Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
File:                     OoOZNq7v8ohnjncmMwIPolm9nPI.mft (raw, json)
Hash identifier:          qxgGek3kGWCKMuJYqMnVxLb1uxNEY6hKZt5p1NxG5fU=
Subject key identifier:   0D:74:7D:C4:E6:85:64:F8:A5:DE:8A:88:48:EF:51:1F:8F:AB:2A:89
Authority key identifier: 3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2
Certificate issuer:       /CN=3a839936aeeff288678e772633020fa259bd9cf2
Certificate serial:       019EB98FF390EEE6FB7FAD8BB04D00D0949A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
Manifest number:          0921
Signing time:             Fri 12 Jun 2026 02:01:19 +0000
Manifest this update:     Fri 12 Jun 2026 02:01:19 +0000
Manifest next update:     Sat 13 Jun 2026 02:01:19 +0000
Files and hashes:         1: OoOZNq7v8ohnjncmMwIPolm9nPI.crl (hash: Ebxlu8fVXidR2S7xbWcfVrgaA2gL2Dya2oyV2yclKmA=)
                          2: PMdpUUy3N8aucFQis2EHtpFZuIY.roa (hash: 4gf7AvqhQ7Z0YpFJcEQijaezm8f7LNn2p+OXg9bnpFY=)
                          3: y2_r5sbY9Lv_uRDh7BVz6TP_Rqk.roa (hash: elggw6C3t4Wz+4yMu7U0O34nBVY/GyhPWM7xDo4hWNU=)
                          4: z1DkqtK6bhv2xKbEFbpfSZsh_Yg.roa (hash: x3T0qFMVxxd2FdR3A4LaLQ4+c2t85rP2XyfqD4Q6wxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:f3:90:ee:e6:fb:7f:ad:8b:b0:4d:00:d0:94:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a839936aeeff288678e772633020fa259bd9cf2
        Validity
            Not Before: Jun 12 02:01:19 2026 GMT
            Not After : Jun 13 02:01:19 2026 GMT
        Subject: CN=0d747dc4e68564f8a5de8a8848ef511f8fab2a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f0:f7:f7:8b:7b:ec:36:1c:b6:2a:3c:f6:68:
                    ed:01:5a:e3:73:c9:2a:5e:65:66:f7:c5:b4:d6:ef:
                    51:a0:67:2d:1b:4a:bc:c8:f4:b6:f3:b6:cb:28:98:
                    f0:52:11:43:86:ea:fe:9f:4d:bd:54:84:f6:42:1f:
                    eb:fd:48:fd:65:5b:c0:8e:41:0a:df:76:50:1f:bb:
                    14:8e:05:dc:5b:94:59:8a:29:f8:b7:c9:ce:f7:7e:
                    6b:84:40:0c:84:27:2d:02:46:8a:fb:bb:f5:ab:2a:
                    f8:e2:bd:97:be:99:0a:74:84:c7:64:2e:1c:2a:4f:
                    f6:21:b7:95:ad:1d:26:1c:10:a4:0d:d2:c9:17:24:
                    6a:ea:04:3d:78:17:f4:fa:14:17:c4:5b:16:33:e7:
                    19:27:4a:9f:31:1d:6e:28:b9:95:20:77:d9:d7:8f:
                    9c:c0:1d:fe:6e:18:c9:d7:50:82:60:4a:10:4f:8c:
                    2d:91:e9:fd:62:38:ae:0b:e4:05:75:51:99:c9:5c:
                    90:61:c7:d5:8b:c1:7b:a9:b9:00:1a:95:0e:55:7b:
                    10:74:e2:f0:ff:c9:75:bb:56:d6:e5:6c:d1:3e:e4:
                    68:63:01:ac:20:27:2f:a3:fc:08:92:2a:bb:00:16:
                    84:c5:92:dd:1d:18:1b:8e:f8:80:5d:2d:53:90:be:
                    15:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:74:7D:C4:E6:85:64:F8:A5:DE:8A:88:48:EF:51:1F:8F:AB:2A:89
            X509v3 Authority Key Identifier:
                keyid:3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:08:87:e2:e2:a9:45:d2:c7:29:e8:4e:44:3a:c2:2c:74:60:
         dc:0b:15:cc:0d:74:0f:a3:1c:22:0b:4b:b5:1b:1a:7b:06:3b:
         56:9b:e7:cb:ee:37:35:41:42:f3:6f:b2:a0:7f:22:1c:08:6d:
         84:4f:97:96:31:0f:cc:99:9e:00:b4:c6:e2:59:21:03:1e:6d:
         19:67:91:d3:0b:b3:bf:b1:f6:9d:cf:b2:16:1a:44:cb:a5:32:
         c5:45:3a:5e:66:04:e5:e9:d7:c5:cf:5e:8a:0d:a2:b5:f7:e8:
         c1:4b:b4:d3:1a:e7:d5:bb:68:6f:ca:78:79:2a:0e:70:8e:22:
         c8:12:b3:4a:10:ee:75:78:c3:c5:4a:1d:72:e6:e9:a8:85:2c:
         75:a9:61:94:83:1a:7d:3a:ee:34:bf:cc:3b:0c:56:ef:11:bb:
         2d:02:10:47:9d:be:4a:ff:55:1d:81:68:e6:9c:d0:8a:43:46:
         03:2d:4d:53:74:7f:3c:a9:76:12:90:65:96:30:d3:d9:b3:11:
         61:1c:36:1c:24:72:fe:fb:5d:a7:20:c2:98:9f:eb:d9:ce:9b:
         04:1f:4e:fc:89:7c:95:96:6b:08:3f:50:a6:bb:77:eb:0d:53:
         3c:10:2c:17:b0:22:ae:7d:5a:33:21:b5:ef:45:c2:55:61:89:
         da:9b:d4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:32 2026 by rpki-client