Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
File:                     o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json)
Hash identifier:          jciDsb9pBwG5Zw+tDyyIX1jiW/I7FHlYIgIrUJHz2SM=
Subject key identifier:   44:4B:A3:0A:14:35:AF:30:69:44:C3:FE:97:E1:AE:C5:1D:B4:65:70
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Certificate issuer:       /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial:       019EB80F46E1FFC95E90F85D4C5B52E42FEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
Manifest number:          1956
Signing time:             Thu 11 Jun 2026 19:01:09 +0000
Manifest this update:     Thu 11 Jun 2026 19:01:09 +0000
Manifest next update:     Fri 12 Jun 2026 19:01:09 +0000
Files and hashes:         1: KalgMqPxE7vA7DP0hA4DsBQ8daM.roa (hash: D97KocjmOXeCpIu9eUlLkx7HYIqygCIPtcR0T7mqTEA=)
                          2: f8cxDtGsT2Ikp6eF_zj9ggqQBiQ.roa (hash: CbPEI2G5Y9W39zpXifforX4BNfoULMQ57Hb8GhyiU7s=)
                          3: gYIWsUvi3Tex-jz_h6e6eiEViZ0.roa (hash: Gb2ivhnS90IYgEWVgAR/fXTt/Lo6la3jpAyCRBH7e/o=)
                          4: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: N3f89OO79eFNO14gHx/xL6aLj/pdFyonscXFpBcGiV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0f:46:e1:ff:c9:5e:90:f8:5d:4c:5b:52:e4:2f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
        Validity
            Not Before: Jun 11 19:01:09 2026 GMT
            Not After : Jun 12 19:01:09 2026 GMT
        Subject: CN=444ba30a1435af306944c3fe97e1aec51db46570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6a:41:5d:66:3a:72:a7:ad:ab:00:3a:5c:9b:
                    a3:5d:7a:37:10:c5:ef:65:21:f7:e9:3e:ce:a6:b3:
                    17:70:ae:1c:46:c2:62:6c:94:e2:ef:0d:fd:f8:aa:
                    b3:91:b8:79:e3:69:bc:d9:f4:8d:42:c6:f6:3c:8a:
                    68:e3:77:8d:be:4b:2f:a8:55:dc:23:9b:55:69:aa:
                    25:94:fd:72:95:cb:d5:00:b2:a3:a0:e4:82:1e:8b:
                    da:8b:6c:9b:a9:71:4f:bd:02:f3:5e:04:34:c9:2f:
                    4c:dc:a4:fc:b6:5d:a2:cc:1c:3c:38:a6:ef:86:af:
                    f0:9f:87:60:6e:24:3d:3d:54:7a:46:92:12:28:87:
                    af:0a:29:87:7d:8f:05:43:e0:48:b4:9c:b5:02:79:
                    bd:b0:80:e7:4b:67:2b:c2:2d:7b:ea:99:f0:b0:17:
                    b4:ad:c4:88:24:b6:85:78:e8:24:17:90:ea:3c:6f:
                    bb:ae:ff:a3:85:c9:21:1c:8a:5a:ed:64:e6:7c:89:
                    0c:55:35:5e:c2:7d:56:06:70:cf:92:22:2f:89:c4:
                    44:f2:13:c8:44:f1:c5:b4:35:03:25:79:e7:98:36:
                    fd:bb:77:81:e5:81:b9:88:c2:f2:84:6c:09:0f:35:
                    a2:19:42:56:e0:d5:9d:77:09:7b:f3:aa:ed:5c:ea:
                    06:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4B:A3:0A:14:35:AF:30:69:44:C3:FE:97:E1:AE:C5:1D:B4:65:70
            X509v3 Authority Key Identifier:
                keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ee:fc:d9:43:00:b7:dd:06:96:52:34:c0:77:b2:00:93:a7:
         ab:39:86:5b:8f:58:79:58:de:f9:6e:f6:7c:3d:d3:5a:fe:7a:
         39:4a:84:c9:db:42:3f:2c:41:6f:20:91:52:f6:ea:dd:17:8e:
         56:ca:a8:ee:9e:1a:a7:91:ff:22:dc:45:07:9d:8d:ec:dd:75:
         8c:e5:b7:61:c9:2e:1a:5f:0d:af:2e:31:73:11:8a:55:2e:8b:
         00:de:a9:23:02:f7:0a:f9:b1:55:fd:f1:cf:f6:d8:04:76:90:
         2c:47:d2:61:57:b9:5f:5d:cb:d1:b4:67:c6:51:52:40:3d:e7:
         ef:25:24:e3:98:a7:db:be:e0:03:07:8b:47:32:68:3b:cd:f4:
         41:94:2c:5d:7c:75:c3:6e:d2:8d:e4:8b:27:b1:de:ca:e2:cc:
         a4:0f:08:dd:0e:0e:48:36:4a:4e:05:47:08:27:96:b9:4a:a8:
         6b:55:1c:b5:f3:97:48:12:26:71:d7:ea:ce:d0:c9:07:40:59:
         ff:47:8a:b0:61:f0:82:e4:87:18:cd:49:62:4d:fa:3e:11:64:
         e5:1c:34:ed:45:86:7a:8a:98:69:05:5d:0a:ec:15:cd:4f:2f:
         93:67:3e:f3:6d:8d:81:b5:c2:78:e8:18:55:e9:9d:a5:ee:8f:
         8d:71:55:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:24:34 2026 by rpki-client