Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
File:                     0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft (raw, json)
Hash identifier:          okxuTbNpJLO0DH7Kc6eXbB5B1gzK5+cuCaXb89CWM4A=
Subject key identifier:   C7:25:4B:43:25:40:62:1E:E7:F1:EC:CD:BF:F6:00:41:61:1B:F9:37
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Certificate issuer:       /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial:       019F197A215806B00C787DE2E8F06DA24785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
Manifest number:          149A
Signing time:             Tue 30 Jun 2026 17:01:02 +0000
Manifest this update:     Tue 30 Jun 2026 17:01:02 +0000
Manifest next update:     Wed 01 Jul 2026 17:01:02 +0000
Files and hashes:         1: 0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl (hash: fwFXxjEMoY80R/dAKnv0kGMLAS4+XU4BM9Adh+yURAQ=)
                          2: 2a-ajfpkZAsjReLLQ1xduA5jH68.roa (hash: lQdPyjxms9XmoRw9yTquBchApgiBDYUsw2V+v//4ubw=)
                          3: 3qWiv8aUt9sce-sZcGdmrNaNLPY.roa (hash: fDS2D0rIZulEuzsnb+BYc++UCvsn6GakJSLWm65oY60=)
                          4: 5o_jXKDrMZ_VUtAMAA1b61XpZY4.roa (hash: cW/aLAiDeErlaNGgC/UoOefJEPVaWg9YZ9ILa/HwLxQ=)
                          5: iCg9tDwj1vgv7l4zkfBWYVXyBYs.roa (hash: +sR86m8s5uPTFwMcLKL+T0A/ZDbNibZcTed4QGQkB+U=)
                          6: m-4Bzgn_XA7AnDHyUCDMxv4tjws.roa (hash: AQFWIEldUOojspkBOhlpdbyceFMGqpqRnivtz2V3WHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:7a:21:58:06:b0:0c:78:7d:e2:e8:f0:6d:a2:47:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
        Validity
            Not Before: Jun 30 17:01:02 2026 GMT
            Not After : Jul  1 17:01:02 2026 GMT
        Subject: CN=c7254b432540621ee7f1eccdbff60041611bf937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fe:b3:10:83:93:0f:8f:68:30:1e:40:16:c8:
                    ec:3f:a8:72:67:75:6c:e0:ea:86:a5:f2:f4:e9:5c:
                    1a:8e:aa:90:b8:d2:e6:ce:1e:78:2e:9e:bc:d5:7b:
                    a4:7c:b3:dd:2b:2d:c4:0c:64:b4:46:8d:8c:f0:54:
                    c4:bb:b1:75:c7:a3:f7:47:f6:5b:f6:5f:86:c1:4c:
                    d0:34:a1:67:c7:c4:16:41:98:3b:b1:22:32:91:fc:
                    1e:95:45:d3:12:63:c0:0a:30:28:fb:c4:1c:ba:66:
                    6d:ba:fa:e3:21:2f:1d:de:aa:bf:b4:0a:fe:e2:db:
                    61:26:61:13:77:d2:9e:31:69:26:01:c0:bb:fa:18:
                    2c:07:5f:53:46:6b:f5:cc:76:5e:1b:5d:ea:50:16:
                    12:40:9b:a8:54:c2:39:ee:01:f0:0b:60:fb:46:9c:
                    a5:e4:2d:a4:05:b1:3c:fc:e6:40:c1:08:93:d5:d1:
                    8a:92:23:cc:5c:79:19:8b:a0:4a:04:3c:83:31:63:
                    27:ea:2b:14:2e:b6:e2:dd:09:2e:42:29:d1:1e:fb:
                    7c:b7:38:4e:d7:c7:d2:83:7a:26:bc:a8:84:2f:e7:
                    9d:b1:6e:fa:ff:27:05:68:db:35:88:dd:43:7d:95:
                    cc:ac:62:03:3f:74:74:79:e7:b9:12:9f:d4:6d:67:
                    83:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:25:4B:43:25:40:62:1E:E7:F1:EC:CD:BF:F6:00:41:61:1B:F9:37
            X509v3 Authority Key Identifier:
                keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:56:d2:1d:e1:db:5c:74:7d:bb:06:7a:0d:ae:70:19:85:83:
         33:43:29:11:63:2c:36:60:61:7d:0e:47:20:2a:12:94:e5:1a:
         4b:2c:45:0c:c9:4a:87:fd:6c:18:7d:3e:dc:71:76:45:f2:bd:
         8a:25:2c:5d:ee:c2:17:f0:ec:57:8d:f2:2a:31:a6:f8:62:72:
         73:22:88:b1:b5:4d:76:b5:92:9a:96:3b:c2:dc:cc:69:fa:a2:
         c9:d7:c6:7e:fc:da:0e:28:31:55:e0:f9:ab:6c:4d:34:e5:6a:
         19:7c:e3:71:0d:77:94:8b:98:94:70:37:a3:9c:52:de:57:ac:
         5f:16:87:f2:87:68:03:ab:bf:20:bc:51:33:11:e8:7a:f0:85:
         55:74:39:c8:02:37:7e:be:1f:66:12:0d:9b:30:72:16:0e:76:
         ec:a6:f7:83:fc:22:c8:3f:21:b5:90:e2:3f:01:99:b5:7a:cc:
         e9:97:69:d8:25:68:fb:24:f7:cb:54:dd:3c:48:99:d3:d5:8c:
         7e:72:1f:12:6c:e7:63:53:e8:51:a3:d1:7f:ae:69:09:7f:a5:
         df:4d:f2:7c:2f:c1:2e:fb:c9:29:4f:33:f5:a3:0c:18:ed:15:
         f1:64:81:d1:de:33:d4:66:da:2c:e8:7f:ea:90:23:6a:ab:62:
         c7:e4:ce:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:35:45 2026 by rpki-client