Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File:                     oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier:          4OSiJFOpI6q7pPt9TN3DBOtB9xdX/75cNVCFQFyCO4k=
Subject key identifier:   4D:2C:E6:FF:11:3E:A0:C2:DA:BC:5A:61:A7:3B:B2:D3:16:09:FE:B4
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer:       /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial:       019FA1F29157BE348CFB13AEACBBD1C662CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number:          19EB
Signing time:             Mon 27 Jul 2026 05:00:56 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:56 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:56 +0000
Files and hashes:         1: McIHeSgScebcIpkPT4THS1jto5Q.roa (hash: fdb99PeEhGhn7zMv+ymuqGVl1nC5qV/Bm2pOoVJfRTc=)
                          2: QOOLONPw0mL0zRM6xNCnZ8lu_HA.roa (hash: t5PPKx70RsbnvkvxFWuFNiVu0RY4KKSyPrpAVr06jsQ=)
                          3: lfZvGuublTghs87OLe3YBrTz9rw.roa (hash: 33L3jHKPnMn4vOjKfAOLDS9PGwe/ZxS6Z/D2j8Yjgis=)
                          4: mBsIhxGKE9P1VcdBmaDVaq-y2yg.roa (hash: FjrD6MxlebN9aOC6ecpbIK3eMGRCmF4PugIT8px8qes=)
                          5: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: pGUgCaz5IMT8rGks0nad+tka1yD2ol2ZRQihR6qj7ic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:91:57:be:34:8c:fb:13:ae:ac:bb:d1:c6:62:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
        Validity
            Not Before: Jul 27 05:00:56 2026 GMT
            Not After : Jul 28 05:00:56 2026 GMT
        Subject: CN=4d2ce6ff113ea0c2dabc5a61a73bb2d31609feb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ba:18:0c:ab:30:63:1c:8e:1a:80:92:29:2b:
                    8b:af:74:18:1d:fa:88:df:7a:cd:c7:47:c7:69:2a:
                    48:4d:9f:49:cf:33:63:bc:52:a5:62:ad:30:22:da:
                    3d:40:08:6b:bf:61:a2:26:f7:1d:c7:10:69:c1:23:
                    fc:e8:69:5a:2c:6d:9a:7a:9b:cf:d5:c5:f4:6a:5b:
                    97:40:65:6b:19:df:d7:eb:94:e3:c1:d1:4b:ea:7f:
                    0f:98:20:2a:aa:3e:de:8d:5e:9e:97:68:d3:6d:82:
                    ed:31:d8:bc:16:9c:7e:65:72:26:fd:0b:25:ff:ba:
                    27:92:2f:12:9b:d6:c2:96:88:10:f8:76:11:22:01:
                    25:ee:e1:fc:c2:50:c8:8a:f2:53:33:0c:b7:62:5c:
                    23:a0:17:ee:da:1e:1a:7e:d9:d2:3a:a2:7c:2c:f9:
                    b9:f9:64:8b:09:6e:26:eb:79:84:1e:c5:45:1b:a4:
                    76:97:ea:32:f7:a0:a0:bc:c4:c7:b8:c2:d0:33:bf:
                    ec:7d:ab:70:19:e8:89:25:40:62:84:54:96:4f:05:
                    96:e4:5f:14:83:28:8b:b7:80:a4:7d:25:a1:51:a1:
                    7e:44:0c:26:02:dc:59:2a:c4:25:3f:99:7e:06:fa:
                    96:d0:0b:eb:dc:68:13:6d:d5:f3:a1:5c:dd:e8:d8:
                    cb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2C:E6:FF:11:3E:A0:C2:DA:BC:5A:61:A7:3B:B2:D3:16:09:FE:B4
            X509v3 Authority Key Identifier:
                keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b8:94:f4:cb:0a:f5:32:a1:45:7f:df:d2:13:09:99:80:f3:
         f4:4e:77:e8:8e:69:6c:5b:f5:2e:56:e4:84:58:e6:f5:95:57:
         18:4f:92:d6:24:4b:6e:6f:73:31:53:29:6a:84:b7:8d:5b:1a:
         f0:21:a7:2d:a2:89:0e:92:a2:fb:af:b0:ac:41:3d:51:db:1b:
         74:74:08:ac:46:42:43:b9:88:e2:71:0c:fc:71:fe:8f:95:3c:
         9f:df:cb:6e:a3:32:bb:2c:2f:5b:45:ce:90:bc:32:83:19:e8:
         9c:c8:c1:a9:e8:42:af:46:98:cd:ce:3a:00:e8:6d:fc:16:55:
         6c:0d:70:54:49:01:2b:b0:da:b5:e9:1d:ed:5f:b8:c2:1a:0a:
         1d:f1:1e:98:df:4b:17:5a:fb:69:4b:aa:44:ae:3b:bc:89:b0:
         c1:ba:3a:f1:e2:8f:19:42:e0:c5:57:b8:89:fd:07:8a:a0:4a:
         85:3e:ac:4f:35:50:3f:fa:15:bb:66:1e:5d:7a:10:ea:0a:2d:
         57:5c:da:2a:d2:e8:07:a0:2e:dd:be:41:63:bd:80:55:ef:ff:
         48:61:b1:36:05:4c:9c:5e:1a:bc:21:95:41:57:22:27:1b:61:
         db:2f:e5:4b:04:6d:77:b3:6c:f1:ed:27:e8:27:70:b0:f7:9d:
         d7:72:17:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:49:11 2026 by rpki-client