Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.mft
File:                     OxiO137kpO6Av-8i-pD5LCGJF0k.mft (raw, json)
Hash identifier:          TbsW5Q8ucevu4Eb2w5qNyAODMesYTu87y1Ak2rXsZ3s=
Subject key identifier:   2F:61:04:68:E6:92:AD:F6:4D:68:1C:71:C5:62:20:1B:70:78:DF:C9
Authority key identifier: 3B:18:8E:D7:7E:E4:A4:EE:80:BF:EF:22:FA:90:F9:2C:21:89:17:49
Certificate issuer:       /CN=3b188ed77ee4a4ee80bfef22fa90f92c21891749
Certificate serial:       019EB9588CB167083B81D1FF50F04D5EDF0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OxiO137kpO6Av-8i-pD5LCGJF0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.mft
Manifest number:          0B
Signing time:             Fri 12 Jun 2026 01:00:48 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:48 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:48 +0000
Files and hashes:         1: OxiO137kpO6Av-8i-pD5LCGJF0k.crl (hash: D2SiVyhxzldD2oTdTZ/B+rIWR63JmH+G1Tfe7oIIsl4=)
                          2: RuW8-PgIfibhBoqNocX_t7ptPOE.roa (hash: zV6LrJuAjMC8MbTSFPKsE8qN0Xu/5M2QJ39L5RQKY/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OxiO137kpO6Av-8i-pD5LCGJF0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:8c:b1:67:08:3b:81:d1:ff:50:f0:4d:5e:df:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b188ed77ee4a4ee80bfef22fa90f92c21891749
        Validity
            Not Before: Jun 12 01:00:48 2026 GMT
            Not After : Jun 13 01:00:48 2026 GMT
        Subject: CN=2f610468e692adf64d681c71c562201b7078dfc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:34:18:09:88:cc:dc:db:2f:1a:79:c8:14:
                    4d:bd:fd:0d:ec:34:0f:17:c3:c0:5a:9d:0b:3f:1c:
                    a4:54:73:d8:40:cc:06:be:57:d7:72:5b:50:16:81:
                    7a:63:fb:3c:56:94:00:0b:a4:a9:d3:8d:85:03:98:
                    b6:ac:af:8e:7a:63:f5:16:fc:38:67:24:46:a6:56:
                    50:38:58:b5:a1:bb:ec:69:23:3e:69:f4:99:a3:2f:
                    99:e3:25:77:31:15:6e:b9:1a:25:98:b9:d0:17:be:
                    fe:17:c5:0d:d7:3f:5c:00:e5:3b:a7:18:d6:56:78:
                    2b:40:67:3c:72:3a:56:89:ef:fa:61:eb:d8:9d:6f:
                    f4:27:09:bf:c8:ab:a2:0e:19:39:96:a4:96:88:dc:
                    ea:3d:52:a9:6d:4a:37:6c:1c:77:c3:63:08:88:73:
                    12:97:3f:1b:d0:cf:6b:af:ab:c2:a6:62:a9:6f:eb:
                    4b:17:83:1a:3a:db:fc:ce:3b:3a:2a:dd:8b:85:72:
                    25:0d:7f:82:f5:87:ff:50:fa:1c:27:66:f4:42:0b:
                    21:89:db:d5:57:23:47:2f:3b:dc:74:34:71:2f:f1:
                    7a:cb:6c:13:c3:06:13:ec:93:62:56:01:8d:70:48:
                    b8:2d:71:b1:49:36:f4:a2:25:03:61:25:57:9c:7e:
                    0b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:61:04:68:E6:92:AD:F6:4D:68:1C:71:C5:62:20:1B:70:78:DF:C9
            X509v3 Authority Key Identifier:
                keyid:3B:18:8E:D7:7E:E4:A4:EE:80:BF:EF:22:FA:90:F9:2C:21:89:17:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxiO137kpO6Av-8i-pD5LCGJF0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3ca9ca-2af6-4bdb-a3c9-0d57e0714a45/1/OxiO137kpO6Av-8i-pD5LCGJF0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:27:41:98:d9:db:b8:86:23:56:cd:f0:af:09:6c:0f:27:05:
         71:30:69:45:8f:5c:8b:5f:25:19:8b:9e:de:10:ed:82:52:cb:
         08:33:38:c3:37:b8:af:93:79:9f:7b:73:3b:e0:18:15:57:99:
         a9:2c:97:8a:7a:3c:b8:76:88:00:ed:44:79:02:14:51:67:a2:
         4a:fd:21:28:0c:5c:f2:a2:e6:4d:f4:53:c4:1a:87:9b:b2:71:
         3d:fa:70:dc:47:27:ba:15:a0:86:ef:6c:4c:c8:6b:39:57:5f:
         34:41:f6:72:80:1e:bc:8b:7c:0f:24:c0:16:bb:72:c6:c5:56:
         ce:8a:0d:ea:e1:d2:4b:a6:e1:be:62:2f:b9:08:bc:5f:42:97:
         1a:5b:c8:f6:c6:e3:5d:94:d0:4f:ed:8c:29:12:be:75:00:6c:
         dd:2c:9d:61:2a:68:15:aa:d7:19:e3:6e:f2:ed:cf:9a:16:34:
         3d:27:2c:4e:61:b4:e9:78:48:35:a6:a8:f4:24:2d:bf:fa:e9:
         a7:9c:8f:54:dc:30:3a:0f:c9:19:16:91:c7:6a:b5:dd:51:6b:
         e6:75:4a:6b:b6:2c:aa:cc:56:e3:c4:7b:c4:31:68:95:9a:81:
         0a:30:bf:f3:a4:c1:55:55:c5:3e:19:02:53:26:17:b1:e2:fb:
         df:b4:96:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:27:35 2026 by rpki-client