Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
File:                     OEypWHqC_DdH9GngCUXZ1VhaNbI.mft (raw, json)
Hash identifier:          jzxHkRNKaRuRaAWSYyQPoiVT5OjyqM1Q6OxiVimcw9A=
Subject key identifier:   05:96:32:2B:C4:72:C1:8F:24:0D:2C:80:5E:AF:03:82:3B:11:E4:39
Authority key identifier: 38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
Certificate issuer:       /CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Certificate serial:       019D9A3EEA8EE6B7AD5FE8F6F683BA4494D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
Manifest number:          04FF
Signing time:             Fri 17 Apr 2026 07:01:47 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:47 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:47 +0000
Files and hashes:         1: OEypWHqC_DdH9GngCUXZ1VhaNbI.crl (hash: UAE//oxn1Hvp0tdV6PNG0h/15vYut39TF8680T52cGY=)
                          2: m5e2ZDv7_-1udsvxigJbqqXmd_E.roa (hash: yOpoP5KeMEFEDYD+ejQW8hpR1s0gtVHvkYr8rcVTFC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:ea:8e:e6:b7:ad:5f:e8:f6:f6:83:ba:44:94:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=384ca9587a82fc3747f469e00945d9d5585a35b2
        Validity
            Not Before: Apr 17 07:01:47 2026 GMT
            Not After : Apr 18 07:01:47 2026 GMT
        Subject: CN=0596322bc472c18f240d2c805eaf03823b11e439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2b:ad:29:d8:bc:80:b8:63:d7:34:9b:5d:b3:
                    b0:a5:29:f2:24:f7:9c:eb:80:05:5b:f8:87:0d:61:
                    2e:aa:0b:77:a1:c6:f0:2e:c1:38:db:dc:bc:45:e5:
                    7f:7f:15:19:be:54:67:55:40:57:da:bb:26:76:d2:
                    56:e5:e3:eb:27:8d:ea:e3:03:6b:4b:49:22:df:1f:
                    d0:b2:da:0c:fb:76:49:de:00:ac:a2:10:c2:7a:54:
                    c1:4a:37:f4:57:bd:c9:c7:73:f6:1c:3d:d8:0b:5a:
                    97:b3:89:a8:20:3f:24:2e:e7:58:6c:05:0c:aa:a0:
                    64:fa:87:82:86:31:b5:7b:03:e0:d9:21:23:8a:cd:
                    bc:69:c3:e4:3f:7f:08:f9:e9:a1:e6:07:be:2c:81:
                    19:d4:f7:0e:f9:21:99:a4:af:aa:4d:fd:8f:3d:31:
                    10:ab:d4:20:0d:a1:57:e8:0b:d7:72:1b:f5:83:79:
                    48:e4:fc:a5:75:00:38:2f:bd:11:c8:ca:97:30:20:
                    92:4d:31:7f:19:2a:aa:16:96:4a:84:db:6e:42:9d:
                    9c:1c:66:f2:30:1c:7c:f1:19:62:32:73:9a:23:a5:
                    8f:9e:d6:18:97:39:96:18:61:64:09:0c:c8:1a:f0:
                    f9:e2:e7:cd:69:ff:c5:6d:a7:3e:e4:69:51:b6:ca:
                    3c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:96:32:2B:C4:72:C1:8F:24:0D:2C:80:5E:AF:03:82:3B:11:E4:39
            X509v3 Authority Key Identifier:
                keyid:38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:16:78:a3:ed:17:aa:5e:f5:3e:ae:27:57:e7:4b:fb:67:bd:
         b4:a0:f2:1c:cd:33:59:c8:a0:06:26:0c:49:34:74:13:d6:30:
         4f:11:f4:e2:b7:b0:8d:b5:b5:77:23:b4:33:85:08:e9:84:0c:
         8a:4a:17:79:9e:ce:54:50:36:ee:57:2f:03:3a:99:12:ff:cf:
         69:b4:42:cf:2c:fb:ed:69:45:4d:60:64:9e:12:ee:2c:ed:2e:
         30:89:49:6b:f9:29:e2:63:3f:ff:e0:a8:fa:1d:ea:65:aa:fa:
         24:d1:b0:75:bd:68:75:2e:21:c6:59:08:01:92:b4:3d:71:c2:
         d6:4c:73:cb:5e:eb:19:86:81:34:e4:af:c1:71:64:00:5e:81:
         b0:b5:df:f6:dd:42:9d:f7:3f:60:72:e3:78:e2:41:8f:6e:12:
         57:d9:90:6d:bc:88:c1:2a:e9:f9:1c:b4:4c:cb:89:b0:4f:b2:
         2d:3c:9d:00:65:77:34:3d:b3:69:11:19:1e:18:4e:b2:17:5f:
         1f:3d:9d:1e:be:00:d4:b6:28:9a:a5:bc:fd:21:26:1d:df:f8:
         a9:02:4f:23:36:f3:91:82:01:fe:a3:8f:89:a9:d2:07:53:27:
         5f:39:9b:0a:36:43:7b:86:c7:21:9c:e0:0e:2c:5b:60:42:c8:
         83:5b:3d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:01 2026 by rpki-client