Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File:                     OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier:          GqYyKVTbA31aBFr80PD00qkIoktUFG8D2Q3ZRa5okBI=
Subject key identifier:   34:D5:A4:41:F7:ED:F9:B0:80:5C:3B:1E:57:C2:51:47:BB:83:24:91
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer:       /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial:       019EC2C9D4F109A97A1B816CBD086E0398EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 21:01:07 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:07 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:07 +0000
Files and hashes:         1: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: t/9B1SUSUjMWSun+nF9sBggYUJKEAVgeIc5/6DMxKXo=)
                          2: aZ2TcbNwaylOZgDoSe12Obbdwts.roa (hash: RGUNbjUgv7q6fxRKJH6x2SAZxrih2NcUX8E0Ivt0oLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:d4:f1:09:a9:7a:1b:81:6c:bd:08:6e:03:98:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
        Validity
            Not Before: Jun 13 21:01:07 2026 GMT
            Not After : Jun 14 21:01:07 2026 GMT
        Subject: CN=34d5a441f7edf9b0805c3b1e57c25147bb832491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b5:8b:b8:f2:c5:68:2a:94:7c:02:70:d8:c2:
                    7a:06:00:2a:d9:02:43:22:8b:89:37:44:a8:d1:03:
                    6e:23:3b:dd:19:85:d0:04:e0:1e:6c:dc:e5:e3:57:
                    bb:a7:59:05:c8:db:00:47:ae:d5:4e:e4:48:6c:b6:
                    ed:9a:b4:93:6f:a1:7c:ed:05:cb:ba:e4:31:5c:ab:
                    02:03:65:3d:6e:b1:a7:7f:fe:b6:7e:36:42:03:31:
                    11:d2:79:eb:9b:14:df:bb:f7:d2:c5:58:de:49:a0:
                    c7:1a:0c:41:fe:f8:75:97:69:44:5e:d9:7c:78:59:
                    4b:68:2e:5d:e0:69:aa:40:ed:75:d4:d9:0b:98:1d:
                    3c:a4:81:1e:62:6c:f7:85:fd:79:ed:9e:e5:58:f4:
                    96:0f:2e:23:9e:f1:8c:2b:ee:58:18:3e:82:e0:83:
                    2c:78:e8:18:a2:71:ca:2f:87:c1:ac:e5:fc:8b:da:
                    2c:69:4c:7e:bd:fb:07:af:b5:a0:34:f8:5a:f2:da:
                    38:26:9e:86:79:9d:53:38:74:da:4e:fc:77:2e:9e:
                    23:34:e7:63:20:9b:10:77:3a:2c:22:b7:ca:09:f5:
                    b7:28:ba:9b:cb:61:f1:b6:57:a0:80:a4:ab:06:20:
                    cd:65:66:5d:70:03:86:56:dc:c9:4f:48:47:a2:a0:
                    f5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D5:A4:41:F7:ED:F9:B0:80:5C:3B:1E:57:C2:51:47:BB:83:24:91
            X509v3 Authority Key Identifier:
                keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:81:b8:33:7d:6d:84:87:98:45:32:b5:fa:c8:1d:7f:ba:ab:
         13:d4:d7:67:7c:dc:5b:f0:6c:42:28:cc:55:26:bc:aa:7d:7d:
         5b:5e:39:97:c4:53:1c:89:06:e7:a4:0d:a8:66:59:b4:bc:9b:
         d7:6f:4d:f1:7f:3d:0e:eb:a3:85:fd:06:09:73:71:25:a9:45:
         90:0f:8f:17:62:e9:21:ae:f2:1c:a6:af:83:e1:61:c8:e4:e9:
         ed:b1:f4:fb:42:07:0f:00:7e:68:a2:0d:fc:d9:89:d8:22:28:
         55:c4:53:03:f1:97:fe:c4:78:4d:ca:29:fe:63:6f:bd:e5:33:
         e6:e4:f0:35:fa:01:f2:09:d5:66:bf:e5:ec:d0:35:6b:e5:9b:
         a8:45:fa:39:4b:24:bc:6e:20:00:ab:3c:d1:43:5a:d3:23:fc:
         f6:0e:b8:45:bf:5f:24:15:6c:ec:7c:04:ec:41:c1:94:4b:da:
         9c:49:a0:ef:68:10:5b:cc:e0:b4:4b:88:69:92:47:d2:71:1e:
         bd:66:33:a5:90:15:55:69:36:90:c3:ef:75:bc:45:d9:15:fe:
         4d:c7:a9:57:47:a6:b1:33:d2:61:b0:3f:41:da:bc:8b:2f:a6:
         65:99:6c:17:5f:ef:60:4e:bb:24:e0:53:77:89:39:60:b4:d2:
         16:ea:88:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:16:26 2026 by rpki-client