Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File:                     O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier:          69MPRUO20I2+BBo7o8fTNZ7yAlO9DqpuOIq+ucga9OY=
Subject key identifier:   9D:FF:3F:A4:95:08:0D:B9:13:B1:CB:48:37:93:57:B3:81:FD:CF:81
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer:       /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial:       019F84FA2B3C09CBF8399BB1D19298056212
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number:          05CB
Signing time:             Tue 21 Jul 2026 14:00:15 +0000
Manifest this update:     Tue 21 Jul 2026 14:00:15 +0000
Manifest next update:     Wed 22 Jul 2026 14:00:15 +0000
Files and hashes:         1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: uhixtGk9GegzsFA07GPXXShC1j4X/m+oWQIzX04CsqI=)
                          2: nmV4wo1OsK526xeTri2upmPsAys.roa (hash: IeXn8vSCp/SPxs1+dmemndjYyp23bbOiRhUmde7q2pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:fa:2b:3c:09:cb:f8:39:9b:b1:d1:92:98:05:62:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
        Validity
            Not Before: Jul 21 14:00:15 2026 GMT
            Not After : Jul 22 14:00:15 2026 GMT
        Subject: CN=9dff3fa495080db913b1cb48379357b381fdcf81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6e:87:8d:1d:70:38:06:cf:86:06:0c:41:be:
                    7c:bd:d8:79:ca:42:5b:50:43:3b:80:76:f9:45:4c:
                    66:61:1f:9c:04:03:86:96:d1:3f:05:62:4e:11:ac:
                    15:28:14:c0:60:59:73:e6:f4:98:54:b4:70:b2:cc:
                    03:f7:27:e1:aa:b6:99:0b:b1:5a:18:b3:41:c5:1d:
                    b6:ab:13:f8:85:c5:a8:f8:f9:7b:a9:9a:7c:1c:78:
                    47:0c:22:d1:7e:84:d3:e4:95:5d:cc:0e:58:0d:27:
                    cc:e7:00:7d:cc:d8:b7:92:26:31:4b:dd:c2:43:11:
                    94:56:f1:c0:61:11:eb:52:39:d7:a6:fc:9e:67:bd:
                    7b:09:63:27:be:46:9d:39:53:0d:da:46:40:82:99:
                    9b:0e:e4:57:ee:a3:48:3d:b9:14:74:01:41:65:34:
                    c4:25:d6:d4:b3:56:37:c2:51:dd:8d:8b:4d:cc:c6:
                    98:04:f2:0a:32:0e:2e:b0:00:fd:18:f7:0e:83:37:
                    c9:03:3c:42:75:a1:33:07:95:6a:94:61:16:8e:dc:
                    71:19:f4:b3:d0:6e:71:a1:47:d7:5e:31:f6:d5:e4:
                    b7:5e:15:67:df:98:bd:fe:61:5d:bf:2e:ca:63:ec:
                    04:37:ad:bb:52:dd:a5:b8:8b:26:82:40:4d:eb:9a:
                    8b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FF:3F:A4:95:08:0D:B9:13:B1:CB:48:37:93:57:B3:81:FD:CF:81
            X509v3 Authority Key Identifier:
                keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:12:4e:5f:38:32:e5:3b:63:e8:3d:28:98:62:d1:fb:b5:77:
         31:ae:02:91:6d:f7:92:f9:0c:1b:0b:36:54:3b:e1:9e:eb:66:
         01:a0:b4:8c:14:28:24:3a:23:2b:95:6b:18:1b:a3:6d:ed:0e:
         c6:73:86:68:04:17:4b:d0:e8:d2:a1:c6:54:11:8f:aa:b8:4a:
         1f:c7:83:0f:a7:c1:a1:ab:b7:19:2c:56:b4:41:bd:2c:f2:70:
         e7:62:d2:86:63:ba:27:37:d4:87:d0:c5:cc:3d:b7:9e:9c:13:
         36:91:2f:fe:7b:1d:e7:f5:b8:5e:5b:2f:a1:24:2a:e0:4c:36:
         93:7a:60:e4:ac:ef:ca:0f:d0:30:bf:0a:f5:70:94:58:0b:95:
         d2:12:e5:94:8f:6d:ce:e9:a4:ca:6e:af:a2:cc:cc:84:58:c3:
         ba:48:09:dd:fd:48:66:d9:c2:6b:03:e6:bb:a1:8e:30:93:f4:
         91:53:57:d7:7a:3a:fd:72:ff:cb:79:7c:3b:cd:7d:15:bc:c5:
         90:8e:bf:f1:79:c3:e0:96:c9:f8:1d:38:61:02:f3:89:91:43:
         aa:74:b1:ab:bd:60:9c:b7:b4:25:d2:6c:da:e7:d4:11:38:69:
         c5:1f:e4:ae:0f:aa:ae:2a:83:63:cb:8f:13:52:79:d8:b9:64:
         08:34:93:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:23 2026 by rpki-client