Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft
File:                     OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft (raw, json)
Hash identifier:          MIgDg9pbxlkDa9SUAgYtwWO7P3dlMjVuTG0uP7lGsnM=
Subject key identifier:   88:79:19:9D:6D:00:FB:D0:28:C7:A6:75:0B:5F:88:5B:35:81:04:92
Authority key identifier: 39:F9:E6:81:AB:27:27:E7:AF:03:C9:AF:C5:9F:6B:AD:83:18:FA:AF
Certificate issuer:       /CN=39f9e681ab2727e7af03c9afc59f6bad8318faaf
Certificate serial:       019F5369AB528E0B75B9E8FEAFC629637A30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfnmgasnJ-evA8mvxZ9rrYMY-q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft
Manifest number:          C3
Signing time:             Sat 11 Jul 2026 23:01:01 +0000
Manifest this update:     Sat 11 Jul 2026 23:01:01 +0000
Manifest next update:     Sun 12 Jul 2026 23:01:01 +0000
Files and hashes:         1: OfnmgasnJ-evA8mvxZ9rrYMY-q8.crl (hash: yOMZ4IigWstF4OFiCdTpj6Wd/OxzruN4eHSu1cAnI44=)
                          2: c0Vk60kJ7ueTPIokv7qGtH3eTTQ.roa (hash: O+dHMuQMe/fBcOZ5bxLhWVDzmIw1sCX/tFC/j0yj2qI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OfnmgasnJ-evA8mvxZ9rrYMY-q8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 Jul 2026 23:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:53:69:ab:52:8e:0b:75:b9:e8:fe:af:c6:29:63:7a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f9e681ab2727e7af03c9afc59f6bad8318faaf
        Validity
            Not Before: Jul 11 23:01:01 2026 GMT
            Not After : Jul 12 23:01:01 2026 GMT
        Subject: CN=8879199d6d00fbd028c7a6750b5f885b35810492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f6:3d:e9:da:68:cd:a3:7b:b0:dc:7e:ae:9a:
                    b2:e6:b0:77:99:4c:f6:ae:15:80:ad:36:41:f5:42:
                    2c:01:9a:10:15:37:93:52:f8:cc:58:55:20:8f:1a:
                    5f:be:65:aa:26:1a:c0:e2:ea:e5:53:b8:02:18:1a:
                    e2:1f:5e:e1:d4:ed:63:ea:69:25:5c:22:25:0a:76:
                    68:5a:c6:15:8e:39:88:f2:13:39:cc:9d:9a:37:d6:
                    ad:f9:81:eb:72:89:4a:f5:7f:e5:82:05:94:20:8a:
                    e6:30:f1:4c:f3:f0:e5:0b:ea:90:0d:35:0c:a9:8e:
                    f7:15:46:ee:de:66:11:81:bf:d1:7d:64:1b:20:cf:
                    aa:46:11:1c:60:c4:e0:c2:f6:a9:d1:b3:4e:2f:a7:
                    43:cb:c1:0e:f0:dc:b6:4f:8b:e9:24:0d:2f:e8:df:
                    81:e7:e9:66:18:f4:f1:b6:7c:a9:8d:51:7d:4d:23:
                    10:10:59:f3:f0:d2:6e:cf:1c:3d:7c:17:29:55:17:
                    f3:07:10:85:f7:bd:e6:6a:40:f3:fb:ef:14:44:23:
                    f7:3d:26:20:10:b8:b2:fb:a8:5f:07:68:9d:0b:10:
                    23:f7:62:fd:2e:3e:c9:94:4e:5a:58:c5:3d:8c:bf:
                    df:a3:d5:08:37:29:0c:de:20:03:c4:65:6c:31:77:
                    4a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:79:19:9D:6D:00:FB:D0:28:C7:A6:75:0B:5F:88:5B:35:81:04:92
            X509v3 Authority Key Identifier:
                keyid:39:F9:E6:81:AB:27:27:E7:AF:03:C9:AF:C5:9F:6B:AD:83:18:FA:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfnmgasnJ-evA8mvxZ9rrYMY-q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:ad:22:96:a2:46:da:66:28:f5:85:b8:65:5d:f5:e6:82:12:
         26:9b:2b:e9:c5:34:61:9e:30:da:0a:ae:f6:a3:b2:e0:12:75:
         11:e8:1e:21:56:5a:7d:e0:22:bf:57:37:9e:a8:71:97:c8:a1:
         b2:72:8d:de:d2:f5:5c:b9:17:29:5f:f8:08:3b:78:a7:cf:45:
         a7:41:73:82:4c:cd:40:1c:8e:be:95:60:44:d3:36:b1:ac:b1:
         b6:88:59:eb:1e:68:ee:2e:09:bf:61:7c:ba:43:19:ed:e3:45:
         01:2e:b6:5d:b0:13:93:a3:0b:2d:0c:a0:df:cf:f1:b4:19:e1:
         cc:eb:94:d3:28:a2:2e:3a:5e:64:d9:f7:38:c8:fc:e2:5b:cb:
         a7:32:86:17:2e:c7:c2:b8:73:1f:2f:9f:04:c3:5a:86:e5:1c:
         80:1d:cd:ee:8c:2a:8e:09:50:a4:79:53:8a:b9:67:0c:8d:2c:
         de:de:50:97:b7:da:f6:df:3f:50:09:46:ac:f3:ba:2f:a1:ea:
         1e:5c:5d:af:96:1d:ac:1d:6f:f6:e5:ab:aa:27:b3:57:4b:70:
         e2:66:ec:fe:73:48:5e:f9:b1:29:c6:d1:4c:4f:84:55:c2:54:
         c5:0e:a7:db:40:98:d1:da:0b:78:be:e5:94:59:4f:ae:aa:89:
         82:f6:c9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:07:47 2026 by rpki-client