000
Files and hashes:         1: nq8_lKkxUGSnEnuUf5aIJh8XOp8.roa (hash: 4zAGZ6DVsgtkjmO+59u3bkrnGCMoQnzivE/ro2iUVRA=)
                          2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: pDGQbafNn1pALijYl9xmIpISujTGTBksoc+DSh6vwjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:74:0d:2a:84:52:fe:72:f4:1a:b9:a7:89:73:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
        Validity
            Not Before: May 13 05:00:45 2026 GMT
            Not After : May 14 05:00:45 2026 GMT
        Subject: CN=4c667d5ac7634d2877c273ca03a7be95960bb520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:80:7d:06:ad:58:02:8d:2a:2c:37:1c:5b:fc:
                    4f:24:d9:29:fc:7e:ee:e8:3d:21:ce:91:70:07:e8:
                    52:b4:d6:f1:9e:95:65:58:02:1c:61:db:8d:a9:f7:
                    0f:21:b1:85:cc:9c:be:b4:4c:52:07:14:2c:4e:53:
                    bf:88:7d:16:54:1e:8d:ba:28:76:95:48:b6:94:98:
                    39:3f:2f:66:29:91:37:d9:16:bd:bd:4f:a4:8f:be:
                    74:5e:a3:a0:64:1b:c4:ee:c1:9b:3d:a4:52:1a:e7:
                    58:aa:2e:f9:3f:72:e0:b8:4e:b2:3f:7b:03:56:30:
                    54:74:7f:5b:42:8f:9d:00:24:b7:40:5b:fc:ec:f6:
                    be:37:62:d7:43:21:32:ba:9d:25:e6:aa:45:c9:a5:
                    3e:01:c8:31:df:1d:81:96:af:bb:7c:05:97:87:99:
                    d2:89:87:ba:41:55:a1:21:df:e5:c3:e5:d0:99:05:
                    2a:8d:df:19:dd:32:35:8e:f9:95:86:c8:c2:19:b6:
                    88:97:d7:c0:42:df:3e:ad:12:d0:ca:ba:07:f4:b5:
                    f2:6b:47:68:d6:88:94:7f:6a:65:d4:59:4b:1a:ec:
                    d7:c4:6f:e9:60:bf:b1:f3:cb:e5:9b:36:37:e7:0a:
                    93:ea:a8:c8:2f:f2:41:5c:c0:35:99:0f:f8:c9:de:
                    f5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:66:7D:5A:C7:63:4D:28:77:C2:73:CA:03:A7:BE:95:96:0B:B5:20
            X509v3 Authority Key Identifier:
                keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e0:6b:9d:9e:26:fc:1c:19:09:df:3d:8d:5c:56:72:ee:12:
         2b:1b:65:8d:9d:2d:cd:04:9f:7f:de:6f:4b:e9:70:99:e8:89:
         ab:13:8d:7f:a3:c5:e6:d1:52:2b:92:ff:06:80:1f:d2:89:b2:
         a4:f4:b8:17:57:25:a9:70:83:18:5c:5b:18:09:db:d6:36:7c:
         b0:f7:6d:96:2f:f7:70:65:98:7f:de:39:3c:a7:8f:f2:be:84:
         63:e4:84:31:c0:36:8d:3a:3a:97:03:02:db:34:a3:95:bf:4f:
         86:0f:d5:92:43:c3:bd:30:4a:33:04:18:83:6d:27:1c:07:04:
         f5:b3:26:44:f9:88:fa:89:2e:3f:dc:32:be:50:1d:a3:e0:d2:
         c2:90:42:7d:b8:27:f4:5f:4c:6c:e0:47:b3:1f:84:c4:19:9e:
         3b:84:97:1c:da:1d:e5:06:9e:b0:57:5f:0d:5a:39:d5:8c:47:
         cc:96:b1:cd:43:d5:fc:42:e1:5b:fc:06:0b:5e:27:e7:20:b8:
         37:41:12:af:be:23:60:f3:b4:28:d5:27:86:4b:f2:4b:42:65:
         f6:cf:10:a2:cc:0e:fb:d9:75:4c:0b:c2:29:20:6b:67:d0:de:
         f7:c5:e7:c5:3e:ac:1b:db:ba:da:ea:8e:13:cb:ed:6f:dc:68:
         44:f1:cd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:05:17 2026 by rpki-client