Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
File:                     oev1TQKO5HZPYveK2HHb8CYih4g.mft (raw, json)
Hash identifier:          2/CqjN9TKFLLmWyKJTxzJ3qdOxXXyX3BPCN0qa4x97E=
Subject key identifier:   80:DE:0C:30:66:D0:01:5F:07:2E:A7:F1:2A:F2:3C:9E:9B:5A:AE:46
Authority key identifier: A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88
Certificate issuer:       /CN=a1ebf54d028ee4764f62f78ad871dbf026228788
Certificate serial:       019FA1F24CFBCB547689BA9BD5386118729C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
Manifest number:          0719
Signing time:             Mon 27 Jul 2026 05:00:38 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:38 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:38 +0000
Files and hashes:         1: 26PCuULcHS-vm3v3fQgA6-1DVmQ.roa (hash: tTyj68LqKHap/YbHLtgQzuaQZ2ESKiv4xe4q4toZyQQ=)
                          2: X7aPlR-pZo6rLSSiJT7Oe8Uyo-s.roa (hash: f8OEucDIP6cYs0bjMa0ASBn6fJHEhpbyHwyN5ykv6sY=)
                          3: cJErKp3l7YOeG09N0R0TYAEpUGg.roa (hash: 7gKjqS1rnbh2fqNlL6j2VX106p+ru9PHs/6B+IxwUi4=)
                          4: kdtriYs5EMHzMm8GxGhb8NfrmqQ.roa (hash: lBWS6NaSe2F942bAeRrCfj/gV/8TvjoRWKgChfD/esI=)
                          5: oev1TQKO5HZPYveK2HHb8CYih4g.crl (hash: HOWAN19q8P2oxvz2tvpcdCVaO7gaRSY+QujWzU4n784=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:4c:fb:cb:54:76:89:ba:9b:d5:38:61:18:72:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ebf54d028ee4764f62f78ad871dbf026228788
        Validity
            Not Before: Jul 27 05:00:38 2026 GMT
            Not After : Jul 28 05:00:38 2026 GMT
        Subject: CN=80de0c3066d0015f072ea7f12af23c9e9b5aae46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:be:be:56:76:84:5a:cf:b0:5a:7e:09:43:21:
                    6f:3a:bb:7b:02:c1:2b:f8:33:0b:64:a4:eb:65:d5:
                    a1:5e:44:4c:db:f0:9b:7c:ed:18:57:7c:39:20:96:
                    73:d5:19:4f:53:58:38:aa:83:4e:19:da:7c:c9:2f:
                    86:84:ae:dc:97:41:1e:98:72:c2:cd:ef:b8:ae:21:
                    2c:db:a3:75:bc:6c:e0:b5:86:e3:ff:f9:2c:96:11:
                    d3:7b:45:50:bd:18:f6:e8:b0:a3:d8:58:f5:14:82:
                    84:e3:07:7e:c9:eb:61:8f:98:cf:b8:69:09:11:66:
                    66:2a:03:42:0a:27:2e:88:91:b3:0d:89:bd:11:2a:
                    af:83:7a:4e:59:ce:da:2e:e8:4b:46:29:a0:7f:6b:
                    2c:ba:be:61:2b:d4:9e:18:30:4d:8c:38:27:12:0b:
                    d6:56:84:4a:aa:39:14:a3:d7:81:85:af:cc:62:1b:
                    0a:5d:94:10:5a:34:23:b2:28:fd:24:27:10:5f:4b:
                    09:c5:79:0b:4f:ff:60:b0:9c:6b:ef:07:1e:77:3b:
                    b8:bc:9e:b2:d5:5e:b6:95:3a:9a:41:17:ee:fe:dc:
                    e9:8f:49:9f:b0:77:2c:ab:38:56:1e:8f:a0:30:5c:
                    37:90:16:bc:18:b8:b3:ce:4d:04:97:2e:e9:72:25:
                    18:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DE:0C:30:66:D0:01:5F:07:2E:A7:F1:2A:F2:3C:9E:9B:5A:AE:46
            X509v3 Authority Key Identifier:
                keyid:A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:1d:92:25:7b:10:8e:2b:fe:b4:1c:41:dd:01:e6:a4:10:a4:
         7f:f9:24:b0:29:50:23:ad:4d:ff:c0:08:6d:aa:34:fb:2c:a2:
         f5:73:59:c6:67:f7:51:65:09:5b:ba:54:94:f5:8c:1a:59:f3:
         a6:57:91:fd:80:d0:8f:8e:1d:a2:e8:63:f1:26:76:47:f0:c1:
         69:2e:24:99:61:80:d8:c4:fc:d7:12:67:b2:6c:f7:68:5a:ac:
         37:6b:17:b5:6c:96:2a:99:77:28:80:d0:20:b9:f9:74:2c:a9:
         33:15:56:4d:2b:1c:97:af:ed:49:dd:11:c9:b9:01:50:33:82:
         e1:3b:a0:18:e3:27:c6:90:5b:d1:31:af:56:2a:10:81:e9:52:
         9f:c3:2a:00:2a:08:ab:08:0e:54:07:e9:55:c1:68:e4:db:e8:
         7a:ef:5a:54:53:3c:e4:21:9d:2f:cc:de:38:93:ea:e3:f3:74:
         bc:a9:68:9b:e2:d6:88:b9:b7:11:84:6c:c3:8d:65:16:71:14:
         e9:ad:3b:e2:9a:e9:77:21:50:b1:77:18:a8:2c:e0:0b:b3:d7:
         06:9f:e0:33:ca:fe:c9:d2:31:a7:e3:a4:ae:af:f2:ff:57:9e:
         70:07:d6:f8:01:16:09:fe:c2:21:19:84:fb:e9:8f:c9:34:db:
         73:52:1f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:04:42 2026 by rpki-client