Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
File:                     OheL_-MM22DhSQ0up-cS9ASb-eU.mft (raw, json)
Hash identifier:          pbBli/uCtIpAvbxjcnR1iHrFedQBXBDZ+osELk6jOO4=
Subject key identifier:   DC:5A:C5:E5:E4:44:A0:59:81:7E:66:A4:FC:69:2D:2E:23:6B:6C:E4
Authority key identifier: 3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
Certificate issuer:       /CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
Certificate serial:       019EB7A09BCE42C66B33AAC764FDFAE6F47A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
Manifest number:          B1
Signing time:             Thu 11 Jun 2026 17:00:16 +0000
Manifest this update:     Thu 11 Jun 2026 17:00:16 +0000
Manifest next update:     Fri 12 Jun 2026 17:00:16 +0000
Files and hashes:         1: 3NvQLbl2JPb-Gx07toKt-8TX1FA.roa (hash: DJnggPoVXnYpKJsX86Ol2F0P4IpRyrVC4wg+ZYq8L+A=)
                          2: OheL_-MM22DhSQ0up-cS9ASb-eU.crl (hash: sJeEheDtYTtMsyTLZp9RZQ8MkAABzSw3INdw8sQaaJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 17:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a0:9b:ce:42:c6:6b:33:aa:c7:64:fd:fa:e6:f4:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
        Validity
            Not Before: Jun 11 17:00:16 2026 GMT
            Not After : Jun 12 17:00:16 2026 GMT
        Subject: CN=dc5ac5e5e444a059817e66a4fc692d2e236b6ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c8:88:53:4c:53:fc:85:12:69:d7:f1:de:ec:
                    c4:d0:f6:2f:9e:55:95:1a:e4:3b:fa:fb:17:31:5c:
                    87:ce:56:fe:ed:d3:58:30:1f:ad:0b:c3:7f:c1:3e:
                    2e:bc:41:be:7b:3a:02:ec:59:78:2f:45:d6:22:3c:
                    4b:14:e1:29:76:03:e9:0a:4f:5b:e9:6a:ca:b8:b0:
                    b4:9c:17:64:1e:9d:4c:d7:fa:64:fb:9d:92:ac:6e:
                    90:c7:0d:68:45:6f:06:0b:0f:bc:20:5f:c3:bb:6f:
                    fd:b3:49:af:95:bb:b6:57:68:d6:de:ac:27:36:15:
                    40:46:29:6c:d1:ac:3d:47:d6:fa:26:6b:71:7d:39:
                    27:bd:50:e6:7f:b2:d2:ef:00:5d:3a:9d:34:61:15:
                    d8:42:d9:2d:7c:86:18:96:f5:d4:e3:49:af:60:98:
                    72:ce:da:24:72:28:59:9c:d6:5f:c5:23:03:7f:83:
                    67:47:a7:e8:d4:20:71:b1:bf:66:2d:a1:7e:b4:38:
                    cc:dc:66:66:0f:f3:13:21:43:47:61:a6:d2:7d:c2:
                    ac:d8:4f:47:ff:e3:da:1e:a4:76:08:47:b7:47:78:
                    55:f7:87:9f:59:cb:b4:46:48:38:91:1f:33:31:57:
                    0d:24:c5:f9:c8:da:74:64:19:e3:c7:95:e7:5e:30:
                    59:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5A:C5:E5:E4:44:A0:59:81:7E:66:A4:FC:69:2D:2E:23:6B:6C:E4
            X509v3 Authority Key Identifier:
                keyid:3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:67:b7:38:39:e0:2b:0f:86:7e:16:5e:3c:b4:59:5b:a3:cd:
         9a:28:39:78:c9:46:46:74:fb:79:e7:fa:b2:d0:36:c4:63:3b:
         51:6c:88:65:8c:95:4d:67:62:3a:69:c3:e1:de:37:1e:73:0f:
         59:0a:3e:62:35:72:6f:46:bf:c7:8c:3f:69:00:f6:f8:32:91:
         e3:d3:a0:70:92:3c:04:94:58:92:1b:07:47:60:04:73:9a:a9:
         b2:25:5c:7d:f2:80:6b:3b:84:de:78:01:e5:1b:74:1c:e8:55:
         b2:1b:e6:fd:14:6b:f5:14:cd:73:ed:e4:52:18:19:65:99:31:
         30:a4:3a:56:23:b1:d8:6c:2f:df:45:e1:dc:e1:75:86:1e:4b:
         c5:76:2e:3c:0c:df:33:8d:e2:95:35:52:4c:10:eb:fd:65:c2:
         eb:43:3f:a9:f2:96:a0:dd:21:d1:d2:8e:5f:d5:d0:d3:d1:bb:
         a6:d4:e3:24:51:96:7b:5a:d5:31:b2:c9:0a:c8:85:b6:18:c8:
         48:dc:28:cb:6b:12:18:e9:45:9b:6d:95:74:1c:6b:75:9a:91:
         61:71:c4:14:ab:47:15:02:fc:65:ed:28:c4:17:71:29:d7:8d:
         37:22:c7:90:96:10:19:19:af:5f:b4:47:bb:4e:12:e5:c3:8a:
         45:d5:8f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:54:07 2026 by rpki-client