Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File:                     ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier:          J5eObGABEk9a9VRo4vOyON0+FBMP5tgzEqzHJaWwEN0=
Subject key identifier:   65:67:B7:40:3D:5E:E8:A1:26:AE:E9:84:83:89:4E:10:24:E4:5E:BB
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer:       /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial:       019DA378D8BB8B69B0891EA1FDD714EF95AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number:          0E20
Signing time:             Sun 19 Apr 2026 02:01:38 +0000
Manifest this update:     Sun 19 Apr 2026 02:01:38 +0000
Manifest next update:     Mon 20 Apr 2026 02:01:38 +0000
Files and hashes:         1: fs8d2893qiZikthsq_-JlA6ljMA.roa (hash: ZrsMMWfWT5ZYVuIhEglHV6ViI9TadV+uTXWR+dIXLo4=)
                          2: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: lBAFuPpVha+K7FNcAvSw3EFH5M0OVXIu7JKaurphvQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:d8:bb:8b:69:b0:89:1e:a1:fd:d7:14:ef:95:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
        Validity
            Not Before: Apr 19 02:01:38 2026 GMT
            Not After : Apr 20 02:01:38 2026 GMT
        Subject: CN=6567b7403d5ee8a126aee98483894e1024e45ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:29:4d:10:d3:f1:80:49:fa:f2:34:a1:72:2e:
                    f8:0b:90:e2:81:76:e1:45:32:a2:a9:6d:73:a0:00:
                    66:4f:35:06:45:f9:69:be:8c:eb:41:9c:7a:eb:18:
                    9f:57:e9:02:93:6e:49:e3:4c:b6:78:e1:df:58:e7:
                    82:fc:bc:4f:9a:01:11:b0:db:18:8b:6e:10:e7:b8:
                    e9:96:8b:25:16:57:24:a5:a2:d3:16:87:c3:ac:20:
                    b3:94:1c:ae:23:13:b1:8e:0d:c7:d3:98:33:de:ca:
                    30:66:35:97:53:62:01:15:53:81:b0:c3:94:ff:43:
                    1c:fc:ed:56:80:88:10:0e:49:8a:77:fb:79:c2:ea:
                    ce:9b:5b:df:6d:7f:15:71:89:26:75:97:12:1b:49:
                    70:bc:12:64:63:1f:c4:9e:8b:92:cd:4d:97:3f:c4:
                    13:79:8e:5a:b9:c3:4e:5b:34:00:bd:3d:06:62:61:
                    c2:b4:93:5a:ce:92:98:c6:50:19:83:69:67:89:24:
                    14:24:c6:ed:63:ec:f6:59:79:4d:79:42:af:c6:a6:
                    98:46:0b:44:38:7b:92:5a:e8:0a:62:6c:19:18:2b:
                    55:44:71:92:fc:6e:5a:7b:ea:45:6b:0e:f9:04:1a:
                    ec:42:27:81:bf:99:93:8e:62:66:e8:0e:6b:dc:d4:
                    3d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:67:B7:40:3D:5E:E8:A1:26:AE:E9:84:83:89:4E:10:24:E4:5E:BB
            X509v3 Authority Key Identifier:
                keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:bb:8a:b0:70:cf:4e:cc:b0:92:10:21:d3:d5:5b:ea:32:8d:
         bb:a8:83:59:59:e6:1a:1b:54:37:04:fb:29:3e:ae:bf:f6:a5:
         6d:09:02:5b:99:ea:ea:1d:4f:e2:a4:db:9e:c0:1f:24:1c:e5:
         e4:d6:a3:d5:11:84:22:42:42:2d:ca:f5:5a:ef:c9:ff:b4:93:
         cb:dc:4b:2d:0b:c9:e0:fc:ee:05:32:e2:93:f2:ff:00:14:69:
         48:93:be:af:b9:33:14:c0:57:b2:3f:c2:f1:32:ff:23:6f:ad:
         06:35:52:b7:28:a4:a8:a7:97:ac:3b:02:f3:0b:c6:11:8f:42:
         86:5f:7d:cf:8c:64:c5:22:b0:98:3d:a2:a1:8d:36:30:b9:56:
         91:5f:63:f4:4b:7f:73:25:22:e0:a8:c3:a2:57:4b:5f:b5:ad:
         ae:e4:67:dc:b2:33:f3:d3:f1:aa:40:47:39:78:da:71:a4:4c:
         1c:4a:d6:4e:4c:ae:50:94:a2:7a:f7:25:d1:53:f7:26:f7:c3:
         68:ee:4e:da:a8:ca:fd:2c:d9:13:97:a1:ae:bb:bc:83:ef:63:
         06:c3:c4:05:30:9a:8d:09:72:bb:2d:86:5a:d9:37:5e:e5:d4:
         30:ed:37:9f:45:00:17:16:05:cf:e5:97:75:50:4a:d4:20:46:
         76:31:b5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:19 2026 by rpki-client