Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
File:                     OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft (raw, json)
Hash identifier:          +hzraXdcqnp23PAsGq3d+1T7ae6eouoOvd/WQMhT/w8=
Subject key identifier:   C9:CA:B1:74:4D:75:A4:B8:F8:DB:6E:65:D0:EC:DC:EE:26:3A:B8:DD
Authority key identifier: 39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
Certificate issuer:       /CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Certificate serial:       019D992B59E69F54FEA0D8908E762B9F46DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
Manifest number:          1829
Signing time:             Fri 17 Apr 2026 02:00:48 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:48 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:48 +0000
Files and hashes:         1: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl (hash: IKHmPKLLFsBYGhUT+ZJCZx8uJ/CN7z9qroyN6o48o1w=)
                          2: XxJvVHyVyNVlWKJ8yOghwV4J34c.roa (hash: V+qJ9fQgut9NafTDw26E/iwTZPqrHnQr/6KuyJ7ucM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:59:e6:9f:54:fe:a0:d8:90:8e:76:2b:9f:46:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
        Validity
            Not Before: Apr 17 02:00:48 2026 GMT
            Not After : Apr 18 02:00:48 2026 GMT
        Subject: CN=c9cab1744d75a4b8f8db6e65d0ecdcee263ab8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2f:27:c5:56:de:bb:cb:a3:36:fc:6d:11:af:
                    41:63:fc:cf:10:ec:ae:c0:2f:c2:3f:87:2e:c2:89:
                    d9:95:91:42:af:ee:dc:48:86:8f:f9:93:6d:d5:99:
                    01:0c:36:99:f0:cc:5c:38:84:21:10:a2:4c:40:f5:
                    ff:f8:f3:9b:64:14:f5:92:3e:0c:fe:d9:7a:25:f7:
                    f9:f3:b4:29:bb:c4:8e:86:e7:b7:df:5c:7f:3a:02:
                    d8:4c:fd:1a:48:6d:5a:83:2f:ad:7f:a5:61:96:20:
                    06:43:30:de:dc:b6:21:f7:e1:49:f4:2f:ec:ac:fb:
                    b4:6f:88:c9:ae:38:2d:cd:aa:1b:a3:14:b7:8f:ec:
                    92:75:7b:46:da:4e:4a:6a:dd:36:12:85:7a:23:8f:
                    52:93:5d:84:d5:d9:5a:bb:f3:64:6a:ae:75:b4:2c:
                    aa:f6:93:2b:0f:21:5a:e6:14:67:dd:9b:ea:70:b9:
                    88:86:cf:dd:41:bc:7e:c5:63:c8:1d:dd:02:e5:31:
                    3a:2c:e1:66:92:61:78:13:5a:c6:29:0d:0f:c2:f1:
                    26:09:1b:45:64:07:54:33:4e:76:db:7a:0e:eb:74:
                    92:97:d7:74:be:ac:dd:d5:09:34:5c:f7:5e:cc:a7:
                    1f:ad:5e:53:8b:3f:3d:69:99:e6:ff:cb:25:1e:89:
                    fe:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CA:B1:74:4D:75:A4:B8:F8:DB:6E:65:D0:EC:DC:EE:26:3A:B8:DD
            X509v3 Authority Key Identifier:
                keyid:39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f5:04:61:66:9a:06:36:69:27:e2:81:09:24:f0:5b:aa:16:
         f3:f4:7b:a9:72:4a:a8:76:0a:98:f6:e8:bb:b1:7a:4a:b8:21:
         a8:ce:47:63:3f:98:14:d1:60:51:89:a4:f7:93:99:c7:8a:27:
         18:36:cc:62:06:0f:78:80:af:65:e9:e7:d7:02:02:ac:d6:66:
         64:cc:16:40:95:08:fe:05:ca:80:be:50:72:c0:48:f8:33:c8:
         00:e7:22:8a:34:4b:ce:9a:d5:17:e9:6f:0c:47:0a:f1:f6:8d:
         87:54:58:ab:2f:4a:a0:c5:aa:15:fd:f4:7d:7b:46:5e:37:62:
         30:7d:91:5e:fd:4f:1d:87:82:29:00:db:9b:0f:f9:fd:d0:5a:
         f3:78:8f:46:74:5c:d2:11:5a:89:8d:2c:34:72:99:9c:68:70:
         c8:dd:71:26:45:16:de:df:99:94:59:db:35:b2:63:a2:66:56:
         60:9d:f3:fc:13:61:eb:92:b0:b8:03:b1:d5:c5:47:c3:b3:97:
         31:89:72:35:a2:98:47:79:a6:e3:75:8e:dd:9f:a8:8d:57:7c:
         61:b6:40:b9:c3:61:d8:c3:11:00:62:bf:c4:07:63:c3:4f:96:
         0c:99:40:cb:c2:37:1d:61:c7:ee:3a:f4:b4:d4:56:c4:5a:45:
         9e:4b:19:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:55:50 2026 by rpki-client