Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File:                     OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier:          GWVF3hMjHiaahG0PaFffX2Ohv0NODArSHqLeWbnLvqw=
Subject key identifier:   17:12:12:1D:B3:D3:F3:C4:2D:B5:A1:E7:26:34:AB:80:CF:4A:D7:FA
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer:       /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial:       019F11F8723999C7A4316100D6A40966433B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number:          1987
Signing time:             Mon 29 Jun 2026 06:02:02 +0000
Manifest this update:     Mon 29 Jun 2026 06:02:02 +0000
Manifest next update:     Tue 30 Jun 2026 06:02:02 +0000
Files and hashes:         1: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: rUhvBInSPLf/MbdLTUUVxLTcDLSppB0YCXXcaqF2kOY=)
                          2: Q6JObLBeLp3wtiYaWIJ3qZQTM-I.roa (hash: 8OMeNdCrOVu7DLm13oZufQc3RGDGngByCEF598K46Yw=)
                          3: fpgphkHAVC4EKTAhJS44DiaxsvY.roa (hash: 1INMFW9bHkSho9a0wRr4avShYtWQyAKWkemAY5V0/s8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 06:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:f8:72:39:99:c7:a4:31:61:00:d6:a4:09:66:43:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
        Validity
            Not Before: Jun 29 06:02:02 2026 GMT
            Not After : Jun 30 06:02:02 2026 GMT
        Subject: CN=1712121db3d3f3c42db5a1e72634ab80cf4ad7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ea:2e:5f:d5:fa:f0:78:27:7b:e0:aa:f5:77:
                    a0:07:30:b9:e1:b8:1c:31:9e:78:0a:c7:f4:a0:0f:
                    5c:da:77:f1:a3:3d:dd:40:2e:86:76:f5:b0:c9:a8:
                    c0:47:ae:51:ec:f2:89:67:91:44:d7:7b:8b:22:de:
                    38:cb:ca:d7:0f:93:83:97:05:73:b1:e8:64:dc:b7:
                    15:6c:aa:ca:b4:4e:5b:d1:60:1a:22:b3:d3:c2:3e:
                    06:40:ed:1a:67:18:c6:b4:d2:fd:2e:84:06:32:a0:
                    2c:8d:7a:8d:2d:88:98:1a:f3:99:c4:b0:17:4d:ae:
                    87:b4:72:8f:d1:56:c5:13:04:72:f6:46:5f:84:d6:
                    51:ef:1d:22:44:9f:e9:ad:e0:37:ec:35:34:43:ac:
                    87:4b:14:35:a5:5f:a4:e3:00:b8:b0:21:2e:a9:84:
                    17:4e:ab:ff:da:d5:b2:ca:89:07:79:6f:3d:ca:f5:
                    51:72:a3:ba:40:e3:fd:90:66:41:2e:d2:7b:b3:b6:
                    34:da:c1:4c:ee:86:64:44:ff:f8:60:7a:e8:95:7b:
                    23:27:32:52:6e:3a:25:ea:ce:aa:6a:bb:6d:3d:43:
                    67:db:98:cb:b8:9a:96:ed:7a:c5:b6:43:2c:86:94:
                    13:c6:71:29:fe:01:d7:87:4e:ca:3d:e5:b2:94:79:
                    b7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:12:12:1D:B3:D3:F3:C4:2D:B5:A1:E7:26:34:AB:80:CF:4A:D7:FA
            X509v3 Authority Key Identifier:
                keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:73:06:be:b3:55:a0:cb:d4:ea:43:06:1b:fc:81:fe:65:85:
         b8:6c:bb:52:78:ff:4b:24:f7:0a:d0:c0:27:72:63:cd:ea:92:
         ec:82:d5:0f:fa:a6:d4:b8:29:29:5c:1d:04:db:a9:fe:dc:4a:
         e0:01:31:b2:b9:35:4e:ae:c5:3c:ff:19:ed:67:35:07:46:af:
         c0:66:c0:86:9b:e1:2b:c7:42:29:c4:c0:3f:d8:e3:91:da:8f:
         ba:54:a9:ad:30:41:d4:84:70:a6:77:03:36:d8:5f:f3:33:2c:
         40:dd:07:ba:54:b4:3b:50:79:41:c5:e3:db:2a:2c:5a:d9:09:
         15:53:76:dc:8c:8c:ff:69:3b:84:4c:2c:75:a6:b5:1a:ee:36:
         31:3f:b5:20:8f:6b:ec:1e:19:a1:a0:3e:a2:ad:21:bf:b1:0a:
         be:b6:75:0f:63:ed:61:98:6a:db:e3:0d:5c:ed:4b:b4:37:99:
         8e:3c:20:65:e3:a3:8c:e5:38:e7:5d:21:5c:82:f4:33:54:a4:
         79:45:33:61:46:5e:02:87:38:ca:c9:b6:ed:a1:5e:a4:b6:55:
         53:28:fa:af:92:62:f6:74:cf:0a:b2:b5:20:b6:cc:27:df:94:
         6a:63:77:c1:7b:c6:a9:0f:12:1f:15:d8:59:c6:71:b2:08:a3:
         1a:a6:49:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:44:59 2026 by rpki-client