Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
File:                     o7L02u177ypqtLu5qvrFZU3cU8E.mft (raw, json)
Hash identifier:          zOh8khGgq4rMZ3kPoxLOGCzCmv//NY/MctxiakOfVWk=
Subject key identifier:   6E:10:D8:7B:6A:27:02:F5:C7:D8:F6:C2:DF:5E:9E:6B:30:76:23:53
Authority key identifier: A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
Certificate issuer:       /CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Certificate serial:       019D98503C67B6490F1A7FBD203D7B6EF71F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
Manifest number:          14B6
Signing time:             Thu 16 Apr 2026 22:01:28 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:28 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:28 +0000
Files and hashes:         1: o7L02u177ypqtLu5qvrFZU3cU8E.crl (hash: lyrnAAazU6FqsfqsSvTdlKTpOyp+USWGNrMySOFnD9s=)
                          2: w4ITWrVOd87_9Oz-MtY7slczBow.roa (hash: /062+JMxPPoUdp7c8u+6Eta3MA3XDfRjmmRKaz0UrFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:3c:67:b6:49:0f:1a:7f:bd:20:3d:7b:6e:f7:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
        Validity
            Not Before: Apr 16 22:01:28 2026 GMT
            Not After : Apr 17 22:01:28 2026 GMT
        Subject: CN=6e10d87b6a2702f5c7d8f6c2df5e9e6b30762353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c5:5b:c0:1f:1e:19:10:13:46:fd:89:d4:2f:
                    46:5a:62:d0:93:19:1a:21:91:f9:9e:e5:23:f6:91:
                    76:ee:74:bf:e7:e9:aa:d3:27:34:be:c5:c7:b6:90:
                    6e:3d:50:df:50:f3:38:45:95:8c:2a:6d:ee:c9:0f:
                    9a:c5:ff:7a:84:9c:2e:66:b3:b2:fd:1c:47:91:3c:
                    c6:0d:a6:93:d3:35:16:13:04:fd:45:a2:01:40:6c:
                    48:60:12:e0:89:a0:77:64:64:2b:fb:0a:07:ab:c2:
                    d0:8a:98:7e:a0:8c:5b:27:3a:10:11:47:00:ac:29:
                    40:de:2b:13:b3:fc:45:5d:ed:d3:be:15:82:6a:e5:
                    e6:bf:c7:03:c7:d0:20:29:c5:d2:53:f6:3e:fc:c8:
                    50:fc:95:24:09:b0:76:f4:81:a7:5a:06:91:42:f9:
                    e6:3c:c8:73:db:cb:6f:75:61:46:84:2d:1d:f4:85:
                    5d:9c:72:4a:49:87:85:e9:7e:e5:89:a3:44:28:32:
                    f1:b0:22:0c:ac:d8:11:8c:d9:30:d9:53:2e:cc:f1:
                    ed:2c:e9:d3:67:87:df:a9:a8:d2:07:0b:5d:df:f7:
                    f2:57:19:3e:50:d0:35:3b:5d:57:5d:02:1e:41:e7:
                    33:b1:a9:7a:fd:eb:9a:e9:62:55:a8:24:f4:70:06:
                    0c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:10:D8:7B:6A:27:02:F5:C7:D8:F6:C2:DF:5E:9E:6B:30:76:23:53
            X509v3 Authority Key Identifier:
                keyid:A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c0:fa:ef:b3:26:29:bc:60:bf:5a:f3:4e:25:77:28:be:ec:
         34:e6:f2:09:2b:18:3b:9c:d4:0a:41:85:1a:bd:a2:79:7e:fc:
         e4:c6:94:ab:13:4c:ab:19:cb:19:92:13:79:73:9f:3a:de:9a:
         6b:0c:4a:cb:19:d0:35:17:43:b8:03:84:04:71:d5:76:28:e5:
         86:84:6e:10:7b:86:ec:61:9d:cf:04:6f:e6:a3:f3:d6:a7:5f:
         89:85:5a:3b:a2:e3:f1:85:69:83:dc:e8:72:7d:55:4f:e6:bb:
         5c:d5:6d:c2:55:d7:1a:6a:52:7f:24:d4:16:cb:e9:e1:cd:b5:
         57:1e:05:d5:d7:bc:d2:fc:fc:28:ba:f7:a6:5b:65:6c:9e:00:
         94:d3:e4:76:41:24:43:c7:19:84:63:44:94:b6:c7:f3:3a:db:
         9b:0b:68:53:57:48:a0:cb:43:54:3b:90:ef:96:3e:a4:96:e0:
         6b:e8:47:2b:b8:5b:5d:a5:18:4d:c5:fc:b1:07:ef:2c:18:24:
         a7:97:e6:f7:66:67:4f:c2:08:76:a2:6c:fb:91:03:12:40:30:
         3f:0f:ee:e8:19:fc:63:da:c9:c9:a3:3f:76:68:42:f5:d7:5e:
         f4:b3:c6:ac:58:44:7a:4c:ed:8d:5e:32:a1:5c:7c:ca:6e:b9:
         00:44:ec:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:44 2026 by rpki-client