Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
File:                     OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft (raw, json)
Hash identifier:          ObOWnS1v5KJA+DP9J25S2J3Qg7M10NqGuK/UnqNXLtY=
Subject key identifier:   27:86:81:C3:B1:A9:01:5B:AD:AC:8B:AC:06:F2:EB:2A:51:38:B9:E5
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Certificate issuer:       /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial:       019F1A1F311B04BA73253CF28ECD785AC8DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
Manifest number:          0F1C
Signing time:             Tue 30 Jun 2026 20:01:19 +0000
Manifest this update:     Tue 30 Jun 2026 20:01:19 +0000
Manifest next update:     Wed 01 Jul 2026 20:01:19 +0000
Files and hashes:         1: 1AdLwVTQwnRojaJc6oKg4bE5e10.roa (hash: SmldC7KFTFrB2ovoO23QX0S7PhV2KBqhDfb2PIUZ9dY=)
                          2: OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl (hash: frtjpvswJH4HovTg8EXSRaed7xNY47kb7t83fSQEtZc=)
                          3: RYsY-o2i4jJuo5LcGcM8XUCbb9c.roa (hash: Dw7b6pkuG5rO21BY1jXBfmGu/ri7kYZ0iuN6r4DYx0Q=)
                          4: YAzw4t4zF4HrK6DQM0Hi6OJnv_c.roa (hash: Czpsw7Ht+JmwRHsAFUGdIdcpmViWugcfHRbmpORJDMk=)
                          5: i1ce_KCZyzzJnWCLHJltrqd5osU.roa (hash: YFwwgtjx89C2fEmhpNXxjUv1MUQKaMCAp+nvJdfMp5o=)
                          6: qw0bNos2uMNz09JenRAlkTtNmd8.roa (hash: SLKj00aaETL606oUEHzZc3k3yjfYWagWu8LRBWMxnBA=)
                          7: sYth0C5gNTA4Nn0ZVlj2vFu-rcA.roa (hash: YQlDl2GO98hMqxb9t2YAM1lWkbesF46HgOB5GJrP+Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:1f:31:1b:04:ba:73:25:3c:f2:8e:cd:78:5a:c8:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
        Validity
            Not Before: Jun 30 20:01:19 2026 GMT
            Not After : Jul  1 20:01:19 2026 GMT
        Subject: CN=278681c3b1a9015badac8bac06f2eb2a5138b9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:69:b9:b0:b8:16:0e:20:a4:ff:9d:fe:81:0e:
                    80:35:2c:b3:4e:b0:3d:03:7d:a8:b3:8a:fe:75:6a:
                    7f:00:29:2b:2f:af:99:f7:e3:56:bd:83:dc:9d:c5:
                    cd:b2:61:b5:8f:a1:b2:5e:b2:f4:d3:69:ee:a6:3f:
                    18:93:bc:80:46:fe:af:3b:ea:e2:a2:75:56:1d:fd:
                    2d:45:2b:b8:f3:e0:e3:7a:7f:0e:52:3c:e7:66:02:
                    66:10:f6:1b:55:7b:d3:39:c9:ea:e8:fd:be:d6:11:
                    67:fb:dc:74:ed:75:b8:4e:d4:09:5b:75:75:6c:db:
                    4b:d7:7e:77:23:3a:82:2c:0c:f9:2e:a9:49:d7:e4:
                    10:bd:d8:16:41:3e:68:59:fd:d6:ca:6a:85:fa:7e:
                    7f:1b:5b:4c:b6:e5:68:69:82:3f:e4:fd:8b:45:4d:
                    3c:76:a7:c9:35:c2:8e:da:5e:6d:fc:93:40:cd:88:
                    07:a9:38:fe:91:d5:39:e7:fa:4e:0c:5c:42:cd:98:
                    b1:97:f2:91:92:e5:6e:1e:08:db:1e:1f:15:69:1e:
                    fc:f0:03:57:f9:58:74:b8:39:f8:8f:73:c1:5e:5b:
                    74:f7:b3:60:29:77:de:54:16:2f:e6:3a:3e:bf:29:
                    47:d2:0d:c5:19:5a:58:f2:66:60:9c:fd:d5:7b:02:
                    98:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:86:81:C3:B1:A9:01:5B:AD:AC:8B:AC:06:F2:EB:2A:51:38:B9:E5
            X509v3 Authority Key Identifier:
                keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5e:f2:23:66:b7:1f:b2:6f:cc:e9:04:7c:54:b1:68:41:58:
         63:b7:31:7d:75:8f:9b:57:2e:c0:b9:f4:07:b6:af:3b:c4:4e:
         a9:6d:41:e2:e4:7d:7a:97:e2:e9:d2:f0:a7:47:94:7b:a3:2a:
         31:c2:d6:58:67:de:d4:84:95:c5:a9:db:87:c6:0a:4c:8a:80:
         2e:5b:8b:f3:84:b3:fd:f5:21:7a:6f:a9:d8:80:dc:28:a4:ed:
         60:55:03:ce:b8:72:16:e4:6c:89:a9:e9:a8:6d:5c:92:b7:f3:
         6e:54:0b:e1:d2:ca:b5:18:57:ec:83:8c:e4:c2:69:35:d0:76:
         4a:13:bd:6a:17:e4:d9:5a:94:d1:49:40:6d:51:6a:32:a7:51:
         f6:6d:fa:38:49:4d:45:6f:91:da:08:78:91:10:43:d6:ed:85:
         21:c2:1e:d7:46:06:d0:af:df:40:69:3b:a8:d3:21:13:16:96:
         b1:ec:ad:c6:d5:6c:65:db:05:d0:7c:40:49:98:ff:39:e0:e4:
         db:47:f3:8f:7a:66:62:3f:35:a8:0c:93:ed:48:64:9b:5e:51:
         51:e7:e8:a4:a9:42:96:59:ef:25:6a:58:ba:a3:47:2b:14:c8:
         2c:b6:05:44:1d:bf:aa:75:cc:22:85:39:d5:34:15:85:4b:7a:
         20:27:5b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:40:22 2026 by rpki-client