Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
File:                     oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft (raw, json)
Hash identifier:          OZk0JGq074YK5MsYSaMLLGOllObGZr7UrsJ/O07hu98=
Subject key identifier:   F6:95:E6:84:62:0C:3E:65:71:5A:87:7A:BA:6D:CA:0D:E2:82:98:3C
Authority key identifier: A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46
Certificate issuer:       /CN=a122d6d21bd04c46224653a49be029e3c024b846
Certificate serial:       019EDD662C24E81E708382F07497088DB384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
Manifest number:          0570
Signing time:             Fri 19 Jun 2026 01:02:01 +0000
Manifest this update:     Fri 19 Jun 2026 01:02:01 +0000
Manifest next update:     Sat 20 Jun 2026 01:02:01 +0000
Files and hashes:         1: 3VvlIVLD8nV-Kprr00nGUqwlEG0.roa (hash: ueTtVv9Izvar/a32kf0F4hmGSZUFBIbcRRQsZSddarI=)
                          2: 7HJItND-ZHUyWIc0zlIoIbcu0kU.roa (hash: 9Bz34LYfCAabYfpSmfTeNq9WvdNCYgrnyawzxf6Rfac=)
                          3: cBS-3HpC_a4rHcbd8xWkU8ryqAo.roa (hash: BFwk1ZVFsJ92QmF6WqyS8lrea+ZBvLbcAz/u0+3fQLc=)
                          4: oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl (hash: uvCTFjLwi3px0tcLI70d7BnF2reoTptCLhe9jF0ysOY=)
                          5: wpoL_iSupuiaeUF0rSK5oTJDYgk.roa (hash: tmpMUF0ltyMmfrFAPsjl7BnWO5nUIh5IyWezk54S+Pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dd:66:2c:24:e8:1e:70:83:82:f0:74:97:08:8d:b3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a122d6d21bd04c46224653a49be029e3c024b846
        Validity
            Not Before: Jun 19 01:02:01 2026 GMT
            Not After : Jun 20 01:02:01 2026 GMT
        Subject: CN=f695e684620c3e65715a877aba6dca0de282983c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:d3:97:fd:89:4e:9b:6d:05:6f:1f:2a:20:
                    59:1a:79:32:b6:0d:61:e9:ba:b1:ad:74:68:56:1a:
                    e0:46:69:7e:56:3e:a9:7d:ff:5e:d9:5d:44:fe:fe:
                    40:a3:fb:cb:d9:b5:ed:d9:62:1d:98:6f:46:9b:f4:
                    44:7f:32:82:da:1c:c7:2e:08:62:c7:f7:c2:ef:cf:
                    3e:ce:35:90:a7:d8:00:78:13:cb:19:9c:82:7d:3f:
                    90:e7:49:28:7c:f7:74:17:ef:f7:6a:e1:6a:fa:6b:
                    69:c5:47:82:c5:56:00:50:f2:98:6d:2b:db:ef:2a:
                    81:04:4d:05:c8:81:23:ee:05:4c:48:6e:0e:d1:bc:
                    76:db:87:c4:83:72:a3:ad:23:28:ae:e4:73:91:f7:
                    93:c3:0a:b9:ca:57:ad:1f:c4:78:32:3c:28:3d:07:
                    d3:19:a0:8b:84:7b:4a:30:48:c0:ef:c7:6e:5b:05:
                    3d:a7:3d:65:19:ed:f3:68:45:56:28:a3:d5:f8:d6:
                    26:99:89:d4:b1:82:8c:67:f0:03:e4:51:2c:79:ac:
                    46:ed:66:7f:a0:b9:a6:74:f6:86:19:0f:d9:22:dc:
                    88:11:a6:99:95:2d:50:9c:a1:23:85:bb:02:36:3b:
                    f7:4d:7d:14:4d:75:e5:26:79:0f:22:69:68:0b:50:
                    ff:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:95:E6:84:62:0C:3E:65:71:5A:87:7A:BA:6D:CA:0D:E2:82:98:3C
            X509v3 Authority Key Identifier:
                keyid:A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:bc:40:f1:4d:6d:02:77:60:a6:5e:99:5b:c8:58:3b:52:4d:
         ad:2c:7c:05:04:7b:a2:59:d0:fc:6a:42:9b:17:3b:78:0a:f2:
         d7:6d:48:09:b3:c7:b0:15:06:dc:3a:11:87:43:2f:71:b4:fe:
         14:60:d7:dc:c0:4c:11:26:9c:e4:2b:73:d6:ea:3e:6e:17:e5:
         6f:e3:a2:f9:aa:c6:ce:d8:a1:5d:40:3e:c0:0e:70:fa:2c:9c:
         d0:4e:f5:53:f2:a9:27:54:4f:f3:d2:00:aa:a8:3d:b9:a7:00:
         ff:aa:2f:3f:cf:59:82:40:77:8a:ab:67:f5:89:4b:09:c8:03:
         27:31:64:83:39:8e:a1:3e:2d:59:58:ce:39:0c:91:10:70:fe:
         d3:b3:35:42:13:51:e6:b8:7b:77:4f:41:8d:09:24:14:5a:5f:
         8c:e6:28:4a:f2:ff:53:02:11:2f:40:84:9e:cb:b8:5f:f2:06:
         42:6a:b4:0d:f8:93:a1:7f:b2:78:04:77:dd:59:bb:d8:c4:00:
         7d:59:69:00:16:50:be:5d:fe:3d:2d:9c:7a:84:28:f6:19:4c:
         2b:e5:65:94:88:0a:58:03:1d:87:15:fb:65:f1:48:9b:87:7f:
         d9:68:df:cd:21:8d:c6:16:86:5b:7b:da:7d:42:52:cd:80:6a:
         a4:33:52:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 03:19:31 2026 by rpki-client