Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
File:                     OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft (raw, json)
Hash identifier:          ol2EtTPq+Bxc2ls4+Jiy1miaU0dSagPRfNfHxN7ZBCQ=
Subject key identifier:   50:23:C8:B7:7F:E3:40:B8:37:06:B1:FF:78:EE:A1:7C:71:E7:F9:F5
Authority key identifier: 38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75
Certificate issuer:       /CN=381203337b0cd06fcfc045588f097cbc24153a75
Certificate serial:       019DA3783D24CAAB22223CE5504F3869D626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
Manifest number:          05C7
Signing time:             Sun 19 Apr 2026 02:00:59 +0000
Manifest this update:     Sun 19 Apr 2026 02:00:59 +0000
Manifest next update:     Mon 20 Apr 2026 02:00:59 +0000
Files and hashes:         1: OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl (hash: OSdb+/Aextp9JlC5FAshaT7ajY6JC863AnqCLiV8yxg=)
                          2: y0EOGWIKk7WR342AYtoS4ft8s8g.roa (hash: F6PTeIw5ik/EvHxhZTEzM2YWypGnV0TJXxvPjQa9SsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:3d:24:ca:ab:22:22:3c:e5:50:4f:38:69:d6:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=381203337b0cd06fcfc045588f097cbc24153a75
        Validity
            Not Before: Apr 19 02:00:59 2026 GMT
            Not After : Apr 20 02:00:59 2026 GMT
        Subject: CN=5023c8b77fe340b83706b1ff78eea17c71e7f9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:15:6b:8b:bd:5d:39:f4:fa:a7:37:2b:ed:c3:
                    50:4c:12:88:9a:47:13:97:1e:1a:bf:9a:63:01:01:
                    81:94:21:b1:0a:6e:29:03:fa:b9:8e:ec:ce:49:76:
                    e2:fa:49:40:54:45:12:38:03:76:db:4e:dc:97:42:
                    d5:42:f0:6d:e2:69:1b:1e:88:a5:6f:08:4f:cf:9c:
                    2b:ad:ce:e2:15:9e:76:aa:47:00:e8:5a:83:18:34:
                    60:10:6d:db:d5:53:99:9e:5d:4e:5f:e7:58:12:c6:
                    53:24:43:14:01:ac:0d:66:89:e8:09:89:94:ec:d8:
                    b0:23:fe:34:20:32:93:8a:fb:87:ca:5d:f3:86:fd:
                    80:8b:57:c2:bd:12:0b:64:2c:ff:2d:38:92:d4:15:
                    69:82:31:96:12:99:25:9e:18:f4:ae:ba:89:67:4f:
                    45:5f:9d:21:bb:4b:66:4a:3a:cb:4c:6c:39:77:bf:
                    64:c7:4d:44:f2:98:0c:81:f5:2d:7f:0a:2e:ad:48:
                    90:91:b0:27:0a:fa:8b:42:a6:7a:a4:2f:77:c3:b7:
                    6b:58:df:2f:e5:ae:4c:a7:86:98:76:c1:e7:e1:96:
                    f7:0f:b8:0b:10:9e:be:c3:05:e6:20:86:e5:2a:3c:
                    a2:18:42:96:ad:87:24:2a:18:10:3e:39:40:5f:8f:
                    80:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:23:C8:B7:7F:E3:40:B8:37:06:B1:FF:78:EE:A1:7C:71:E7:F9:F5
            X509v3 Authority Key Identifier:
                keyid:38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:9a:a5:ba:0c:7d:4e:bd:43:d6:fc:25:72:d4:20:8b:b5:95:
         f4:f9:cc:8c:a4:d6:a6:76:13:0e:77:21:d4:a7:fa:8b:eb:c6:
         f6:80:c7:25:bb:51:1f:bd:a0:b7:e6:2e:3a:5c:b8:c6:cb:53:
         8b:0c:ed:33:d3:c2:db:b6:9f:5e:19:8d:ec:85:2b:13:cb:77:
         9a:76:cd:65:3a:d8:2f:8f:71:9d:63:ee:f9:b3:46:71:1c:b6:
         35:9c:3a:2e:9d:ac:f4:f3:70:5c:7e:16:9f:6c:ba:46:15:d2:
         1f:72:3b:d5:f2:b3:4a:84:62:0f:2d:69:20:ae:2a:7c:51:17:
         34:80:e7:d9:04:29:48:57:bc:bd:08:61:ca:cf:8c:56:54:6f:
         7a:e0:29:c5:e2:9d:54:63:c5:15:60:e0:28:71:41:43:d4:d8:
         b2:57:7d:6e:51:1d:24:33:dd:64:8c:30:90:ca:e5:ae:ca:92:
         12:c0:65:ff:c7:3f:8a:80:12:76:de:2b:b7:07:34:6f:6e:1b:
         fb:2d:05:15:8e:6e:62:f3:c3:c8:30:df:9c:a3:c2:71:27:43:
         f7:18:39:63:ba:43:6a:e2:14:95:43:b9:57:e4:3a:e3:20:1a:
         7a:cb:a2:c9:1e:7f:f3:a9:e7:dc:fe:46:07:d2:2a:15:2a:73:
         0e:5a:23:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:10:42 2026 by rpki-client