Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
File:                     OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft (raw, json)
Hash identifier:          StXYl+2UPbxOsjIa+IHPzdh+9lofgWsHSyeN1QI8HZ0=
Subject key identifier:   13:82:A8:B0:85:0C:31:CD:6B:19:78:27:21:00:10:06:29:57:4C:B1
Authority key identifier: 3B:07:64:71:3E:5C:8B:1D:7D:2E:CE:04:8E:4E:BC:13:94:28:ED:C3
Certificate issuer:       /CN=3b0764713e5c8b1d7d2ece048e4ebc139428edc3
Certificate serial:       019D9CD1FE2F7C0D9E4D05D08775DC8075E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
Manifest number:          B3
Signing time:             Fri 17 Apr 2026 19:01:40 +0000
Manifest this update:     Fri 17 Apr 2026 19:01:40 +0000
Manifest next update:     Sat 18 Apr 2026 19:01:40 +0000
Files and hashes:         1: LcI_BXMvY5aSE3vIzLyzwrL0zuw.roa (hash: slELEFAipdts8+oeGkNV3YMhCrDdwvjfJkdcNFFBnug=)
                          2: OwdkcT5cix19Ls4Ejk68E5Qo7cM.crl (hash: f9u9Yq1k+ejuWlcCBd1w1Z0BBYoGBQpMEnJTgIF47iA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:d1:fe:2f:7c:0d:9e:4d:05:d0:87:75:dc:80:75:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0764713e5c8b1d7d2ece048e4ebc139428edc3
        Validity
            Not Before: Apr 17 19:01:40 2026 GMT
            Not After : Apr 18 19:01:40 2026 GMT
        Subject: CN=1382a8b0850c31cd6b1978272100100629574cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8e:07:bd:7c:f9:c7:aa:54:76:ce:b1:69:a1:
                    94:69:8a:d5:a1:c8:66:c3:16:21:0c:f9:ed:e2:96:
                    12:2b:9b:ca:d6:c8:30:ea:92:b9:ab:ff:30:1a:26:
                    59:5c:87:83:dd:51:e0:94:4e:76:75:4a:d7:30:20:
                    11:d2:cd:75:ca:6e:9d:a5:c2:f4:90:62:bc:4e:df:
                    f8:92:ef:91:73:ee:d3:c9:5a:81:14:7f:98:73:b1:
                    d5:f0:d0:f4:ee:27:74:60:37:57:47:7c:d9:cb:d6:
                    d1:be:40:c5:72:65:a8:95:26:63:d1:18:da:2d:bb:
                    58:4f:3a:8d:59:12:2e:d1:9a:fa:60:e7:36:f9:e3:
                    9a:c6:75:c5:c0:57:0d:18:d1:42:31:22:e2:c4:2d:
                    fc:a8:d9:41:a0:b0:0e:d8:b9:d0:9b:70:13:ee:90:
                    a1:00:77:f5:2c:e1:c9:cb:0c:07:d0:0a:ec:98:ef:
                    c1:4a:cc:20:f3:35:03:08:bb:54:08:f3:e1:03:d6:
                    de:47:fe:d7:9d:26:34:87:67:f2:bd:24:c9:7e:a2:
                    63:8a:40:b9:3d:fc:a7:3c:42:f3:d8:e6:24:ad:42:
                    29:49:6c:b8:2d:94:39:59:a4:52:f6:02:e4:b6:c9:
                    41:3b:7f:c9:64:c1:6e:5a:51:67:5d:9c:0c:0b:a3:
                    6a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:82:A8:B0:85:0C:31:CD:6B:19:78:27:21:00:10:06:29:57:4C:B1
            X509v3 Authority Key Identifier:
                keyid:3B:07:64:71:3E:5C:8B:1D:7D:2E:CE:04:8E:4E:BC:13:94:28:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:53:6a:63:1d:a9:4d:d1:83:5a:56:65:98:b6:05:03:eb:74:
         7d:89:99:ce:73:a7:dc:e9:d7:6e:da:8a:56:4d:32:1d:ec:79:
         1b:0c:b4:3f:e7:61:50:88:e4:12:81:3b:ff:7a:1b:5d:bc:13:
         47:55:da:ca:e4:c9:96:10:78:3b:fe:39:e5:f0:a2:de:39:96:
         dd:20:86:67:81:4f:35:74:c8:76:fd:b3:94:0e:6f:03:f8:94:
         f9:c3:74:76:82:7c:07:86:db:fa:10:3c:dd:93:46:f7:80:3a:
         09:c9:63:b3:34:fe:da:6c:e2:a2:8d:ab:88:e7:15:55:2a:a2:
         e6:ba:d6:40:1d:cd:c1:b8:70:a9:0e:95:77:01:f8:b5:2d:0b:
         36:65:a9:b0:0a:04:27:47:a8:40:61:29:a7:85:2a:46:2c:be:
         8c:f8:9e:6b:22:c6:b9:13:46:11:25:bc:ce:02:82:38:c4:fd:
         0c:e8:52:3c:dc:50:75:0d:23:7a:5a:58:be:54:f6:cb:8c:b6:
         36:71:75:67:77:8a:5c:63:b7:43:c9:dd:92:ba:e4:7e:61:b6:
         48:90:31:cb:62:ee:70:9b:7a:02:1f:ac:bc:df:9c:17:ff:38:
         bd:fd:0e:7a:58:f0:26:34:a0:2c:0b:a4:a0:47:97:3a:1c:47:
         c2:be:77:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2c0f4vfA2eTQXQh3XcgHXmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDc2NDcxM2U1YzhiMWQ3ZDJlY2UwNDhlNGViYzEzOTQy
OGVkYzMwHhcNMjYwNDE3MTkwMTQwWhcNMjYwNDE4MTkwMTQwWjAzMTEwLwYDVQQD
EygxMzgyYThiMDg1MGMzMWNkNmIxOTc4MjcyMTAwMTAwNjI5NTc0Y2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro4HvXz5x6pUds6xaaGUaYrVochm
wxYhDPnt4pYSK5vK1sgw6pK5q/8wGiZZXIeD3VHglE52dUrXMCAR0s11ym6dpcL0
kGK8Tt/4ku+Rc+7TyVqBFH+Yc7HV8ND07id0YDdXR3zZy9bRvkDFcmWolSZj0Rja
LbtYTzqNWRIu0Zr6YOc2+eOaxnXFwFcNGNFCMSLixC38qNlBoLAO2LnQm3AT7pCh
AHf1LOHJywwH0ArsmO/BSswg8zUDCLtUCPPhA9beR/7XnSY0h2fyvSTJfqJjikC5
PfynPELz2OYkrUIpSWy4LZQ5WaRS9gLktslBO3/JZMFuWlFnXZwMC6Nq4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOCqLCFDDHNaxl4JyEAEAYpV0yxMB8GA1UdIwQY
MBaAFDsHZHE+XIsdfS7OBI5OvBOUKO3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dka2NUNWNpeDE5THM0RWprNjhFNVFvN2NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82NWM2NjAtMjVhZi00ZmIzLWFmN2Mt
ZTc0MTk5OWE0ZDYyLzEvT3dka2NUNWNpeDE5THM0RWprNjhFNVFvN2NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC82NWM2NjAtMjVhZi00ZmIzLWFmN2MtZTc0MTk5OWE0ZDYy
LzEvT3dka2NUNWNpeDE5THM0RWprNjhFNVFvN2NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu1NqYx2p
TdGDWlZlmLYFA+t0fYmZznOn3OnXbtqKVk0yHex5Gwy0P+dhUIjkEoE7/3obXbwT
R1XayuTJlhB4O/455fCi3jmW3SCGZ4FPNXTIdv2zlA5vA/iU+cN0doJ8B4bb+hA8
3ZNG94A6CcljszT+2mzioo2riOcVVSqi5rrWQB3NwbhwqQ6VdwH4tS0LNmWpsAoE
J0eoQGEpp4UqRiy+jPieayLGuRNGESW8zgKCOMT9DOhSPNxQdQ0jelpYvlT2y4y2
NnF1Z3eKXGO3Q8ndkrrkfmG2SJAxy2LucJt6Ah+svN+cF/84vf0OeljwJjSgLAuk
oEeXOhxHwr53ww==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:30:31 2026 by rpki-client