Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File:                     O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier:          ob+oYhKmEQl6u2spd4YE1R7FTyDhDVLgRL1wjEV4AAQ=
Subject key identifier:   4C:04:AF:86:D9:F7:32:95:CB:F3:C1:CB:97:DA:B2:F5:2D:25:E6:73
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer:       /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial:       019E9B4DC0DC4400E68F603A8F40876D3EC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number:          0552
Signing time:             Sat 06 Jun 2026 05:00:24 +0000
Manifest this update:     Sat 06 Jun 2026 05:00:24 +0000
Manifest next update:     Sun 07 Jun 2026 05:00:24 +0000
Files and hashes:         1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: kXWEo6vy5yhUa2H7wxxrKrsqFvzLwZRu4GfFAHJQmyQ=)
                          2: nmV4wo1OsK526xeTri2upmPsAys.roa (hash: IeXn8vSCp/SPxs1+dmemndjYyp23bbOiRhUmde7q2pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:4d:c0:dc:44:00:e6:8f:60:3a:8f:40:87:6d:3e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
        Validity
            Not Before: Jun  6 05:00:24 2026 GMT
            Not After : Jun  7 05:00:24 2026 GMT
        Subject: CN=4c04af86d9f73295cbf3c1cb97dab2f52d25e673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7a:59:7c:b7:23:5d:4c:2a:ad:b8:e4:80:b6:
                    ea:37:90:14:38:cc:0e:cd:45:5f:8c:69:00:18:49:
                    73:d3:ea:6f:fa:e8:2d:8a:ca:69:d7:ff:2b:93:b0:
                    28:b9:be:9a:90:6f:ce:17:bb:18:cd:31:c7:57:e8:
                    fd:13:98:5b:6a:50:35:15:be:49:60:94:33:51:02:
                    a8:c6:15:ad:12:ca:29:01:bc:c0:48:9b:1f:1e:bb:
                    d0:bb:55:93:10:e6:e0:86:11:57:ac:7c:32:6b:61:
                    5a:34:c4:f8:27:68:ca:18:73:71:23:37:69:b7:b8:
                    2d:e1:a3:4d:8c:67:3f:88:6b:f1:67:8a:75:3c:4c:
                    80:85:cf:42:41:fe:6b:c5:e2:66:8e:54:65:e6:8a:
                    08:ed:7d:3b:db:de:e2:87:33:03:92:69:68:bd:8d:
                    9e:7f:dc:2b:0d:10:bc:80:2e:4b:e7:d6:d6:8a:9c:
                    df:0c:7c:33:53:c5:e2:84:16:f2:49:d9:af:b5:f4:
                    15:40:e1:9f:2b:c2:50:ca:a2:c1:61:b8:b0:65:c2:
                    39:20:af:4e:90:57:fd:b6:54:ab:17:9d:18:51:f7:
                    8b:9b:67:dd:35:bc:f9:fe:52:d6:16:5c:e8:dc:75:
                    15:e3:eb:45:16:b6:87:4c:8a:18:a7:de:e0:2b:ef:
                    af:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:04:AF:86:D9:F7:32:95:CB:F3:C1:CB:97:DA:B2:F5:2D:25:E6:73
            X509v3 Authority Key Identifier:
                keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:88:ef:8b:0b:11:3e:22:f9:f8:76:86:c4:69:6d:b3:60:85:
         a5:1b:c3:b7:8f:40:70:37:6a:01:b1:fa:8e:a6:00:6b:6e:fb:
         ce:a4:75:13:e8:f8:ee:a6:c4:67:8f:46:dc:ad:5a:d3:2e:05:
         76:f9:f5:9e:11:69:0b:1a:f6:8a:85:50:8e:cf:d6:bf:f3:82:
         b2:52:30:29:83:a2:69:98:51:9f:ca:0c:db:6c:de:26:bf:3f:
         d5:83:0c:2e:63:9a:4b:3d:0b:0c:b2:23:c3:be:18:a2:24:9d:
         a7:1d:41:4e:79:9e:30:8f:1e:dc:f0:83:f1:09:a1:6d:94:c5:
         63:24:9a:d8:45:2b:9b:de:2d:8a:b6:3b:b5:74:a0:a9:27:ec:
         00:8d:cf:94:c8:94:b9:96:70:b0:28:3e:c6:b0:98:7c:bb:2f:
         0a:e2:5a:50:85:1a:5a:26:90:3d:5b:52:06:02:34:f0:ad:84:
         67:cf:00:67:4d:24:a3:90:5b:95:ad:3c:82:71:d5:61:21:55:
         45:05:3e:c6:68:a6:0a:ed:c4:ac:9b:ff:29:2c:5e:6f:15:24:
         10:1c:8c:c9:01:32:14:f9:41:ea:9e:b9:dd:32:8e:eb:43:85:
         9b:2f:bf:66:a3:0d:ba:c6:06:c9:0a:ea:43:64:ea:f0:24:7f:
         15:e4:36:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:20:33 2026 by rpki-client