Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
File:                     O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json)
Hash identifier:          HbyYLL+gJ0C+3ccnpGPiNUPvsEovl1qJNKeO32imBIk=
Subject key identifier:   83:15:25:8E:51:F8:CA:FA:AB:2F:B4:26:BF:7D:CB:3E:A6:16:5D:1D
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Certificate issuer:       /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial:       019EB9588A77FD718721A71A8717BD82DA5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
Manifest number:          195F
Signing time:             Fri 12 Jun 2026 01:00:47 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:47 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:47 +0000
Files and hashes:         1: 1-ehuABryUVINj2W3NK-g46DB49o.roa (hash: YXDM1cCPDyh4BpBxko9niqIGoA4Nx7Wm0bIxDril5ZU=)
                          2: 49TpBZIbyHobsWcoh4oSwqHHj24.roa (hash: H3ZabpGlNw6ABVIQ/nTAsG4jZDJmHYwqGcghd6J47mU=)
                          3: CJMQtEYFaJCIAob5YTIM33reer0.roa (hash: 2fmW/5EjPlZQDHVPyDvXpi5tn/bBcbJ02R3RN2NWWE8=)
                          4: GhJdnyWj9py61uVvaxvqFfy0V7c.roa (hash: ljlh5bK4up2SZeKlCTioJwKwERt/6WFEKI2x/h9hHl8=)
                          5: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: p3nngmh7LqndCUvluhwLkvGfHx7OuIImwA6z1w0JVIk=)
                          6: YTSwtqCla-KMN-KojPP7ZcEJhCI.roa (hash: ucZ995yNrK5VHoaXITb+Y7tbONn7bL9sNblRcrvwpcQ=)
                          7: eSL82eEcvzSK2dkw6o4hr1h_hm0.roa (hash: iOpyDBpoorKPMwT1bNhIwY8hNcyUZXYXJpDFE6NQs9Q=)
                          8: gLrTd-tF6YKwKPVyN-B9kSozUjE.roa (hash: TmnCSJykitabQj5d7T0dn/Ydx5URkDDijEKhCVoUSe8=)
                          9: nKmF1TZGqw4Rl01o8Upo8B1uARg.roa (hash: jsNr28qDsooPsLwTF7PUY4RAqfXcXlMffZUWeSf+lRc=)
                          10: y2kC-JHxws7OdlKjntbmzAIGoYo.roa (hash: LqoUkGt/W9j9zMAyvyXO0TzR2hTHbWsAzvz5pfbOIEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:8a:77:fd:71:87:21:a7:1a:87:17:bd:82:da:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
        Validity
            Not Before: Jun 12 01:00:47 2026 GMT
            Not After : Jun 13 01:00:47 2026 GMT
        Subject: CN=8315258e51f8cafaab2fb426bf7dcb3ea6165d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:97:6a:50:65:2c:da:f2:8f:40:98:bb:7c:b6:
                    2d:c5:99:b8:d9:62:d3:ec:17:fb:3e:21:ef:d5:56:
                    1e:16:91:aa:88:cc:32:67:0b:14:15:56:7f:b0:21:
                    6e:0a:d6:2a:80:89:3f:f6:19:21:e4:1a:f6:81:43:
                    f2:93:03:c8:ce:18:e5:bd:1e:09:8c:0e:f9:b9:9b:
                    b5:a8:77:fa:d3:05:37:b3:31:f7:e8:30:89:a8:e6:
                    bf:da:eb:35:3f:7c:7f:f4:ca:a7:9a:6a:c9:f4:a0:
                    8c:7c:37:f6:4c:19:ed:d5:36:12:ec:0d:f1:51:fb:
                    f0:66:43:9a:b8:15:3e:1b:6a:75:de:b5:29:69:f9:
                    97:49:f6:aa:11:19:51:20:56:2c:3c:61:44:65:8b:
                    9b:83:84:e1:57:73:4f:1c:18:69:3c:45:fe:b0:a3:
                    fb:1d:c5:36:23:f7:05:4a:fe:06:e0:5e:5a:ff:53:
                    d0:7a:64:41:ab:c3:b2:da:d8:7d:a6:cf:32:a2:92:
                    1a:e4:60:ad:57:bf:d3:8b:04:84:86:60:5a:d8:89:
                    89:8e:f6:99:1a:6b:fd:bf:7f:1d:df:87:61:14:62:
                    5a:a6:ca:51:22:15:0a:3f:66:5d:46:b3:c2:aa:17:
                    a4:4f:03:e2:4a:a2:85:19:52:8a:91:c4:24:63:fa:
                    58:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:15:25:8E:51:F8:CA:FA:AB:2F:B4:26:BF:7D:CB:3E:A6:16:5D:1D
            X509v3 Authority Key Identifier:
                keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:d2:ba:69:ed:7c:f8:a6:e8:0a:05:f0:1e:f6:7e:cc:8d:78:
         a7:5c:dd:c6:a6:f8:33:8b:8a:17:21:0f:b7:7e:b5:46:5c:55:
         1d:f9:45:e2:b7:36:8a:9d:b8:4d:0a:da:07:f7:20:77:ad:ab:
         91:87:f0:5b:4c:4f:39:ba:f1:05:d8:05:df:e0:cb:50:8c:c8:
         ec:b7:0e:f5:fe:ab:0a:b4:da:d5:28:98:13:12:e7:83:b7:d3:
         a9:b9:26:07:66:c0:d1:75:c0:5d:24:0d:f9:67:4d:f8:56:be:
         14:33:73:c9:d1:2b:a0:88:20:4b:c7:86:fa:68:b6:85:b9:0b:
         33:45:74:3d:fb:25:dc:06:ad:e0:ac:92:9e:35:2e:ed:b2:45:
         d9:16:f5:91:7d:0d:7c:e5:64:4a:f2:94:f9:51:66:dc:57:0e:
         72:8a:40:3a:4a:b2:5c:f1:f3:b0:8b:df:60:b7:14:89:4e:21:
         68:d7:26:b5:58:37:b6:ea:d6:f5:d6:0e:32:c9:08:99:98:1c:
         36:9b:64:70:70:c9:09:a9:89:ae:c6:6b:b9:d6:ea:88:8b:92:
         59:f5:84:98:02:47:96:30:b4:f0:b6:24:fc:bd:89:36:f3:2f:
         55:22:84:2c:0e:9d:0a:ae:ae:57:52:02:f8:df:88:8c:aa:af:
         10:d9:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:53:32 2026 by rpki-client