Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
File:                     OjSIklHnyxM-kGxwiRuhoEle2GA.mft (raw, json)
Hash identifier:          0C2dyeU0P6H6f4Y+0SCwIdraM8A+ZHpTIARUloPVZG0=
Subject key identifier:   C4:6F:57:69:56:43:7F:08:75:3B:3C:54:F1:72:FE:2E:36:FD:18:6B
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Certificate issuer:       /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial:       019F82D5B3CEB3B8ACC4141A9AADD128CF60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
Manifest number:          115B
Signing time:             Tue 21 Jul 2026 04:01:10 +0000
Manifest this update:     Tue 21 Jul 2026 04:01:10 +0000
Manifest next update:     Wed 22 Jul 2026 04:01:10 +0000
Files and hashes:         1: OjSIklHnyxM-kGxwiRuhoEle2GA.crl (hash: 6go87B2xrbU+TH8/qyIaPEUWjba8GyDk/kWMizY1+Mo=)
                          2: TEmzgEgKyQo96Gqk3OCXyu8JaO8.roa (hash: w2y72ko+lJjiVlRbZd4qD2G3W4qa+BLqf6Sn4G+/dow=)
                          3: XWcYfudW_fCjYcND3H407xe959o.roa (hash: hWyo7JRjc5zRnP54qNBVfiEpztNdLDDxrtX9abLg7Ps=)
                          4: ge5kxbikwrvAEUuIO3lNRkFxLmw.roa (hash: eEJ79T/++oL5XPtUGIItjARG2jFvNlWqvTqYFtL6EkY=)
                          5: rTgC7PLBMFHhdpl3fBHWaPGZP_Y.roa (hash: ng9lqabxlxHQ1G6hpIjPJfi43vHsrt3ed7Cyb0T70ss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 04:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:82:d5:b3:ce:b3:b8:ac:c4:14:1a:9a:ad:d1:28:cf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
        Validity
            Not Before: Jul 21 04:01:10 2026 GMT
            Not After : Jul 22 04:01:10 2026 GMT
        Subject: CN=c46f576956437f08753b3c54f172fe2e36fd186b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:70:b6:b7:2b:ca:ec:a7:d0:65:e5:0f:e6:06:
                    4e:fc:8e:d5:f7:71:67:05:c4:2f:ee:3d:98:9e:5a:
                    7c:86:fe:fb:81:8e:29:c0:e1:b2:d7:b9:d6:ba:30:
                    14:f1:94:e1:03:22:7f:e2:ee:a8:bf:9a:ff:17:15:
                    38:3e:3c:4d:7d:04:92:91:a9:ca:4a:a8:16:b7:1d:
                    c0:c6:4f:68:30:fd:3c:be:62:ef:af:66:59:75:68:
                    b0:4f:31:f2:09:94:03:13:df:d3:2f:3e:8e:31:33:
                    fa:f2:6f:4b:f4:e9:6f:5e:3e:de:bb:26:db:54:10:
                    f6:e1:f4:56:3f:bb:64:31:c4:59:83:b5:1b:61:81:
                    81:0f:72:cf:59:e3:0a:01:b3:ee:a5:7e:5b:47:6a:
                    31:e3:de:5f:69:56:c0:4b:6e:0f:39:78:10:91:50:
                    2d:40:48:56:8f:49:0b:98:ed:83:47:2b:37:13:66:
                    cb:26:18:80:48:fd:e6:33:3b:3a:45:50:76:46:0c:
                    53:6a:2e:da:4a:1c:b5:71:6c:6d:19:fc:6d:f3:5b:
                    17:8d:7c:d3:23:fd:29:c9:c5:71:25:92:30:23:8c:
                    dd:d0:9d:c5:86:0c:a6:09:32:0d:e2:0e:78:f0:1c:
                    ad:c4:20:b2:ad:b1:d4:b1:94:f4:a2:4f:cd:4c:b8:
                    a5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6F:57:69:56:43:7F:08:75:3B:3C:54:F1:72:FE:2E:36:FD:18:6B
            X509v3 Authority Key Identifier:
                keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:7d:38:44:1d:4e:c8:31:13:8b:29:a9:13:58:c8:af:31:77:
         93:70:a1:5f:c2:e7:ff:e3:37:29:87:06:c0:b5:46:45:0d:7b:
         16:0c:a1:9b:5d:4b:c4:aa:f5:ee:53:cc:cc:dd:ef:e6:f5:b4:
         a8:ca:bd:18:ac:b0:fd:5c:92:2e:d4:81:bc:13:19:7f:6a:0c:
         07:1e:66:9a:46:38:01:4c:89:62:d0:12:c0:69:f2:5a:08:b6:
         ca:59:9e:3d:ec:92:d5:a0:0b:80:29:f0:02:64:77:ce:db:e7:
         0d:84:b7:8f:ba:ba:33:ad:70:53:4b:89:06:98:a9:ed:51:e5:
         97:63:5d:3b:b2:19:87:ff:1a:ce:35:50:32:49:da:71:05:4e:
         02:57:b9:4d:ec:6d:3c:68:52:35:2a:8a:4d:08:70:c2:13:58:
         af:fb:21:28:b0:0d:d5:21:be:1a:7b:fd:d3:bf:c1:1a:b4:3e:
         f8:d2:79:11:53:8c:9e:ff:c3:61:86:30:de:39:a1:13:73:ea:
         38:77:99:40:7f:bf:00:5b:8c:fa:5c:4b:11:cf:f7:5f:cc:5e:
         be:ef:55:1d:45:a0:70:e0:de:60:86:fd:0f:36:81:fc:3a:10:
         6c:b1:09:b2:8f:b4:2d:94:82:4d:db:ae:d0:ec:e7:78:98:39:
         d7:fa:3f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:04:59 2026 by rpki-client