Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
File:                     PubOz_2bi7oY1HTns5k-Ch0U27M.mft (raw, json)
Hash identifier:          qdgakD20xZooaOHKXiktGrnF9QuqjaQ1Psqg7Kz+AWY=
Subject key identifier:   6D:47:9F:A8:6F:01:A6:4D:84:83:C2:ED:A6:15:39:A6:AB:53:39:28
Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
Certificate issuer:       /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Certificate serial:       019D9850921C6693CB5D21995EC93A607ED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
Manifest number:          18C0
Signing time:             Thu 16 Apr 2026 22:01:50 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:50 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:50 +0000
Files and hashes:         1: HgjQlaKjOcxyBGYejwW2nEs1AV4.roa (hash: A/JVdLkAtd7xSgRJY34UCglbvZrgY4rTBx9M0XvHris=)
                          2: KbPCfCpgY4busEPKG3wKIKYL4ts.roa (hash: /r3wKFeByv8IWPnZi01I5rTvuzXRQVBcL8LQjvMalwY=)
                          3: PubOz_2bi7oY1HTns5k-Ch0U27M.crl (hash: h1TyDfjr4T9PJhZ/CgLBfIRdKGKAb/9nILk48ZLOv84=)
                          4: TR9cohMhMoQQxWhWiR1qGs1BMC8.roa (hash: LYdTaX6pjmd3oJ4vpjV9U20LQlY3HXHKSPGaKNT6k0M=)
                          5: VVHWjLC5gXhkxNQ7IVFDXzmzeZI.roa (hash: xCZynqZw2sX0L0GEOZPMQ2Okzgf6Cs5V0s8Gbvable4=)
                          6: na7v2RTX0iJO5QICr8PmbCw-LUM.roa (hash: jwROABglDlbIBf0fqlrQ82IKxKEdLiyV166j/7Y15oM=)
                          7: ycbxLoTJEDsv40EPKCzklrp5vCU.roa (hash: ik9FtWC2uSrCFeO2vECTjX7gm9PiFa3XhpXGDwO8G94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:92:1c:66:93:cb:5d:21:99:5e:c9:3a:60:7e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
        Validity
            Not Before: Apr 16 22:01:50 2026 GMT
            Not After : Apr 17 22:01:50 2026 GMT
        Subject: CN=6d479fa86f01a64d8483c2eda61539a6ab533928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:35:13:38:68:e2:ff:58:b5:00:fd:84:6a:2a:
                    8f:65:4b:05:1d:ae:d5:98:c5:82:b9:38:6d:1f:fd:
                    9f:7d:cc:e9:46:9c:9b:cc:74:01:f5:a8:91:19:1b:
                    cc:43:77:ee:bc:d5:f0:2e:1f:af:02:5e:6b:63:9b:
                    4a:a4:10:05:57:7a:26:11:e0:8d:83:cd:ca:58:31:
                    ac:6b:3c:3b:99:e8:46:da:dc:e1:af:df:b9:2f:98:
                    12:0c:ff:2a:a0:1c:31:1c:a8:0e:84:c0:f7:c5:a1:
                    02:fa:a8:3e:4a:5d:c6:f6:60:4e:18:27:86:36:69:
                    31:83:2e:2d:ff:1d:5c:83:a0:ad:79:a9:b8:65:a1:
                    b0:29:ac:8a:1e:b4:97:00:83:68:04:ae:e1:d9:ba:
                    e3:d8:11:50:81:a9:98:4b:96:5c:1c:5c:8d:ee:e2:
                    f8:bf:28:bf:d9:12:a3:1f:37:9b:43:84:3c:0f:f1:
                    85:3c:68:3c:a0:4c:7a:bb:d3:6f:36:63:55:f5:db:
                    d6:8e:3b:e3:23:b0:52:23:5b:b5:33:ad:ff:9c:25:
                    8f:b0:9b:2a:a9:3d:8e:62:f2:98:7e:e1:9a:b0:12:
                    78:16:f2:c2:82:68:32:79:1a:15:02:fa:47:fb:7d:
                    63:cf:93:2e:96:b7:ce:04:ca:76:eb:ab:1f:01:a3:
                    71:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:47:9F:A8:6F:01:A6:4D:84:83:C2:ED:A6:15:39:A6:AB:53:39:28
            X509v3 Authority Key Identifier:
                keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:bc:e5:4d:02:2c:da:97:a7:8b:f6:9d:95:6f:2a:e3:00:f2:
         82:09:45:a8:e2:69:63:46:86:e3:6d:13:f8:aa:36:40:a6:60:
         68:8d:6d:e3:9c:be:d3:59:28:87:0a:66:cc:6b:11:d6:4d:46:
         30:5a:71:dc:78:c9:55:c9:9c:d2:01:57:02:2b:90:a7:f4:90:
         b3:74:9a:fe:7c:36:3e:8b:06:7e:ee:76:88:25:06:54:a2:b1:
         1b:9e:0f:ba:82:e6:d7:2c:4b:7b:97:04:cd:57:cc:c0:12:03:
         a3:78:54:3b:91:51:82:0f:92:e8:88:e1:2c:b1:37:44:1d:ad:
         a9:27:24:bf:c2:60:aa:31:1f:b6:dd:6c:ac:4b:e7:c8:ff:03:
         66:11:94:55:2b:31:4f:68:0b:f6:6a:8f:5e:fc:b8:f3:da:85:
         f8:40:ff:00:23:e9:7b:29:3c:e3:1c:82:c2:05:c0:85:f7:ba:
         fe:3c:2c:4c:35:9f:5f:51:68:ce:19:ec:27:8e:a7:80:fe:5f:
         b5:02:14:80:66:eb:12:16:fb:99:4e:05:20:f5:33:fb:06:a9:
         0c:af:55:4e:21:b8:02:0d:24:f7:f9:40:4d:3f:41:58:10:1c:
         6a:d6:bf:29:da:13:ef:b1:6c:d6:0b:ca:98:48:62:99:8b:f9:
         61:54:77:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:29 2026 by rpki-client