Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File:                     oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier:          y47E6ejEWPKmDKplzpLico+1BguCcbMqLbqvYvKz85w=
Subject key identifier:   2D:2F:0D:A3:5B:BB:AC:EC:95:63:2B:BB:73:20:0C:4B:69:2D:11:36
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer:       /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial:       019D9998E8C8262E010FC0033CA18DF5DA41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number:          18C6
Signing time:             Fri 17 Apr 2026 04:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:28 +0000
Files and hashes:         1: O8JzFk1PWBgx-tr4EXZtg8jcmlQ.asa (hash: NgGatJmK3hx1VDzLByDMsWijy7WzJx6KU+I3UEmcdSE=)
                          2: h0m6chw4hn4GtvHmpEWAbKAv404.asa (hash: VSF4u2R2+TQgBabpqWZM+QC/fWsj+qMNZ83t4AFvT7c=)
                          3: mfvEjWb3rQFbj32_BBadoAv_Y0s.roa (hash: FGRbYmzgAXrFUwzG+mMOatKnvNqH9Ov9gtrQRgDuAmE=)
                          4: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: xyAeErNuIUxc61KlGM/MZUKYv/wmV74dUP6rnEIkp5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:e8:c8:26:2e:01:0f:c0:03:3c:a1:8d:f5:da:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
        Validity
            Not Before: Apr 17 04:00:28 2026 GMT
            Not After : Apr 18 04:00:28 2026 GMT
        Subject: CN=2d2f0da35bbbacec95632bbb73200c4b692d1136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:97:f4:eb:c1:13:60:32:b4:e2:10:0c:aa:38:
                    97:3c:7c:43:b0:34:a1:c0:74:91:d2:83:b5:fd:35:
                    51:8b:04:fe:ac:1a:5a:c3:8f:99:1f:5f:ee:f9:b5:
                    38:87:13:fd:6e:13:7d:ba:d9:e6:38:24:40:3e:b7:
                    c3:60:27:c6:51:e4:32:85:e5:e9:9b:5a:60:e4:d4:
                    03:db:95:9f:2c:0d:3a:d3:cd:2e:b5:93:be:7f:c4:
                    87:39:75:fc:21:36:2b:c6:1e:7e:3a:1f:98:99:8b:
                    bc:8c:e8:4e:b1:e5:12:ba:0d:ab:33:a2:83:a1:37:
                    94:8c:25:df:b6:02:84:18:b4:22:34:73:ff:c6:3e:
                    77:9e:b3:d1:80:9c:87:48:c9:26:45:c9:13:58:b3:
                    10:d7:3c:2c:a1:9e:39:f8:a6:0a:bd:92:74:ad:20:
                    57:6a:a2:b1:3b:52:c4:b1:e9:79:dd:e0:2b:8d:38:
                    49:f9:2d:cc:4c:e0:17:dd:ba:5f:36:26:88:3a:b7:
                    51:fd:2d:9a:71:a7:d5:d9:be:03:bd:23:fb:81:7d:
                    cf:3e:d3:10:8b:e7:43:cf:e0:df:8d:c9:80:29:a2:
                    9b:3c:d1:6c:c3:46:f5:db:0d:b9:4c:80:f6:10:1d:
                    07:ef:39:e0:7e:67:61:e0:54:0b:a1:42:5a:50:e5:
                    b6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2F:0D:A3:5B:BB:AC:EC:95:63:2B:BB:73:20:0C:4B:69:2D:11:36
            X509v3 Authority Key Identifier:
                keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ca:43:1b:65:e9:3e:6b:8e:43:71:f3:8e:0b:fd:31:f3:2a:
         bf:7a:04:91:07:8c:1c:ed:7d:e8:05:cd:93:1d:9a:25:ee:37:
         2b:96:92:6f:db:ab:96:ee:d2:04:82:c0:7e:53:9e:32:65:d3:
         9a:f3:c8:3f:60:20:92:1a:04:99:25:09:3b:9f:ab:ba:eb:87:
         47:b0:2a:af:bc:99:d7:79:94:8e:15:ab:03:51:fb:d2:ec:7a:
         5b:e9:15:0d:f2:4e:14:e8:bb:01:b0:6d:75:a0:20:66:a9:3f:
         2b:ad:d7:d3:ed:df:05:e4:60:97:50:33:db:85:39:29:cb:9b:
         14:16:12:ed:0c:1a:20:f7:c2:e3:fc:db:59:4f:0e:d4:a0:35:
         97:99:32:c4:4f:43:ad:18:43:5b:20:70:70:0c:9b:a6:3e:2d:
         e4:27:90:a5:ab:2a:5a:15:32:f3:5c:db:f5:5a:8b:1a:b5:cf:
         6c:1c:e1:02:72:bf:0a:31:09:89:b5:0d:39:c9:6a:8f:f4:b9:
         e9:61:df:28:f6:e6:e7:06:d1:4d:ea:61:35:04:5c:6e:43:92:
         b0:83:b5:5c:91:72:1e:92:b8:7e:81:fb:65:49:32:8e:f8:fb:
         35:cf:95:20:49:e5:85:89:d5:d4:93:fc:91:c8:be:5b:6b:d9:
         f0:ff:e6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:13 2026 by rpki-client