Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
File:                     OuFF_jt5sr9oqtvgB9721yrvKsM.mft (raw, json)
Hash identifier:          x/4lt5uijYki/ZV7zJVSipZMYkoVals3Wn2t6Q1/C+U=
Subject key identifier:   81:52:02:BE:77:D9:A2:E5:F8:BE:62:9A:B6:1E:F5:1D:F3:8B:6F:97
Authority key identifier: 3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
Certificate issuer:       /CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Certificate serial:       019D9E883E74319EDA3E18D166FE53BB8B63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
Manifest number:          11D5
Signing time:             Sat 18 Apr 2026 03:00:22 +0000
Manifest this update:     Sat 18 Apr 2026 03:00:22 +0000
Manifest next update:     Sun 19 Apr 2026 03:00:22 +0000
Files and hashes:         1: 9dlwjsoeaynXvLD6hU--GhYSrqM.roa (hash: mUWy20UuJGJ5BznEAMczwLkiJHHJsFmSVmANdbalu+k=)
                          2: OuFF_jt5sr9oqtvgB9721yrvKsM.crl (hash: qVpnxL4sKh1RqkGrzNWRY9jmBm2VFH19DIbdeAOjpeI=)
                          3: rM_jdXy84vXGo0-WUXb97B2X5Vc.roa (hash: GjuFk6jemR6ii4hI/oxG1vqpEf4r+3pyDc+nTJsViK0=)
                          4: sEmorA-ZRll0p0UMYOTfT8auHu8.roa (hash: NXJluQHm5Ujqo8vGjkexvbDRO7wfW2RmWXBToETA0t4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9e:88:3e:74:31:9e:da:3e:18:d1:66:fe:53:bb:8b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
        Validity
            Not Before: Apr 18 03:00:22 2026 GMT
            Not After : Apr 19 03:00:22 2026 GMT
        Subject: CN=815202be77d9a2e5f8be629ab61ef51df38b6f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:16:79:d1:3e:88:33:b0:26:f1:e1:aa:11:28:
                    4d:fb:f0:5a:ff:4a:96:ef:aa:f4:9f:f4:d2:05:df:
                    77:e2:84:d4:df:ad:d1:00:32:9f:aa:41:0f:cb:45:
                    de:1c:78:a3:39:81:3a:df:b2:9b:ae:2b:ec:25:74:
                    76:96:62:5f:bb:16:ac:8b:e0:65:bc:37:fd:c8:66:
                    af:c9:e3:58:29:aa:f9:b8:45:2b:51:3b:aa:fc:29:
                    79:30:d3:88:3f:37:b5:5a:4f:ad:dc:04:02:e3:79:
                    c1:75:2a:f6:03:06:df:c1:e4:cb:fc:66:71:85:87:
                    2e:49:0b:eb:80:b7:36:99:a9:af:e8:0b:55:cd:3a:
                    ce:16:bb:75:ef:ca:41:a1:75:4c:d7:26:d7:06:bd:
                    80:c6:9e:76:17:89:67:b2:09:98:1f:31:e2:88:80:
                    e1:84:3c:ee:b7:77:71:43:fb:37:40:fb:3f:a5:2d:
                    4a:bd:df:b3:f2:9b:53:e0:c2:c4:f1:b4:c8:4f:05:
                    31:cc:99:71:03:85:e3:e0:3c:5d:88:27:b4:60:34:
                    df:23:13:72:02:31:24:fb:5a:73:25:64:32:5e:1e:
                    91:d3:15:10:07:a0:26:31:7d:8c:e6:55:83:56:74:
                    fb:80:ec:1c:66:15:1e:88:6c:b4:92:04:50:75:e7:
                    54:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:52:02:BE:77:D9:A2:E5:F8:BE:62:9A:B6:1E:F5:1D:F3:8B:6F:97
            X509v3 Authority Key Identifier:
                keyid:3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:aa:f1:01:da:31:ee:1f:73:1a:04:ce:61:a3:61:d6:5f:7f:
         09:96:e9:d6:ad:a4:0e:cb:88:30:e4:03:a6:4d:42:94:7c:c2:
         54:31:7b:10:a5:74:8a:8d:b0:d8:a4:59:c6:a1:89:98:76:df:
         1d:6c:aa:be:43:0b:4f:63:75:9f:61:06:af:a3:d8:ff:15:93:
         60:59:8b:ff:14:ff:84:52:90:9c:f3:da:bc:03:e8:e7:d2:c5:
         52:f3:2b:8a:e7:47:74:e8:84:16:f5:82:01:2c:66:4d:54:6f:
         ab:19:c1:b5:53:48:ce:ca:e0:a8:f9:b4:81:07:62:3d:04:c9:
         f0:5b:f1:75:1d:ad:34:85:1d:4e:98:af:e2:3d:25:43:08:af:
         27:0f:3e:aa:fe:a8:74:f9:d4:54:2d:fd:72:60:89:04:4c:ca:
         fe:ea:a4:3a:25:10:da:57:7f:0e:6e:bc:07:6f:7e:08:44:b8:
         85:a7:22:fd:71:6a:18:f4:e1:cd:a7:a2:26:a9:6f:99:0c:f7:
         a7:fa:57:ab:3d:56:d1:af:3d:91:40:25:11:60:0e:8d:56:38:
         da:7c:eb:1b:3e:3c:fd:cd:70:bf:d0:1a:41:b5:9e:b7:2e:58:
         0c:c0:cb:5a:0c:94:5e:fb:24:9e:46:cf:b0:59:46:af:2a:15:
         35:c8:1f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:12:37 2026 by rpki-client