Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
File:                     o7L02u177ypqtLu5qvrFZU3cU8E.mft (raw, json)
Hash identifier:          ov345jCve5BeZzffc7GgnzD44Cnlims3ELh7NXjflvw=
Subject key identifier:   A3:88:CD:51:63:AF:41:29:6E:4C:A0:A3:6D:05:24:99:4A:B8:69:EC
Authority key identifier: A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
Certificate issuer:       /CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Certificate serial:       019F189EE717849A6BA4DB1C255A5B21844A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
Manifest number:          157D
Signing time:             Tue 30 Jun 2026 13:01:34 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:34 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:34 +0000
Files and hashes:         1: o7L02u177ypqtLu5qvrFZU3cU8E.crl (hash: NhF7QDFlREt0kYsqf8NCpMANmg6TV84f3D+6BI4M8DI=)
                          2: w4ITWrVOd87_9Oz-MtY7slczBow.roa (hash: /062+JMxPPoUdp7c8u+6Eta3MA3XDfRjmmRKaz0UrFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:e7:17:84:9a:6b:a4:db:1c:25:5a:5b:21:84:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
        Validity
            Not Before: Jun 30 13:01:34 2026 GMT
            Not After : Jul  1 13:01:34 2026 GMT
        Subject: CN=a388cd5163af41296e4ca0a36d0524994ab869ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:69:56:8a:d5:fc:f3:73:f9:99:61:14:40:48:
                    94:00:45:23:e8:09:29:05:74:ed:cf:81:6c:e3:a2:
                    66:c2:9d:db:8a:0e:9b:30:37:f4:b5:f3:4a:0b:b0:
                    d0:22:02:15:c9:1c:9a:24:cb:5b:bf:c5:99:c3:84:
                    58:1d:e1:ee:8f:da:39:be:a9:b5:18:75:15:21:0c:
                    21:fe:2f:b4:2b:ae:e4:b2:05:cb:bf:24:06:36:34:
                    48:26:03:3a:f9:f5:a6:00:df:72:81:a7:a7:f0:54:
                    30:e3:2c:06:b8:b7:45:09:2b:0b:df:7a:29:02:55:
                    c6:5a:02:8d:b9:c5:43:e9:36:59:bf:5b:c6:ba:80:
                    ff:b7:ad:e9:2e:3e:38:05:c5:b2:18:83:23:65:b8:
                    4c:9b:92:8b:e2:c6:6a:4a:be:14:0c:19:81:86:15:
                    2a:be:87:db:08:39:58:b2:d0:bf:92:d6:b9:55:1c:
                    92:d5:62:02:d7:d5:fa:98:49:89:9a:f8:dc:21:98:
                    53:2b:d0:d9:84:58:38:b4:b2:b7:ef:db:25:76:46:
                    df:c2:3a:0d:b5:af:04:63:a4:78:fa:6a:dd:68:41:
                    d0:9e:47:07:0a:cb:03:d4:77:94:f2:ba:dd:44:46:
                    ca:0d:44:ac:9a:ba:6f:31:cf:24:dc:9c:7f:02:a8:
                    64:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:88:CD:51:63:AF:41:29:6E:4C:A0:A3:6D:05:24:99:4A:B8:69:EC
            X509v3 Authority Key Identifier:
                keyid:A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:27:fe:9a:78:9a:ac:63:ee:67:ac:71:e9:45:40:bc:f6:7a:
         9c:54:7b:fd:d9:fb:54:9d:81:48:58:05:71:77:16:62:2b:ea:
         0f:e5:86:60:a2:a1:d6:67:92:18:b8:7a:7d:d7:18:96:62:84:
         8a:99:69:68:7e:42:42:32:5f:6c:fc:39:00:60:12:c5:07:f8:
         77:a8:68:ef:8d:f0:d8:8d:1d:72:e3:98:53:af:f1:b0:42:da:
         ae:e6:2e:de:92:32:ed:d2:dc:e2:7a:c7:6d:6c:48:e2:02:7d:
         96:a8:e5:26:bd:32:f3:df:c9:0b:44:f5:99:10:f1:11:1a:1b:
         04:ce:91:3b:06:75:ec:12:b8:f9:41:cc:c0:ba:36:08:1b:31:
         26:eb:37:01:46:8a:03:03:fe:52:87:a5:e8:fc:70:9f:62:2e:
         26:cb:99:8a:b8:56:3f:9f:77:18:29:9c:ad:e7:10:40:03:9f:
         d1:18:7e:3f:75:aa:4a:7e:4d:f2:68:49:76:82:33:90:b5:0b:
         e8:01:68:ec:34:b4:93:fe:b2:9c:e1:1d:6f:29:c1:d3:9c:d1:
         7a:2a:50:19:6f:1c:ee:9e:0b:57:0d:ee:2b:be:0c:73:ff:15:
         c7:58:d6:5b:4b:37:be:b9:76:c7:72:60:cd:1e:a6:9a:42:b6:
         a8:e2:5a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:39:59 2026 by rpki-client