Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
File:                     O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft (raw, json)
Hash identifier:          mYDBkj88QG9i8hWew4kIjnTc2MSMlHBbfB10eltWhsQ=
Subject key identifier:   EA:3C:A4:1E:25:38:75:BB:F4:6B:91:DA:16:5F:AA:E0:6D:E4:45:EF
Authority key identifier: 3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
Certificate issuer:       /CN=3b53867284132eeccd56e6b155cf7f627d264f40
Certificate serial:       019F10E52B6A0C0F639512D88594400C0C6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
Manifest number:          018B
Signing time:             Mon 29 Jun 2026 01:01:22 +0000
Manifest this update:     Mon 29 Jun 2026 01:01:22 +0000
Manifest next update:     Tue 30 Jun 2026 01:01:22 +0000
Files and hashes:         1: 3DUSLYibsJXd_Fv_mFQGMWyoD3E.asa (hash: 217ApHrz+ZFZBxQTuwBPGHegzD2Mli8dYOKOyw3Mk20=)
                          2: 8a6S-UC-PzVNfuKH4VEcSEi_3xs.roa (hash: ggJLncnSKUJfbzTsD0cgxExXtCcR+Y6TnGQ+ZK/8VVg=)
                          3: O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl (hash: fUiNvBQFZX9fjZSbJ9ZCmc/6nuTlFUlLPsWZMXC9StE=)
                          4: Zod6GEOcMGfwO02xipiRUjS5UHo.roa (hash: pJwxMJ8KyAb6ixNPNoNOHcynw+GKshz9SMdlh6JQuFk=)
                          5: bF4AIoJbZesIwX86iDSdyGssluQ.roa (hash: mpdkvKaWVXrslEPSu3+IjnM2tbW2AQwtygmvrWacIvU=)
                          6: hSst--j5VCqGQF-z8DIf_npvY-Y.roa (hash: BqwaIWDOiFPECUGgrwgZoSY04WbWfryAxU75uG2cx4A=)
                          7: y-sWnGP-0hQwy4lYSwzVC6rKYt0.asa (hash: 9jRAa+Up2q3z80Ly9J5h5nlaT4zsmd3d7aVIdsnLuHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 01:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:e5:2b:6a:0c:0f:63:95:12:d8:85:94:40:0c:0c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b53867284132eeccd56e6b155cf7f627d264f40
        Validity
            Not Before: Jun 29 01:01:22 2026 GMT
            Not After : Jun 30 01:01:22 2026 GMT
        Subject: CN=ea3ca41e253875bbf46b91da165faae06de445ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e0:23:0c:be:46:cc:8b:5b:3b:97:9a:87:a3:
                    03:e0:f5:62:3b:4f:f7:97:38:c4:d0:41:01:8b:17:
                    49:03:c2:1f:9d:8b:c7:8c:17:a6:10:b6:c5:cf:7e:
                    1f:4e:35:7c:3b:9f:c9:f9:f5:d2:5c:47:28:be:52:
                    ba:6b:9c:23:d8:9b:0c:8f:1e:bb:a2:15:b9:d0:65:
                    8c:ec:2f:70:f3:5e:30:5a:16:db:03:d1:39:77:c0:
                    7d:a8:e0:85:cf:8e:31:24:00:f7:b9:10:2b:e0:d5:
                    b5:ad:78:5c:38:0a:ee:da:7d:84:b6:0f:4e:90:35:
                    20:83:ae:05:48:82:b3:98:61:29:78:f2:a8:98:a0:
                    e0:45:6e:55:54:49:dc:a6:87:27:a1:44:8d:3e:40:
                    08:cd:bc:1f:a6:0b:02:c1:c2:72:88:4a:4a:1d:f9:
                    8d:e8:1a:91:06:56:5d:07:25:87:9f:bb:80:9c:8c:
                    8e:48:d9:61:26:ea:8e:fc:61:bb:a8:7b:b0:70:5a:
                    ed:1d:f4:b5:57:7c:a9:25:33:81:bd:da:c5:7c:de:
                    2f:c1:19:7b:b3:59:21:2c:b4:ed:10:d1:28:61:b8:
                    3b:82:0d:73:fc:0b:27:56:39:84:59:49:4a:72:45:
                    66:e8:80:c4:4a:57:d0:3b:36:c0:1c:84:2f:50:d0:
                    dd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3C:A4:1E:25:38:75:BB:F4:6B:91:DA:16:5F:AA:E0:6D:E4:45:EF
            X509v3 Authority Key Identifier:
                keyid:3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:29:ba:7c:f3:24:e3:80:54:32:87:9b:96:14:9f:e2:25:83:
         c0:df:69:e8:d2:e9:08:3d:37:97:b9:2f:3f:30:4d:91:6e:40:
         09:90:e2:11:b6:24:89:8e:ea:a6:f4:e7:21:cd:dc:36:d9:6a:
         91:5e:ed:d1:3f:a2:a7:bb:5d:b2:8a:bd:ed:de:aa:f9:a5:e2:
         10:fb:b5:40:27:fc:a5:ea:eb:ac:29:fa:a6:1a:68:90:b7:dd:
         7d:8e:ea:7c:bf:d0:34:1e:a9:2e:8b:6a:d5:58:ff:3e:34:d3:
         45:6e:88:5e:21:4c:03:bf:79:36:b3:05:26:64:fc:08:a9:e4:
         1f:8e:79:f1:9e:4f:89:08:fd:ff:e2:d0:35:0d:9d:d9:b4:79:
         2b:65:d2:a0:1a:5a:ea:de:92:fd:d4:81:c5:fd:d0:3d:11:25:
         f8:d3:9a:cf:08:7d:b8:29:97:18:97:f3:1b:c7:9f:93:aa:33:
         27:08:4b:8d:4d:ec:e7:be:cb:35:a5:38:9c:f0:2b:bf:18:86:
         cf:fd:bd:f5:51:4f:62:a5:22:6c:40:87:30:68:43:0b:af:2a:
         9b:d7:7c:31:12:98:88:15:82:13:c8:b9:56:74:01:8b:c4:5f:
         3e:c3:66:66:02:e4:68:4c:43:d7:7e:bd:47:1b:b6:c4:26:f6:
         30:f9:75:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:42:23 2026 by rpki-client