Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
File:                     OyYWts97sx77_BU3aGJaTVBLJN8.mft (raw, json)
Hash identifier:          fmFZsD+R9nZ4fo6QqkDMUUnyNnW8u0WF3F+f1VsXXhY=
Subject key identifier:   3E:8B:CF:A0:05:30:AF:7E:3E:25:6D:BD:1A:67:A4:96:B6:18:21:E9
Authority key identifier: 3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
Certificate issuer:       /CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Certificate serial:       019D99621C5B04D8821B004CF9F0A9F674D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
Manifest number:          1452
Signing time:             Fri 17 Apr 2026 03:00:37 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:37 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:37 +0000
Files and hashes:         1: OyYWts97sx77_BU3aGJaTVBLJN8.crl (hash: 0mxz+Nj7wHC79stTIcLfSDz/ppxBj+tIrM8HfqJYgf8=)
                          2: dhPRpJu4rUC_1uCo1oeCV5MMdLc.roa (hash: M2cQBApH+3mET+28roXB36HJcR7W2SatQpMI3H4gi/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:1c:5b:04:d8:82:1b:00:4c:f9:f0:a9:f6:74:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
        Validity
            Not Before: Apr 17 03:00:37 2026 GMT
            Not After : Apr 18 03:00:37 2026 GMT
        Subject: CN=3e8bcfa00530af7e3e256dbd1a67a496b61821e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:29:33:69:4c:cc:1f:da:75:57:4c:5c:36:6c:
                    01:71:01:06:e5:50:93:61:ae:fc:b6:3b:c9:32:12:
                    b3:08:ad:8e:cf:9e:06:58:50:51:fd:68:7d:b5:54:
                    fa:fc:67:fc:56:91:ab:27:a3:57:09:a3:84:e4:ec:
                    70:15:65:01:dd:cf:45:61:d9:e7:0d:e0:5f:30:21:
                    69:b0:8f:d6:c2:8c:02:27:83:40:c4:ce:d1:f6:3a:
                    01:e1:37:e0:83:b3:8e:f8:28:99:40:63:a1:6a:87:
                    45:5d:42:61:60:f6:6a:0b:6b:60:40:74:52:bc:06:
                    12:5f:0f:9b:e3:3e:0a:25:1f:e4:63:2b:f8:47:83:
                    3a:8c:9b:39:fa:70:49:2f:7d:d4:61:46:17:9b:46:
                    07:a8:0b:6f:f8:73:33:41:09:0b:00:91:7a:f6:33:
                    55:e3:89:2d:68:7b:73:28:63:15:46:a7:57:77:55:
                    7a:ef:14:b1:11:dd:04:9c:f0:5d:9b:24:08:cf:56:
                    b2:56:21:f1:45:c3:9d:b9:1b:90:78:cd:74:32:1e:
                    64:12:e8:b2:60:ef:de:c1:d5:48:20:89:60:b7:27:
                    8e:dd:3d:3b:13:58:3a:2e:8a:f7:61:cf:f5:39:f8:
                    77:8b:1f:87:a6:3a:ac:08:b0:58:b8:7a:0e:1b:76:
                    f7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8B:CF:A0:05:30:AF:7E:3E:25:6D:BD:1A:67:A4:96:B6:18:21:E9
            X509v3 Authority Key Identifier:
                keyid:3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:5f:78:f9:67:fa:04:88:36:cf:39:04:64:f9:3b:52:4e:b5:
         cd:78:fc:31:da:5c:b5:97:8d:68:4b:c2:fa:80:b1:97:4f:ff:
         43:00:bf:52:fb:fd:0a:de:32:60:82:e3:d2:e1:76:67:00:c3:
         4b:36:81:42:3b:a1:71:d1:52:b9:8d:1d:a9:0b:be:23:95:ed:
         e5:34:26:ac:b8:4a:2b:98:17:ff:16:93:be:ba:65:e2:b4:1a:
         d5:12:5f:d9:79:9f:58:f7:f2:12:a8:e2:8e:10:11:2f:3a:14:
         9b:e9:58:2b:58:8b:a6:50:41:66:2f:4e:42:ab:11:f9:ab:2b:
         a6:14:18:66:16:cf:8b:48:04:2b:1c:67:38:43:3e:47:c3:a9:
         16:0b:fd:c7:82:30:34:0c:dc:99:8d:68:ce:6b:f5:4d:86:40:
         f6:64:d8:94:d8:92:24:4a:9e:5f:2b:ad:49:8b:ab:dd:5f:21:
         0b:d8:04:8b:fd:2e:26:3a:70:4d:5a:ed:50:ad:1a:2d:f0:7f:
         76:c4:0e:7b:c7:69:99:67:9e:c6:32:39:b1:23:1a:1e:a5:ec:
         4e:cc:e8:fc:fc:d2:dd:eb:af:36:be:86:a2:8d:b7:a4:4a:dd:
         cd:85:f8:db:f5:03:93:79:3b:1b:ec:6b:91:ba:ed:75:83:9a:
         19:3d:07:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:19 2026 by rpki-client