Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
File:                     oYFk2ZYaFtLv93P1Angh6dK9N0A.mft (raw, json)
Hash identifier:          amFrgAn5gdLl4ostQy2R98fVUfPyfNrwEpiDRQ6Nmhk=
Subject key identifier:   72:08:22:21:4D:FB:77:8A:A1:A6:BB:6B:EF:FA:62:E7:31:46:18:9E
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Certificate issuer:       /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial:       019E1E35971C591769F09B4F0319E7445061
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
Manifest number:          0B20
Signing time:             Tue 12 May 2026 22:01:28 +0000
Manifest this update:     Tue 12 May 2026 22:01:28 +0000
Manifest next update:     Wed 13 May 2026 22:01:28 +0000
Files and hashes:         1: 8Xy3JsOZp8agZio6JEl9loRjlFY.asa (hash: TlktL9oV1UI2Vlhdx1LCfEJgVLcoU4hMjN/LcKxuLUg=)
                          2: GrPbowD1xhzEQt0mGonYCE0CqTQ.asa (hash: DOZHKT4cbMp9ZejcaCrBqRpFGvg17kAFTmcg90xNqwM=)
                          3: JgneK_9r9jqewyHTU3frpLLV8yA.roa (hash: ra7/yBkFOj8gUoEmJ8fdLAsPKrAM3h0I0ETAkQIG3EA=)
                          4: bpghwUTmmKl7QliDST1W5dViYJc.roa (hash: 4spP8UJYeO4cFPA8qwPfd8/MAEzw0jEK2c/OI9/edUY=)
                          5: oYFk2ZYaFtLv93P1Angh6dK9N0A.crl (hash: Oh2EndBflVjWh7MZJHiXi5CwrVth+kznp+0vudKEL8Y=)
                          6: vbW9HDnSvJmxsqC-cV5z-907X4o.roa (hash: RVRq1+9gitJwQNotHLkJdZpm6YORt32/tbHB/qnAsaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:97:1c:59:17:69:f0:9b:4f:03:19:e7:44:50:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
        Validity
            Not Before: May 12 22:01:28 2026 GMT
            Not After : May 13 22:01:28 2026 GMT
        Subject: CN=720822214dfb778aa1a6bb6beffa62e73146189e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:a5:f2:6a:f4:69:8b:2e:af:66:23:72:1c:
                    35:43:5f:66:40:fb:29:c3:99:5d:b9:42:c8:f7:7b:
                    ec:ac:09:a7:dc:3d:c2:15:76:e0:00:f3:67:7f:53:
                    a3:e0:70:c0:48:34:df:f4:e9:f7:2f:43:dc:2b:fb:
                    b8:4a:47:bb:68:b8:ef:9b:c3:32:c7:5f:54:5a:bd:
                    63:4c:94:7f:4b:e3:3a:71:2b:b8:83:6b:31:58:91:
                    27:f6:b6:23:1d:c3:0e:33:0e:03:5c:ec:85:c4:61:
                    bc:d1:57:36:27:56:b4:82:7d:07:58:42:2a:3f:53:
                    4c:de:76:bf:0e:0b:e6:37:a1:42:0a:d1:95:04:bb:
                    96:d3:a7:a6:68:46:54:4c:77:bc:3a:5c:fa:40:65:
                    86:54:7c:b0:a2:b1:b7:7d:04:7c:0e:b3:53:e5:70:
                    c3:eb:18:83:9e:9c:00:ff:24:b8:6d:31:a2:3f:e9:
                    fe:77:e6:be:99:e6:dd:95:54:0f:06:37:e8:f0:70:
                    e4:4e:f4:d2:ba:c0:99:e8:66:a3:4b:15:3b:8e:8f:
                    14:ea:e5:e2:9d:0a:c0:d6:08:73:ed:8b:d6:85:a3:
                    55:8f:50:53:2e:63:4a:8a:a1:d4:9c:89:9f:c9:5a:
                    3b:83:08:a9:88:ff:ec:17:e7:2e:9a:59:b6:b1:85:
                    f9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:08:22:21:4D:FB:77:8A:A1:A6:BB:6B:EF:FA:62:E7:31:46:18:9E
            X509v3 Authority Key Identifier:
                keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:32:ee:4b:72:df:73:0f:6e:bc:3b:3e:d9:9e:5e:16:ee:0b:
         94:63:3f:38:5e:66:cb:58:8b:e2:7b:d6:b9:88:5e:c2:e0:a2:
         1b:7b:50:15:c5:55:08:6c:cf:ed:b0:a9:e2:d9:63:d9:22:ef:
         c3:75:85:42:6c:cc:26:ce:6a:6d:b2:65:45:d4:75:6b:98:16:
         12:07:7b:c4:45:91:ac:46:c0:67:88:28:dc:92:c0:cc:26:07:
         0e:bf:18:56:fc:4e:77:6d:b0:5a:b5:22:e6:b5:d7:70:67:b4:
         22:4c:f5:57:f5:c2:c9:0d:e9:70:fa:77:80:9d:da:d4:b6:96:
         b2:4a:37:d7:0b:d7:cb:ab:a2:a5:81:85:01:ad:11:81:75:0a:
         61:12:d3:c3:2f:2f:2b:b7:ed:c1:d8:21:e9:9c:39:a7:01:5f:
         1d:a5:49:87:b1:79:19:53:4d:04:74:a9:3d:04:11:0e:57:af:
         44:2c:db:7d:e6:ce:44:c5:8b:0f:17:50:a3:fe:be:4e:ad:0e:
         24:37:40:7f:eb:67:3a:62:dd:50:61:42:46:21:7f:c1:a2:d5:
         a8:7b:f1:39:3b:0b:59:12:cc:96:51:da:aa:60:3d:10:2b:e7:
         35:88:86:8b:9e:1c:14:cb:cc:6b:ad:86:a9:9c:d7:f9:d0:65:
         0b:2e:2b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:23:13 2026 by rpki-client