Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
File:                     oLwgSfIYtv2rytdZTCUjso2kd8E.mft (raw, json)
Hash identifier:          4yg1jrlsbO3UM0JpOL8t0jhvcx76vu4U0HkKRwElBok=
Subject key identifier:   6A:93:98:AD:F9:1A:D9:8F:07:AD:E9:7C:EC:F5:CB:B5:3C:7E:86:AC
Authority key identifier: A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1
Certificate issuer:       /CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
Certificate serial:       019EB7A1A761A7567ECD5683E42F52D79936
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
Manifest number:          18EA
Signing time:             Thu 11 Jun 2026 17:01:25 +0000
Manifest this update:     Thu 11 Jun 2026 17:01:25 +0000
Manifest next update:     Fri 12 Jun 2026 17:01:25 +0000
Files and hashes:         1: oLwgSfIYtv2rytdZTCUjso2kd8E.crl (hash: ORVkHni1/PerCDgNABpx1ljtECXlSqmiyRlG/vK5yAk=)
                          2: p7q0kuT4l_QfTZ5_ImIne2o94fw.roa (hash: +S1UVYMeaTeGs9fWcZKSGrpvJ3bbJy0eiN+e0mJvcII=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 17:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a1:a7:61:a7:56:7e:cd:56:83:e4:2f:52:d7:99:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
        Validity
            Not Before: Jun 11 17:01:25 2026 GMT
            Not After : Jun 12 17:01:25 2026 GMT
        Subject: CN=6a9398adf91ad98f07ade97cecf5cbb53c7e86ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:7d:4e:50:66:74:75:a8:90:51:ba:fd:a9:
                    3b:c7:af:a1:1c:89:9c:e1:16:5a:e3:b3:75:23:f2:
                    4f:c7:63:9c:8a:26:20:62:aa:ed:d1:82:e4:9f:e4:
                    68:11:75:5e:3d:4e:53:45:e8:c3:c6:6d:16:6d:94:
                    28:fa:78:4b:01:ec:aa:11:65:ec:b2:0e:b6:77:07:
                    1b:f2:a6:77:03:b7:b0:1a:a3:43:ea:d9:62:22:1b:
                    81:05:27:e8:95:24:89:c6:2c:b8:41:b3:d4:2b:ad:
                    1b:12:c2:64:ed:56:fb:5b:ad:28:9f:a0:60:65:d5:
                    ff:55:8b:5f:76:af:af:ab:a7:4f:3f:11:f6:8a:a8:
                    5c:4a:f2:5f:7c:4e:35:86:e3:ee:ae:10:30:3c:c9:
                    77:75:a6:c5:e0:78:ee:d7:19:ed:a5:18:92:1f:04:
                    81:49:74:fe:f6:fd:14:4d:15:fb:96:21:16:fe:17:
                    33:af:28:22:e5:db:62:1d:00:ef:1a:1a:66:a0:48:
                    e9:fc:53:24:f4:b1:57:33:d1:b3:00:ac:39:87:9c:
                    56:0e:18:26:d2:97:c8:14:32:25:77:d1:e5:9c:85:
                    bf:91:7f:4e:32:fb:aa:fa:08:04:e6:21:f4:1f:85:
                    a7:0b:c3:a6:c3:6d:0c:51:20:2a:a1:66:6c:03:8c:
                    7a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:93:98:AD:F9:1A:D9:8F:07:AD:E9:7C:EC:F5:CB:B5:3C:7E:86:AC
            X509v3 Authority Key Identifier:
                keyid:A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:81:be:e7:a4:1b:de:24:c3:06:bf:a7:9f:57:e0:e4:ab:5f:
         36:a5:11:25:7e:5d:ca:a0:a2:01:f0:d7:23:b3:e9:8c:c1:0e:
         c1:d0:9e:8a:90:2e:70:6f:93:e3:ac:67:45:2e:22:47:67:52:
         eb:a7:22:07:18:1e:7d:a5:63:24:1d:07:00:fb:3d:36:96:0d:
         04:34:93:82:58:af:d1:f9:60:ab:02:61:fa:8c:9f:ee:93:09:
         d0:d3:2d:2c:ba:b3:ba:fe:c1:f6:97:fa:69:60:51:c2:91:92:
         8e:cb:58:ec:82:0d:84:a4:49:81:ca:2b:06:a2:14:33:c4:e6:
         5c:d5:d9:3d:9b:a5:ae:fe:fb:86:9c:f9:ce:79:58:48:b0:b2:
         74:bf:62:35:05:6e:64:17:e0:8a:fd:97:88:38:84:2f:e2:e9:
         8c:47:e4:84:7f:84:bb:ce:78:00:0b:5d:2f:51:f3:d9:22:ec:
         f2:55:c9:b9:11:1f:3b:c4:ea:4c:7d:8f:62:b4:4d:aa:7c:42:
         24:32:5d:b2:a2:74:29:07:82:2d:ce:f4:09:00:be:ae:14:19:
         59:be:be:34:ed:8a:ff:0b:cf:91:e6:95:dc:6c:2c:6e:f2:43:
         fa:57:dc:2d:62:bf:a3:5f:c8:65:c7:b2:6d:9f:73:77:73:99:
         a4:24:b8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:54:24 2026 by rpki-client