Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
File:                     OjSIklHnyxM-kGxwiRuhoEle2GA.mft (raw, json)
Hash identifier:          5AMM9yop+rXsMrgP+9LnBd05l+OPmNB+Dmvfv8WqCBM=
Subject key identifier:   D6:47:97:CB:45:23:AE:C8:DB:10:BD:05:BB:70:94:F1:AD:A4:17:E4
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Certificate issuer:       /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial:       019E8F8120F474231291B2AA514E94D6974C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
Manifest number:          10DD
Signing time:             Wed 03 Jun 2026 22:01:04 +0000
Manifest this update:     Wed 03 Jun 2026 22:01:04 +0000
Manifest next update:     Thu 04 Jun 2026 22:01:04 +0000
Files and hashes:         1: OjSIklHnyxM-kGxwiRuhoEle2GA.crl (hash: E5C2artGkHyy0unJnMnOhAnNLerW6tlEo2uknMCNpgk=)
                          2: TEmzgEgKyQo96Gqk3OCXyu8JaO8.roa (hash: w2y72ko+lJjiVlRbZd4qD2G3W4qa+BLqf6Sn4G+/dow=)
                          3: XWcYfudW_fCjYcND3H407xe959o.roa (hash: hWyo7JRjc5zRnP54qNBVfiEpztNdLDDxrtX9abLg7Ps=)
                          4: ge5kxbikwrvAEUuIO3lNRkFxLmw.roa (hash: eEJ79T/++oL5XPtUGIItjARG2jFvNlWqvTqYFtL6EkY=)
                          5: rTgC7PLBMFHhdpl3fBHWaPGZP_Y.roa (hash: ng9lqabxlxHQ1G6hpIjPJfi43vHsrt3ed7Cyb0T70ss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8f:81:20:f4:74:23:12:91:b2:aa:51:4e:94:d6:97:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
        Validity
            Not Before: Jun  3 22:01:04 2026 GMT
            Not After : Jun  4 22:01:04 2026 GMT
        Subject: CN=d64797cb4523aec8db10bd05bb7094f1ada417e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:49:15:77:21:1b:93:98:b8:a5:48:05:ee:68:
                    85:d8:af:53:c1:95:a7:86:78:28:51:fa:fd:df:93:
                    5d:74:ce:53:c6:3e:d2:af:18:bb:bc:23:ae:1f:7c:
                    80:4a:35:7f:59:b9:5b:f2:9c:1f:8d:73:1b:98:b7:
                    8e:d2:24:32:93:d2:76:79:b8:fd:6e:f9:4f:90:75:
                    c0:99:c7:ce:cb:d3:69:61:7d:b9:eb:3e:2e:5e:dd:
                    5b:2b:18:3b:e7:28:69:b7:0c:7a:7f:d9:69:31:ba:
                    08:39:07:e1:7f:ef:6f:20:e3:ce:d5:50:15:44:9d:
                    03:8a:7f:0a:ad:60:a5:1f:27:88:b8:a4:58:6e:1a:
                    96:4d:05:ed:4f:d8:28:ee:78:a3:18:d4:8f:4d:24:
                    b2:79:52:c6:34:a1:42:fb:18:1a:cf:99:4b:c7:bf:
                    96:a5:23:b4:43:02:d7:03:19:12:af:ff:0c:5e:66:
                    92:b2:1f:af:ee:a3:b1:ba:c2:cf:22:21:54:ef:9b:
                    48:ac:3d:dc:df:1c:ad:8c:96:c0:fe:e2:0b:77:a6:
                    6c:5a:a4:56:d3:34:55:97:c8:af:f7:b4:4b:d8:7d:
                    3e:fd:09:c9:f6:a1:16:af:5a:46:f7:f2:2d:b3:1d:
                    ba:55:78:85:fb:f7:1d:04:69:14:bd:94:59:73:57:
                    bb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:47:97:CB:45:23:AE:C8:DB:10:BD:05:BB:70:94:F1:AD:A4:17:E4
            X509v3 Authority Key Identifier:
                keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a6:f4:5f:bb:3c:9b:d5:55:b2:a3:36:46:0b:31:99:10:ba:
         37:b8:bd:19:04:ef:61:a7:4a:1d:13:26:ac:42:ce:de:b3:70:
         3b:1c:5b:7c:66:26:70:ac:df:8f:d8:55:71:63:17:ac:1e:84:
         1d:64:ec:e5:64:89:dd:14:ce:1e:ee:f6:75:97:88:c2:8d:ee:
         f2:37:f6:a4:f2:49:3b:c6:4d:91:36:f4:b3:0e:9a:5b:da:c7:
         79:33:da:ae:b6:d6:3f:83:5e:14:9c:01:ba:f4:4b:68:b7:0d:
         8d:9f:4d:62:8b:55:3c:d0:5e:1d:9e:6f:e2:c7:6c:4b:bc:6e:
         41:a5:87:a6:e0:34:36:db:18:36:ab:22:76:6a:44:b6:1c:9d:
         80:d2:7a:45:7b:cd:45:55:d1:06:b6:5c:f4:ea:ad:76:41:1a:
         ee:28:8a:e0:d6:c3:48:ed:8a:27:02:fd:de:45:04:6b:ba:2f:
         7d:7f:f9:9e:17:0f:64:e1:46:b9:f3:aa:75:75:14:e4:0e:94:
         d5:f4:b1:e8:9b:40:c1:68:ec:b3:bf:c9:81:2e:9b:2a:ec:39:
         9a:99:5b:41:5f:66:f7:9a:e2:51:7c:28:07:88:2b:bf:54:b9:
         61:5d:0d:68:84:94:a8:ca:e0:25:7e:2c:23:2c:d5:b0:4d:41:
         dd:59:3b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:21:42 2026 by rpki-client