Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
File:                     C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json)
Hash identifier:          7rsl2Aglw237OeGu4GRvXmNSbZhVu+WDorDMaYT15Is=
Subject key identifier:   14:CC:33:8D:43:C1:38:61:37:0A:00:B8:B6:C4:A6:5F:9C:3B:08:34
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Certificate issuer:       /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial:       019D9A075F04041D39A6ECE67103FF84E61A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
Manifest number:          0D82
Signing time:             Fri 17 Apr 2026 06:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 06:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 06:01:07 +0000
Files and hashes:         1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: XymoJUdv4DJtcy/HuINcsceffWfy7RxVY3WIeh4AtYE=)
                          2: ReyUn6tKBOELp3PqtRdTiZN56xc.roa (hash: o1NTV7KD/4RS51aQo1dWC0QW0kteepHZMeaZiAB8YZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:5f:04:04:1d:39:a6:ec:e6:71:03:ff:84:e6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
        Validity
            Not Before: Apr 17 06:01:07 2026 GMT
            Not After : Apr 18 06:01:07 2026 GMT
        Subject: CN=14cc338d43c13861370a00b8b6c4a65f9c3b0834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:35:fd:de:3b:f2:94:a3:c8:68:4d:ed:93:42:
                    6a:89:42:e5:bc:a0:68:ef:6f:d3:8f:30:e8:18:68:
                    dc:58:79:93:33:a1:f2:52:d8:39:a4:cd:56:16:33:
                    08:e2:62:e5:5f:77:f7:dd:71:fe:33:ab:e9:e4:1d:
                    4b:7b:34:43:63:d7:fa:c3:0d:2d:45:bc:00:cf:0c:
                    84:c6:6b:dc:e7:84:26:55:ec:fa:72:b9:13:a8:39:
                    e6:4c:1c:e6:1a:15:db:68:d5:42:f5:b6:ba:53:7f:
                    3c:41:bd:f9:aa:79:ad:3f:a8:8b:79:e6:08:e5:e4:
                    b8:9b:c0:c0:83:de:a9:22:3b:f6:86:d9:91:43:d0:
                    b5:d8:a0:53:b5:5f:7c:f7:53:45:46:10:1e:98:5c:
                    6d:d9:47:80:16:96:6a:46:84:26:42:5d:67:ca:b5:
                    be:51:5f:d7:7c:a1:51:df:b5:16:51:e2:44:77:0b:
                    f7:66:98:55:13:25:c9:6d:10:f4:de:5b:bc:89:c1:
                    9e:e1:f9:15:5b:26:58:b5:c8:56:0d:89:54:05:54:
                    64:83:24:8f:f0:84:47:fb:bb:d5:07:e3:7d:54:85:
                    70:e7:5d:c3:87:59:ee:3d:3b:c4:98:85:80:3a:b7:
                    46:53:0c:c4:c0:0a:5d:cb:74:c1:90:bf:a1:ca:39:
                    c6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CC:33:8D:43:C1:38:61:37:0A:00:B8:B6:C4:A6:5F:9C:3B:08:34
            X509v3 Authority Key Identifier:
                keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:1d:f1:fb:f0:62:3e:ce:df:50:2f:59:f8:81:ad:56:8f:c5:
         17:a6:24:1f:d5:b0:f0:7c:14:a3:76:b4:1e:63:15:c6:1b:30:
         6f:4e:7e:db:d1:65:3d:54:76:7d:29:d8:bc:c0:1a:2f:87:53:
         f3:72:b0:30:4e:8c:d0:1a:80:5d:6a:43:5b:a6:0c:0c:b0:a7:
         5a:9c:d4:d2:9d:d9:b0:bb:bd:f2:87:9c:09:59:52:12:8b:74:
         d1:3f:be:cf:cc:e7:01:ca:f0:93:f8:af:64:e5:44:ad:d3:61:
         ca:b1:15:50:27:c8:93:52:d7:a5:fe:e1:a5:78:0e:f5:16:ef:
         d9:74:eb:7e:15:45:bd:b3:18:25:9c:1a:4c:ae:e1:dc:5c:98:
         95:88:36:ff:e2:d5:e5:a0:d5:42:45:71:94:dd:ad:4b:d5:50:
         d6:75:a2:07:d5:8c:51:27:ea:81:49:3c:38:7c:6f:cc:e5:5f:
         fe:db:e2:e6:64:d0:38:4f:13:99:dc:e5:19:e0:6b:1e:1d:1d:
         32:3c:35:92:cc:6c:2f:c6:e8:8e:e8:c8:ef:76:79:0b:cb:4d:
         80:b6:58:3a:6a:65:bf:7e:8e:f9:2e:6b:db:21:c1:a5:ec:06:
         7f:77:e1:f8:ec:33:35:c5:6a:17:bd:66:c6:07:78:22:4b:91:
         e2:29:d9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:29:57 2026 by rpki-client