Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
File:                     o082XngGS1jETUjPs5KR0_sdnhA.mft (raw, json)
Hash identifier:          o9tTVtNKQWlL3wqAV46AydHkqBUZkgKMe+YThJKSs0E=
Subject key identifier:   CC:7D:D5:1F:35:AB:07:2C:72:87:88:2E:F4:86:7B:AF:81:CF:7B:51
Authority key identifier: A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
Certificate issuer:       /CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Certificate serial:       019F3B2AB82F5DCBFE7592935BDE85D0A3E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
Manifest number:          18DD
Signing time:             Tue 07 Jul 2026 06:01:22 +0000
Manifest this update:     Tue 07 Jul 2026 06:01:22 +0000
Manifest next update:     Wed 08 Jul 2026 06:01:22 +0000
Files and hashes:         1: o082XngGS1jETUjPs5KR0_sdnhA.crl (hash: GH4d/NPn7WRdOrKjuDifL7/NlLwjNBn6UkxswXBx8/4=)
                          2: sWZCCJ9mYF4x-AZV9gqyKfwmtqw.roa (hash: ENzKV46vc1yAkS1qAwIAJTRoo8u9W0tkvlFZn62IWoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Jul 2026 06:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3b:2a:b8:2f:5d:cb:fe:75:92:93:5b:de:85:d0:a3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
        Validity
            Not Before: Jul  7 06:01:22 2026 GMT
            Not After : Jul  8 06:01:22 2026 GMT
        Subject: CN=cc7dd51f35ab072c7287882ef4867baf81cf7b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:f4:e5:50:da:5c:e3:7e:49:84:35:b4:8e:
                    32:c5:96:43:a6:60:7d:7a:f4:c7:56:5a:d1:86:2a:
                    33:f2:b9:f9:27:0d:6a:0a:2f:5f:40:c0:ff:54:b4:
                    31:72:49:86:48:2a:7f:33:a6:b1:a5:61:42:83:68:
                    a5:16:c3:34:fe:47:d2:9a:09:8f:d5:8b:e9:ab:41:
                    78:f4:4b:58:df:a2:90:9b:45:d6:82:2a:37:02:f5:
                    e1:af:22:31:95:56:f9:32:5d:e6:85:f4:26:88:00:
                    0f:a7:95:34:cc:82:3c:84:0d:a0:94:4b:df:8d:6b:
                    df:36:53:2a:fa:6f:a5:fc:21:69:b6:88:ee:31:4f:
                    fa:af:1b:18:ef:bf:06:6f:54:0b:af:33:31:d1:1c:
                    da:80:3e:7a:47:0e:41:06:6c:15:b3:25:78:73:8b:
                    50:57:65:01:75:06:70:d9:04:b5:66:25:0d:7e:f8:
                    bc:13:08:66:db:e1:de:7d:bc:b8:69:16:24:20:07:
                    93:c3:2f:46:f7:ff:ee:f0:93:60:97:99:c7:fc:86:
                    4a:69:a1:bc:45:95:15:f0:90:a5:a2:0a:b8:05:b2:
                    5f:56:75:79:e3:4c:a2:13:45:60:d4:a9:67:2e:9c:
                    54:20:87:d3:ce:d8:30:6a:46:15:28:e2:f9:53:8f:
                    ad:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7D:D5:1F:35:AB:07:2C:72:87:88:2E:F4:86:7B:AF:81:CF:7B:51
            X509v3 Authority Key Identifier:
                keyid:A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:5a:a9:27:c8:d7:05:6e:1f:01:31:9a:74:00:28:08:3e:5b:
         27:e2:82:b8:46:01:44:d6:e5:74:b8:63:28:9a:70:b4:48:75:
         1c:68:29:e8:31:f9:16:a2:58:36:1b:27:68:ac:36:3e:f0:36:
         ad:81:b4:e4:4d:51:e5:a7:9d:73:4a:3e:f2:02:1d:29:86:ce:
         e2:de:b3:58:7e:4e:d7:2d:e4:b1:a5:36:2a:e3:77:56:72:29:
         c1:a9:52:5f:9e:3e:d7:21:92:fa:a3:37:19:be:cd:9c:a1:42:
         fa:c2:3d:c1:88:d5:5f:2f:1f:d1:fe:87:0b:0d:f7:2b:af:ea:
         fc:db:f8:0a:01:6b:07:d5:b0:b2:54:89:d9:79:b5:38:b7:7a:
         59:ec:6a:a2:b9:03:2d:ae:a1:97:03:86:a7:af:57:4c:5f:cb:
         25:8f:13:2c:6a:1f:a5:bf:1e:e5:d0:c7:a7:4f:99:73:47:94:
         3b:bf:e4:88:72:3e:90:4b:30:cc:c1:c2:cb:5c:d7:8e:7f:9f:
         26:7d:1d:75:20:d8:86:e9:b5:cf:69:68:66:ca:59:42:62:53:
         e0:bb:01:5f:91:c1:f8:67:34:ab:d9:9a:6e:82:e2:40:dd:0f:
         31:b0:54:83:bc:d9:b7:e3:7a:3e:5a:bc:79:2b:70:4b:ac:1e:
         e0:29:de:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 14:44:41 2026 by rpki-client