Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
File:                     oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json)
Hash identifier:          1nu62fSWlYwwAhcjzhT2WSgqQpcYWVU7179IzGO8stE=
Subject key identifier:   EF:4C:47:78:AF:FC:BB:41:BC:2D:1F:93:15:4B:F0:40:4C:D8:7D:E3
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Certificate issuer:       /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial:       019FA0DFC08A0AA094DC8F359FD203A622AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
Manifest number:          096D
Signing time:             Mon 27 Jul 2026 00:00:46 +0000
Manifest this update:     Mon 27 Jul 2026 00:00:46 +0000
Manifest next update:     Tue 28 Jul 2026 00:00:46 +0000
Files and hashes:         1: 3_ICGJ04_o-B78xtxe-BL1771oM.roa (hash: ISb9BZPlnND5DSOlgTsgHag+YAm+Sabx40NlDe58dfY=)
                          2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: vic3p8swmPFyPF0ZDOtVXQ2MGgMqNpd+uQS+J5i6zh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:df:c0:8a:0a:a0:94:dc:8f:35:9f:d2:03:a6:22:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
        Validity
            Not Before: Jul 27 00:00:46 2026 GMT
            Not After : Jul 28 00:00:46 2026 GMT
        Subject: CN=ef4c4778affcbb41bc2d1f93154bf0404cd87de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:9d:11:06:61:13:8e:4a:69:eb:3e:22:ad:
                    61:52:16:2c:84:dd:01:91:f4:05:97:5b:4f:cc:ea:
                    6f:2f:d5:c7:2d:d0:ca:cf:59:38:99:a0:7e:0a:00:
                    12:61:a5:b5:65:2c:f3:86:a7:91:e5:ca:04:d3:9d:
                    12:f6:76:3f:58:ec:d0:ef:0b:59:7a:70:03:f0:c6:
                    09:b3:c1:dc:31:3b:62:02:4c:b3:06:53:a5:a2:1a:
                    21:8b:7e:37:82:e1:4d:31:43:b6:9c:fa:04:5a:01:
                    33:72:e0:25:52:9d:4f:47:34:b1:c3:f8:9f:da:35:
                    32:60:bb:21:a1:91:93:e2:f8:86:a8:93:6a:dd:24:
                    74:f7:6c:f7:3e:fe:f9:e7:76:49:fc:9b:c0:1b:6f:
                    a0:36:dd:78:40:99:7f:9d:b4:56:8e:a1:ad:22:eb:
                    75:75:7c:41:e9:0c:12:aa:7c:75:da:d0:70:d3:70:
                    8e:0a:8e:56:51:22:da:3f:6a:70:e1:57:42:d7:2e:
                    8d:84:30:09:34:95:7e:b0:45:8d:d6:51:8a:0c:1a:
                    18:7e:7f:f6:53:13:18:ca:82:2b:30:60:40:79:fd:
                    8a:18:82:56:60:24:72:e8:4f:6c:35:34:3b:2f:14:
                    73:5d:f5:1c:83:b8:62:43:cd:a1:ca:fb:fb:76:2c:
                    ff:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4C:47:78:AF:FC:BB:41:BC:2D:1F:93:15:4B:F0:40:4C:D8:7D:E3
            X509v3 Authority Key Identifier:
                keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5d:ca:c7:a1:e5:b2:c0:ba:30:76:cd:f8:e7:37:a9:64:56:
         d6:9d:2a:77:cd:42:84:d9:f9:bb:1e:9f:c3:78:61:d8:b5:be:
         1a:9a:5f:91:1e:8d:fc:d9:6b:40:c3:59:69:35:c8:30:ab:c0:
         c0:8f:dd:74:cc:f6:45:2b:65:be:7e:fd:62:3a:e6:fd:f7:38:
         86:c1:4e:3b:e5:c3:2b:99:4d:87:f9:b9:c7:57:0c:82:8e:4c:
         85:88:97:ac:0a:e5:8d:94:e1:dc:56:24:01:44:5c:f1:a5:5b:
         c6:e7:dc:b9:8e:08:3e:db:62:a2:71:bd:87:26:6e:71:11:c3:
         00:77:79:8c:25:6c:fb:c4:ed:13:9f:cf:ac:05:4f:5e:98:2f:
         a7:ea:dc:27:cb:fa:fe:8b:5f:00:9a:8a:c0:68:76:b6:cf:e6:
         63:fb:dc:88:25:41:e9:00:04:57:c5:70:d3:60:82:fa:3d:c1:
         5f:88:97:35:8e:9a:5c:a0:c4:0d:4c:26:38:ed:a6:9e:b1:24:
         32:a8:d5:ea:8e:f9:e5:a5:2c:4c:c1:b9:37:3a:8c:c9:71:e0:
         9a:6e:5c:7f:34:61:0c:62:18:19:0c:73:38:53:43:20:2d:80:
         1f:a9:8b:1d:8d:51:46:c1:93:59:6b:c2:97:e9:60:83:24:96:
         bc:e9:f3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:00:17 2026 by rpki-client