Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.mft
File:                     og1pGrGc3PKKmJbL9aegr0uWHpg.mft (raw, json)
Hash identifier:          EJxY9bdLZiBiF8vKVJwptaNz+oc+lk77RpBdT16PfUg=
Subject key identifier:   5D:49:81:D3:91:FB:4A:F4:69:E8:D7:A3:05:CA:73:4B:87:38:D4:15
Authority key identifier: A2:0D:69:1A:B1:9C:DC:F2:8A:98:96:CB:F5:A7:A0:AF:4B:96:1E:98
Certificate issuer:       /CN=a20d691ab19cdcf28a9896cbf5a7a0af4b961e98
Certificate serial:       019F81F9A2B88508DBA21D961BE4C2F42052
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.mft
Manifest number:          38
Signing time:             Tue 21 Jul 2026 00:00:48 +0000
Manifest this update:     Tue 21 Jul 2026 00:00:48 +0000
Manifest next update:     Wed 22 Jul 2026 00:00:48 +0000
Files and hashes:         1: 1o81zyNcM9MSku-v0xf71Uv_MPw.roa (hash: 6slMk7dzclSOVP1ypShBwVG/J1PJZPJZkfccR+15zhA=)
                          2: 7anxdhWu5NuuVfkXh8bG9nDr-ZA.roa (hash: nAtI6W4M1c0vsQcQPICfweTzeaicv4tPcI6rzxIYt3U=)
                          3: Ht4gLytEcp_KuBqBAxhc4TGmrqY.roa (hash: Ku7KdI3THuaF+2J+NEcq3D/LPC2M+x1PZP/Vfd+uHGA=)
                          4: TofV3AYiLol1nK_ziXIWs1U6cns.roa (hash: BA580/kzSfVKR3Nb6YAQorHKRZ3iII+XXZW26eOjuv0=)
                          5: og1pGrGc3PKKmJbL9aegr0uWHpg.crl (hash: 9PAC3FYc7kZvDcwePDD8CCYYwL8tyHpGVgdnDgFLfD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:81:f9:a2:b8:85:08:db:a2:1d:96:1b:e4:c2:f4:20:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a20d691ab19cdcf28a9896cbf5a7a0af4b961e98
        Validity
            Not Before: Jul 21 00:00:48 2026 GMT
            Not After : Jul 22 00:00:48 2026 GMT
        Subject: CN=5d4981d391fb4af469e8d7a305ca734b8738d415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f3:f7:d0:d4:db:3d:73:b5:36:3a:97:e0:61:
                    88:32:63:b8:46:dc:bc:89:2c:14:a5:2d:5b:e9:17:
                    ce:8e:8b:76:4f:28:d1:97:a8:a3:63:e8:96:9f:c9:
                    e4:f8:b1:4c:ea:c3:6b:2f:71:22:96:52:57:a0:2d:
                    07:80:89:93:d9:bc:48:61:1f:2a:45:60:e7:dc:f4:
                    94:18:39:0b:4a:24:79:e9:f1:ba:62:b9:b9:80:e7:
                    4f:72:57:bd:9b:fc:88:40:33:03:9b:13:34:2f:9c:
                    c2:55:e0:7b:37:4c:fa:fd:f8:b4:42:f7:65:c2:23:
                    4f:d9:e0:23:61:f8:6d:17:ad:be:ed:c2:bf:47:23:
                    40:a0:5a:4f:af:c7:97:29:c8:44:fd:35:0d:bf:2e:
                    8a:04:23:75:af:09:48:1a:af:df:8d:c5:26:7e:0d:
                    08:8d:c2:cd:ed:5d:16:29:7a:89:7a:07:b6:57:0c:
                    2e:17:1e:57:02:01:e6:c3:c1:0d:7e:e6:08:ce:f0:
                    6d:11:8a:a5:02:2a:0e:cf:3e:cf:ea:2e:e8:f8:83:
                    bb:11:c0:3c:39:4f:58:8e:bb:30:a3:06:18:18:7e:
                    9e:a3:09:a6:e6:e6:ac:c7:6c:63:2a:db:e9:a5:5b:
                    b5:73:02:bf:ed:fc:af:a4:2c:35:11:cd:83:c0:e1:
                    29:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:49:81:D3:91:FB:4A:F4:69:E8:D7:A3:05:CA:73:4B:87:38:D4:15
            X509v3 Authority Key Identifier:
                keyid:A2:0D:69:1A:B1:9C:DC:F2:8A:98:96:CB:F5:A7:A0:AF:4B:96:1E:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:67:21:5d:31:29:35:fa:ba:8b:a0:50:45:0c:1b:1a:be:e9:
         07:a0:ce:ec:96:a2:5d:b9:6f:cf:be:eb:9b:1b:21:76:c0:db:
         a5:41:ca:78:22:ec:db:6a:9c:f1:40:85:de:f4:33:05:49:ec:
         61:11:cb:6d:81:6c:fa:60:07:17:30:db:26:89:3a:0f:9f:b0:
         86:c4:a1:86:15:91:07:91:dc:ec:d4:b2:3b:4c:1a:4c:39:2c:
         bf:c2:42:b0:f7:03:c2:00:1f:30:c3:b3:bc:00:fe:7d:07:43:
         fb:93:7d:dd:95:47:21:5a:ca:3d:92:d5:e3:c0:48:c4:91:1e:
         40:15:ba:56:ff:3d:29:2a:24:88:ac:c1:79:d2:aa:80:1b:dd:
         60:bf:74:86:08:16:a8:b9:5e:4f:e4:21:94:b0:44:dc:95:df:
         c6:26:ae:ed:37:cb:ba:c8:80:16:f3:f6:d1:d6:e9:3b:d2:cc:
         d8:c5:05:f0:ef:2f:3d:99:76:f9:47:68:b7:26:49:43:8e:ed:
         84:2e:71:61:dd:20:25:3b:6e:00:17:c3:21:3e:2d:e5:fb:a3:
         3a:bd:97:33:1f:9a:ea:70:42:64:d9:de:21:4f:d7:1d:db:97:
         c5:b1:08:f3:4a:52:1c:32:8e:37:9e:59:72:b1:59:d0:68:a5:
         23:f6:00:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:48:42 2026 by rpki-client