Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
File:                     O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json)
Hash identifier:          YGvvuTvCTE82CXSLsxH6xizb9JabN6AV6ap59vEpr+g=
Subject key identifier:   07:01:CB:35:80:AD:65:25:E7:0C:DE:45:D2:F8:67:17:D3:C0:1F:B5
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Certificate issuer:       /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial:       019E9B173F12BA6406687FC9903BA83C70C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
Manifest number:          1951
Signing time:             Sat 06 Jun 2026 04:00:52 +0000
Manifest this update:     Sat 06 Jun 2026 04:00:52 +0000
Manifest next update:     Sun 07 Jun 2026 04:00:52 +0000
Files and hashes:         1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: gBY0IzKuRgFeLuEvUjObQAaMG6Y/gRw95URtYTxFd6U=)
                          2: uypIIfN_gqEh3lmpScBuFQ0y2x0.roa (hash: qYsj/xVAas+VL1pl193+WdJRRlNb+wnpITbwyt+RIfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:17:3f:12:ba:64:06:68:7f:c9:90:3b:a8:3c:70:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
        Validity
            Not Before: Jun  6 04:00:52 2026 GMT
            Not After : Jun  7 04:00:52 2026 GMT
        Subject: CN=0701cb3580ad6525e70cde45d2f86717d3c01fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5d:5c:c0:9e:1e:a9:7c:3c:12:25:43:41:8a:
                    e5:14:71:2f:b1:d8:7a:ff:f3:20:41:66:65:15:32:
                    74:c1:62:ed:b9:c3:7a:74:44:5d:67:69:b8:f9:34:
                    8c:28:70:24:8d:18:8f:ec:cd:b0:79:d3:e2:a0:92:
                    d7:2e:b4:59:05:18:1c:0b:94:8e:f0:e9:b7:90:10:
                    63:9a:a2:3b:f3:4a:c6:99:57:e7:34:ff:f3:b7:95:
                    5c:ea:7d:cf:87:12:5f:b4:81:4f:13:55:2f:f0:68:
                    10:7e:ca:d5:ff:56:b2:3f:ab:d2:a4:66:83:6d:a4:
                    9f:5c:d3:07:f1:53:1d:5b:4e:59:64:36:07:2e:36:
                    24:5a:37:03:b6:78:be:dc:4c:c5:16:e2:7f:24:91:
                    07:3f:13:f0:1c:03:f9:da:10:21:c4:51:44:23:45:
                    38:3a:5a:36:9d:c7:3d:fc:d8:c9:da:4f:87:b2:54:
                    61:90:2d:72:f9:e9:de:6a:6a:96:ef:4d:3b:4a:3c:
                    73:2f:d6:e7:d2:0b:8b:ba:97:8f:f8:2e:a9:0b:a4:
                    56:f4:26:9f:74:89:69:02:c8:3a:15:05:2d:94:76:
                    7f:83:a2:f2:05:9a:5c:f9:f2:e4:13:6a:fc:8a:af:
                    ab:1e:a9:fd:11:e8:08:6d:aa:0d:7c:68:78:ee:f3:
                    af:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:01:CB:35:80:AD:65:25:E7:0C:DE:45:D2:F8:67:17:D3:C0:1F:B5
            X509v3 Authority Key Identifier:
                keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f5:48:f8:c0:df:2a:62:d4:b6:85:be:d4:b8:c9:3c:cb:07:
         b9:f0:e5:40:9f:0b:29:27:e8:a6:bb:85:08:ea:38:99:7b:93:
         76:62:85:5e:00:4d:1b:3d:3d:2c:7f:4d:7d:bb:ea:b6:5a:e7:
         5c:c4:64:6b:a8:37:b6:8e:89:46:dc:fd:8b:c7:09:a8:9d:62:
         b5:fa:63:ef:61:5e:84:1c:f5:7d:88:0d:66:8c:61:2f:84:d9:
         cf:4e:b0:e7:d6:7a:a2:be:d6:28:f5:c9:89:e3:6a:c5:2c:41:
         76:63:ea:7b:94:45:22:50:80:29:e9:7a:00:51:9c:b3:b7:7a:
         65:eb:8c:bb:6f:40:9f:94:d2:e5:61:97:71:30:57:7a:bf:81:
         ee:53:f6:0a:cc:4b:85:aa:0a:c2:0b:81:13:fc:2b:0b:55:40:
         23:2f:98:8c:fb:a9:c6:a4:72:50:75:7c:35:4b:ce:14:24:03:
         c6:53:37:d1:23:d2:17:aa:ce:1b:b9:11:61:05:71:cb:e4:c4:
         d4:8b:8e:11:64:3b:c8:e8:c3:c8:91:4e:92:61:98:dc:b1:20:
         31:8f:9a:f0:58:78:45:26:96:d7:32:6e:cd:49:47:0d:db:27:
         21:65:fe:4d:43:19:4d:e1:39:35:38:b7:c0:ac:b0:83:75:cc:
         68:51:69:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:37:34 2026 by rpki-client