Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
File:                     oYRAnlwYO7zDFTX0x-7keCzWe-M.mft (raw, json)
Hash identifier:          i2nSX2ZuNeO9ebMXlTxNMnqTXqbGwJctnvhMD0e+RpY=
Subject key identifier:   7B:98:86:25:0F:ED:FF:12:D6:5B:B5:50:9F:88:39:E3:70:97:DA:43
Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
Certificate issuer:       /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Certificate serial:       019D97AAA5CEF50DBC88A1B782CC4F453312
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
Manifest number:          14E9
Signing time:             Thu 16 Apr 2026 19:00:36 +0000
Manifest this update:     Thu 16 Apr 2026 19:00:36 +0000
Manifest next update:     Fri 17 Apr 2026 19:00:36 +0000
Files and hashes:         1: 1-hcdN0H8sYbxU2FJ2TIpbt1wrcs.roa (hash: +oHH/wDqJPdzoao+MeKrBaUm4lv6BOEi7Q0L1v4HB8k=)
                          2: oYRAnlwYO7zDFTX0x-7keCzWe-M.crl (hash: F3hOx4y4QaN5zjGZqVlDVyFr/gQbQ4o5vltiR3iP1ZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:aa:a5:ce:f5:0d:bc:88:a1:b7:82:cc:4f:45:33:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
        Validity
            Not Before: Apr 16 19:00:36 2026 GMT
            Not After : Apr 17 19:00:36 2026 GMT
        Subject: CN=7b9886250fedff12d65bb5509f8839e37097da43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:55:6c:bd:49:c6:76:11:f2:55:01:44:27:40:
                    3e:c4:60:21:a8:36:0b:f7:6c:9f:0c:15:19:7b:a7:
                    96:ad:14:b2:d9:af:ee:0a:53:67:ae:77:6a:1f:81:
                    f1:fa:ce:c2:20:0d:f0:37:54:8f:2f:3b:ab:99:32:
                    fb:c2:ec:6a:2b:b6:63:e3:85:88:ee:7e:e4:b1:b6:
                    0c:5c:81:db:a0:c5:e6:91:19:d8:89:c4:f4:46:84:
                    2c:de:fd:d2:a9:18:32:2a:83:90:b4:bf:d0:f5:4a:
                    34:b4:86:4f:10:25:b8:d8:82:33:15:bf:9d:60:43:
                    cd:2c:54:b8:60:22:ba:7e:10:11:de:49:57:74:ac:
                    24:c3:32:b0:e8:99:9d:51:61:d3:22:ca:90:d4:d8:
                    f1:3e:d0:a5:5b:ce:be:87:2d:0b:22:0f:ef:a4:9f:
                    c4:85:32:f7:0c:79:4d:f3:fe:98:90:3b:93:25:c7:
                    08:7c:52:61:e4:b5:86:54:38:3f:bc:89:8b:7f:28:
                    14:d9:e2:81:ed:29:0e:9d:21:cc:e0:3d:7f:1e:92:
                    22:34:f4:9d:83:16:00:b0:53:1c:75:cb:d1:b8:27:
                    41:f7:32:2d:32:17:d3:50:bd:f8:6a:d7:52:07:9d:
                    7b:1a:39:c8:f5:e7:5b:ee:10:12:97:f9:f9:90:88:
                    6c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:98:86:25:0F:ED:FF:12:D6:5B:B5:50:9F:88:39:E3:70:97:DA:43
            X509v3 Authority Key Identifier:
                keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:0d:9c:5c:06:8a:b5:a0:4b:e5:ab:c8:29:35:ae:81:9c:64:
         45:5f:8b:30:3f:52:6b:59:5a:b1:ec:19:b5:c7:5f:36:ff:74:
         18:94:ce:d8:36:bc:c3:da:c8:37:3e:8d:dd:aa:47:42:ca:9c:
         c9:81:18:71:80:7d:6b:56:16:26:5c:b2:47:b7:7e:e7:f8:07:
         6e:f5:2e:5c:a2:62:c5:43:2e:78:05:42:7e:e9:1e:df:84:3f:
         ed:88:71:22:26:10:62:83:eb:e1:08:c0:21:c8:72:d8:c9:41:
         4c:c5:ac:c1:15:6e:e7:45:07:42:d0:1c:08:fc:10:44:97:fc:
         74:99:a7:04:16:13:cf:40:3a:6a:40:33:61:23:1c:2d:db:87:
         30:f6:8d:d8:73:2a:f6:f1:96:a6:1c:0e:04:98:0b:b5:18:e5:
         f5:53:9f:78:10:04:f3:37:13:2c:4c:d2:f5:83:bd:89:7e:2d:
         7b:68:4e:69:50:b8:de:d1:6f:68:7e:63:c1:10:d3:37:b2:87:
         50:f0:7d:97:79:94:87:4e:b5:28:af:01:9f:ee:49:c1:52:57:
         f0:5a:38:a4:eb:f2:d8:7b:dc:b8:31:fd:ad:81:f8:02:66:2a:
         4e:a9:30:f0:0f:a9:ca:39:15:0b:d3:57:08:96:2f:69:8d:ba:
         3c:46:6c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:05:34 2026 by rpki-client