Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
File:                     O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json)
Hash identifier:          f9LThQPpDz4jDH/KdrltkZUJ1x2MNTLf6laaRKNj1ow=
Subject key identifier:   38:4F:1A:48:57:91:B2:82:72:6F:09:65:00:5F:52:75:CD:69:B7:86
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Certificate issuer:       /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial:       019F18D63E0C42E995EBD506056E331ACC4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
Manifest number:          13C3
Signing time:             Tue 30 Jun 2026 14:02:01 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:01 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:01 +0000
Files and hashes:         1: GPPevbImSvGjVqWAzYGvcpc3FOs.roa (hash: MHorAz/UCfb7aKgx7pKoBAkAFlLncJNyaH/wm4EHMOY=)
                          2: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: VEhumxjcW8ahdorYu6yMwKaq0uy/wNhzqUrMO7iIotw=)
                          3: XD7uuC6NUKDza7PfKtc_jHz7EnA.roa (hash: RPYu/+kKueNaM8YfpMGx6Mxi+JGMI3A7i1eBXpiVPd4=)
                          4: ntt8oBWCvDCUpNDHjPuie_5MUck.roa (hash: Yy1s4qDW987rNxjvZEbp1rZR84GXQU0RB/faIrx/grE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:3e:0c:42:e9:95:eb:d5:06:05:6e:33:1a:cc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
        Validity
            Not Before: Jun 30 14:02:01 2026 GMT
            Not After : Jul  1 14:02:01 2026 GMT
        Subject: CN=384f1a485791b282726f0965005f5275cd69b786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0a:cc:b6:cf:ad:05:5b:fd:24:f0:1f:b5:00:
                    12:55:68:48:1c:69:24:e4:c3:f4:2f:a9:38:5c:bf:
                    a0:8e:49:7f:3b:cb:d6:16:04:89:dc:7b:a8:b6:7c:
                    a4:3e:58:a1:74:ec:35:5a:a3:61:a7:ef:42:09:5f:
                    c5:b7:57:60:69:19:58:23:39:bc:a6:ac:3d:30:99:
                    e9:47:9e:bd:a0:d4:90:f8:aa:fe:01:04:60:34:c8:
                    47:35:12:56:f2:11:19:86:f1:a6:35:70:31:35:d7:
                    a0:2f:82:13:b8:e4:54:4b:04:a1:80:33:28:e4:e7:
                    d5:21:6f:00:fc:9d:7a:36:da:81:7f:47:80:fe:b1:
                    56:a4:27:9d:80:2c:9a:05:92:d3:34:4e:2a:0f:2a:
                    46:2f:24:b4:83:6f:18:ff:ed:fb:e9:ef:b3:a3:2a:
                    3a:93:dc:96:c1:e3:e4:b8:a1:cf:d4:2a:14:0f:58:
                    8a:a9:12:58:4d:cf:47:64:31:b8:dd:d5:ed:3f:72:
                    09:d4:e1:74:73:8e:ab:e2:48:8a:59:ba:79:28:03:
                    f8:7e:84:8e:0c:5c:b0:ab:6b:35:f5:80:e1:97:35:
                    c4:19:6f:b5:e4:0b:b8:ec:fb:fc:20:39:dc:1b:e0:
                    61:9e:a4:53:36:71:94:56:50:92:d4:c9:ac:67:a3:
                    ee:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4F:1A:48:57:91:B2:82:72:6F:09:65:00:5F:52:75:CD:69:B7:86
            X509v3 Authority Key Identifier:
                keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:88:a5:c3:24:16:c6:c8:c1:d5:09:5e:21:8d:0c:d2:f3:74:
         78:8f:73:8b:be:f7:ec:d2:57:85:24:cf:dd:09:43:27:11:8a:
         42:bc:3f:2b:f7:1a:9f:cd:84:de:62:18:9d:5c:65:ee:1d:fe:
         e0:80:01:b5:7f:d8:45:6c:44:03:a2:37:b1:68:66:08:d1:c8:
         bf:f7:47:6e:18:9e:97:7d:1d:52:6c:33:ad:36:40:3c:b1:af:
         20:e8:c7:dd:f4:ab:91:d3:49:8b:fd:0f:96:e7:43:1e:7a:1b:
         83:35:b1:8f:d6:25:e9:e5:14:c8:88:68:1a:07:01:0f:3b:41:
         86:55:d7:e6:95:65:be:80:56:6b:6e:49:a3:95:9d:f5:2b:a3:
         25:4f:c6:9f:b1:58:40:6e:47:ed:80:44:64:15:3d:01:44:63:
         f4:86:5a:1e:35:cc:70:88:af:5b:33:7f:80:9b:7d:30:b0:12:
         32:88:c0:f1:f0:68:eb:f2:44:61:59:1b:2c:2c:2f:79:02:cb:
         07:b7:2e:32:9f:5c:7f:73:f8:91:3a:d9:09:54:e2:bb:f2:a5:
         69:4d:6b:e2:ba:54:70:2a:1f:9e:18:27:00:9a:9f:15:72:1a:
         e9:2b:38:7a:27:2d:53:25:21:69:44:c5:35:58:51:5f:85:cd:
         69:f3:92:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:43:11 2026 by rpki-client