Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
File:                     oYFk2ZYaFtLv93P1Angh6dK9N0A.mft (raw, json)
Hash identifier:          d5C0D4Elz0n4NhOU56GjOntjE53Yf81DrZBKEvg8G7A=
Subject key identifier:   9B:C6:5A:2A:B2:A4:58:7A:4B:08:10:EF:7A:BE:91:5E:5D:ED:B1:16
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Certificate issuer:       /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial:       019D265F7988BE2ACFFCCD5029DD76BD840D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
Manifest number:          0A9B
Signing time:             Wed 25 Mar 2026 19:01:24 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:24 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:24 +0000
Files and hashes:         1: 8Xy3JsOZp8agZio6JEl9loRjlFY.asa (hash: TlktL9oV1UI2Vlhdx1LCfEJgVLcoU4hMjN/LcKxuLUg=)
                          2: G-UY9fw-kYthgVG8j7MhPJ39wgs.roa (hash: b6Ivy/owKyCZpoKro6EHt7ZJbFAAmGCMZ5Nm8RiWp5w=)
                          3: GrPbowD1xhzEQt0mGonYCE0CqTQ.asa (hash: DOZHKT4cbMp9ZejcaCrBqRpFGvg17kAFTmcg90xNqwM=)
                          4: hsNxRAw_rGABDi7oiUui6xBlQd8.roa (hash: j/nnPvCS87qU0kUKOjDsKRSqIlWxWIl2JteXT8Y6vic=)
                          5: lzhqb44lkym18st-KJO0iNCAZlQ.roa (hash: 2LZndqqTJT7DvJeBs5WXaUqdjr9j/DQSipQScJfwcnA=)
                          6: oYFk2ZYaFtLv93P1Angh6dK9N0A.crl (hash: l/wuGoZjEQlhjkCayjvMrGAgNHK9WgrEf1exsjTxzng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:79:88:be:2a:cf:fc:cd:50:29:dd:76:bd:84:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
        Validity
            Not Before: Mar 25 19:01:24 2026 GMT
            Not After : Mar 26 19:01:24 2026 GMT
        Subject: CN=9bc65a2ab2a4587a4b0810ef7abe915e5dedb116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bb:fd:44:a8:2e:3c:28:06:55:ca:08:41:2f:
                    b9:0c:32:2d:92:94:db:90:4a:e3:f3:5a:68:9c:3f:
                    73:cc:c3:00:f5:dc:09:de:d8:c0:c6:af:92:13:1f:
                    39:aa:62:f7:8a:9f:ad:f1:2e:98:2d:fe:0a:d5:15:
                    f7:8d:25:53:3a:7b:3e:66:36:66:1f:48:fd:d7:18:
                    6b:8c:55:d4:16:6c:54:6d:e9:09:85:e5:f9:5a:c4:
                    66:9c:32:fa:e3:c5:81:ac:92:24:14:da:c8:7a:48:
                    13:3e:03:da:f5:3c:b4:29:6c:01:d5:03:e7:b6:bd:
                    54:2c:1f:fc:0d:db:6e:6c:d8:a7:d6:f8:8a:c6:94:
                    6d:82:bf:5a:f4:4b:e1:20:c4:54:05:e9:90:43:5b:
                    56:a5:77:6c:c7:da:13:ff:c3:26:a3:90:24:d7:b8:
                    7c:92:48:03:8a:37:7d:c4:16:5d:b3:29:ea:fd:4e:
                    d6:83:ea:5c:a8:35:7b:a8:71:ae:44:1e:48:03:23:
                    1e:66:83:10:1f:86:ed:a3:85:1d:55:44:6b:f7:b9:
                    57:7f:92:fa:2a:d7:a5:ab:9b:c6:f2:30:fa:dd:5c:
                    2e:8f:17:8e:3e:7c:07:02:fb:74:0d:20:f2:77:28:
                    74:25:1e:4c:39:5a:33:f1:b6:40:1e:3b:8b:62:59:
                    81:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C6:5A:2A:B2:A4:58:7A:4B:08:10:EF:7A:BE:91:5E:5D:ED:B1:16
            X509v3 Authority Key Identifier:
                keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:2e:ab:a6:78:af:9b:ff:8c:93:44:49:a8:75:c2:29:45:a8:
         68:b3:db:8d:64:63:31:ea:94:93:ed:0d:00:e0:64:52:6f:60:
         0e:ab:8d:9b:78:ef:3b:9c:f7:7a:3e:42:92:89:ca:52:ed:20:
         73:62:7e:a1:d3:85:e1:43:af:df:db:bb:82:00:d1:31:cc:f1:
         51:d2:68:e3:09:51:57:49:30:6c:bb:95:fa:b1:c3:bf:db:e6:
         5a:e6:fa:74:4e:0e:99:de:d5:c2:e5:57:ec:1d:a9:91:2c:ef:
         c7:06:6c:a3:be:63:3e:bd:f8:6d:e1:32:61:90:1d:e6:23:45:
         b2:8c:36:bb:ba:b3:b4:f0:9d:00:55:ae:92:15:ff:de:93:d8:
         62:71:8a:47:67:60:4b:99:08:17:dd:b7:7b:17:d0:b1:5d:de:
         b7:87:cd:3b:de:b0:b4:97:17:bb:88:d2:ec:78:75:cf:f9:cb:
         fb:a7:cf:a3:a4:0b:b3:c3:c1:0b:82:a8:3a:6f:aa:a7:82:6e:
         1b:a1:15:43:f3:6d:91:c7:e0:a2:62:ee:fd:9a:c3:ea:58:51:
         16:1d:8f:ff:1b:0f:02:c6:d8:a1:c0:9a:19:86:b2:0c:e4:3d:
         39:83:81:fa:1e:e8:51:cf:dc:27:85:17:67:6e:68:71:86:92:
         0d:fd:07:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:02 2026 by rpki-client