Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
File:                     OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json)
Hash identifier:          Kj2xs872B5jaZ8XlVSjBP2rKX6YFxiWIIowcQv0wClY=
Subject key identifier:   DB:4C:CF:08:6E:99:93:68:EC:77:F3:3A:2A:3D:16:37:FE:45:DF:C6
Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Certificate issuer:       /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Certificate serial:       019E9A7261E228A4ABB63247BB1958BCCA87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
Manifest number:          08BD
Signing time:             Sat 06 Jun 2026 01:00:47 +0000
Manifest this update:     Sat 06 Jun 2026 01:00:47 +0000
Manifest next update:     Sun 07 Jun 2026 01:00:47 +0000
Files and hashes:         1: KYeOuPy-sh1SLcoPNXSyZQIU0MI.roa (hash: Sr5K6ccTAcON+APYQXJhtPURh7qUu9XiFdatnlSg6xs=)
                          2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: wYGYCvEbCoY2OM4baFDykTo5tuQZ9/6wzdxOOqw1Amc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9a:72:61:e2:28:a4:ab:b6:32:47:bb:19:58:bc:ca:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
        Validity
            Not Before: Jun  6 01:00:47 2026 GMT
            Not After : Jun  7 01:00:47 2026 GMT
        Subject: CN=db4ccf086e999368ec77f33a2a3d1637fe45dfc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6e:f3:b7:be:da:ec:09:0e:e8:c0:87:42:27:
                    a5:be:c6:e7:1c:23:fc:97:79:f4:ea:23:f0:26:64:
                    e9:0b:bc:5c:ef:7d:ad:d8:90:8e:8f:eb:a9:84:ef:
                    e3:c7:7d:bc:65:cd:cb:ea:77:9c:86:66:81:c1:cc:
                    d2:e8:a6:c1:15:3a:f9:8d:0f:a4:f1:2d:32:83:16:
                    32:a2:bd:4a:f7:93:a9:9d:b5:39:91:1b:19:7f:39:
                    df:48:05:61:eb:d4:8b:d9:ef:32:fd:d2:5d:57:d2:
                    22:e4:63:84:c6:3f:2f:07:c7:cd:a2:86:f7:c0:52:
                    4d:b7:ca:14:5e:23:27:7b:91:ab:d9:f1:42:14:2a:
                    bd:10:b3:83:0b:63:61:d6:1e:c5:2b:36:6b:1b:ad:
                    59:b7:d1:50:29:ec:07:23:0c:1b:d4:91:db:92:38:
                    77:d5:ee:a1:ad:8d:c4:21:89:3d:97:d9:f9:de:8f:
                    2d:3d:f0:7e:4e:07:89:63:f0:96:b0:ff:d7:72:e5:
                    a3:71:df:45:a3:6e:09:60:0b:df:00:8e:09:25:a8:
                    bc:58:5f:af:32:3f:2f:cd:da:8a:51:15:77:3c:9b:
                    e9:b4:7d:4f:09:da:7a:85:4e:29:eb:53:f3:82:fa:
                    14:a6:1a:d5:fe:dc:37:19:24:88:b9:f7:40:af:94:
                    5c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4C:CF:08:6E:99:93:68:EC:77:F3:3A:2A:3D:16:37:FE:45:DF:C6
            X509v3 Authority Key Identifier:
                keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c2:0a:df:6e:7f:ad:0e:5e:ae:99:99:06:9b:ac:8f:8c:44:
         bc:94:1b:23:d6:2f:7d:1b:3a:4f:17:05:44:f6:b4:3d:c8:60:
         64:dd:b9:d3:53:41:fd:b8:36:0f:f8:e3:8f:40:b7:a7:6b:9f:
         b8:3f:4b:7a:01:24:3f:f2:de:47:93:50:3a:66:68:f0:cd:50:
         ab:6f:26:a4:a0:7b:fe:9d:a8:8a:58:06:14:65:c5:08:c5:0c:
         cb:ce:85:86:93:45:fd:7a:66:ba:8b:24:e4:95:88:eb:5e:70:
         10:60:90:4b:62:c3:08:d9:55:ce:56:c5:b2:dd:a7:9e:eb:17:
         74:9b:6c:f1:82:42:c2:d5:93:64:a3:b2:cd:17:48:43:7c:fd:
         e3:f7:af:82:e8:97:b7:40:89:1a:50:23:67:65:ac:8d:93:34:
         d7:ae:3b:f9:7e:e4:58:a3:28:5d:4a:0b:c7:93:11:53:bf:c9:
         b3:a5:e7:26:12:68:27:20:95:7b:b6:ed:a4:f5:58:f4:4e:cc:
         d8:2b:7a:9a:30:c5:b2:b7:24:38:09:11:ec:85:df:ea:82:30:
         97:14:92:bd:ee:a2:d7:d0:75:70:79:64:f5:37:a1:21:41:0f:
         c1:6f:87:71:23:59:89:90:f5:79:38:0a:88:7a:2f:e4:10:21:
         c5:e7:9e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:20:25 2026 by rpki-client