Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
File:                     oWsNirSUNlULar9Ft5A1rsav8jw.mft (raw, json)
Hash identifier:          AXzK3HfezKOmPpT6OcHEE5MsBiqd2FgyVPZeFqcPeqE=
Subject key identifier:   7F:42:27:73:9C:39:05:63:53:F3:E1:A1:6D:08:3B:B0:CD:9E:52:22
Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Certificate issuer:       /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Certificate serial:       019E8F80BE3C028974103AB2CF8D312B547F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
Manifest number:          1949
Signing time:             Wed 03 Jun 2026 22:00:39 +0000
Manifest this update:     Wed 03 Jun 2026 22:00:39 +0000
Manifest next update:     Thu 04 Jun 2026 22:00:39 +0000
Files and hashes:         1: eH9pN3T8uZtfjzNIHm2QIWz86JU.roa (hash: 6WTiCPJHOrzizrSNq8riDUFegfS58h7BM9hToFWx7eQ=)
                          2: ffMr-vGRUopXUQF11fs9N-58S5A.roa (hash: f6/aHTleq3uzGygn/Gg7UKDvdBVMxROzI3ip6izS/3g=)
                          3: oWsNirSUNlULar9Ft5A1rsav8jw.crl (hash: ojfz/RkBYcdAHkKy61rFqZhv/GfrFPGg1SYLMOqq18I=)
                          4: q4WcfCRWGVzGeRAaFA36efTC1fc.roa (hash: NzEF7aAGWrkW8QtiypziwNCiqL4q9mcX58JJBXOJgOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8f:80:be:3c:02:89:74:10:3a:b2:cf:8d:31:2b:54:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
        Validity
            Not Before: Jun  3 22:00:39 2026 GMT
            Not After : Jun  4 22:00:39 2026 GMT
        Subject: CN=7f4227739c39056353f3e1a16d083bb0cd9e5222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:c5:7b:6c:df:50:d4:e9:64:77:d9:11:88:
                    2c:8c:ef:02:eb:eb:b0:76:83:38:0c:23:95:09:39:
                    f7:ca:94:1a:3a:70:2d:ce:ab:5f:46:54:ea:0e:2e:
                    34:6a:f7:af:55:77:a7:83:8d:61:96:1f:47:a8:21:
                    42:6c:84:71:37:99:ff:a4:0f:88:a8:95:09:2f:fb:
                    d1:c0:e2:d9:f9:f3:aa:e8:2a:00:c6:b9:26:0d:a0:
                    dd:0f:8d:b9:9e:ab:ff:eb:e9:e5:d4:bd:12:38:56:
                    78:c7:85:01:ce:26:95:6f:77:cb:09:40:9d:53:90:
                    bb:c9:c3:6d:d2:a8:5a:42:04:96:d1:12:fd:e7:ee:
                    39:d7:67:0d:b0:c9:f5:38:94:a6:4a:3e:62:a7:b7:
                    54:52:af:9e:ab:f7:74:55:84:31:23:29:69:d6:33:
                    06:3b:91:9f:52:52:2f:87:d1:54:b6:41:be:ab:6e:
                    1c:69:2c:36:3f:57:7b:21:b1:ee:ee:2c:12:b1:c0:
                    0f:38:56:20:b6:94:24:cb:6b:bd:cd:dc:64:b5:ce:
                    57:54:f4:93:bf:bc:62:50:c8:62:71:b2:9e:ab:c7:
                    8b:8f:2d:07:25:88:e7:e5:24:56:43:16:c8:c7:cd:
                    b1:37:6b:a6:73:1c:c8:4c:7e:58:c6:38:5b:31:d6:
                    ab:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:42:27:73:9C:39:05:63:53:F3:E1:A1:6D:08:3B:B0:CD:9E:52:22
            X509v3 Authority Key Identifier:
                keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ae:3f:e1:5a:86:14:4c:9b:4b:c3:55:c5:b0:e6:0b:d5:11:
         2f:04:0d:b0:5b:39:1e:78:46:ca:cb:aa:55:a9:4c:d4:a4:23:
         c2:af:5a:bd:37:39:7b:dd:ed:d2:77:d7:35:93:b5:f5:7f:fe:
         4f:24:a3:5a:b6:70:0b:0a:24:37:f2:3f:60:a7:b5:71:67:3c:
         17:db:c5:3c:0d:b9:5f:e6:d1:7e:46:6b:13:1a:5e:27:3d:97:
         9d:d7:ea:12:82:28:5e:0f:07:d3:cd:4e:ee:db:b7:24:89:53:
         ad:46:5d:a2:c9:e6:18:d3:5e:10:c7:12:c9:6f:29:f3:a1:b2:
         df:09:9d:e2:6e:f0:2b:2a:34:e1:e7:e5:bb:54:ff:53:ad:77:
         ca:3a:18:be:e0:59:2d:9d:b2:e3:e8:e1:2d:1f:9a:7a:ef:c8:
         2a:f6:e0:99:a2:04:65:32:6f:3c:73:eb:f6:4f:15:05:99:68:
         a3:4c:6f:f4:11:55:4d:b8:f5:fe:19:9a:c0:30:19:a3:bb:82:
         be:34:a9:c3:bd:62:de:bc:8b:82:5b:7d:d1:b8:ad:f0:0e:4a:
         50:ea:af:18:59:ad:d0:a5:e5:5a:46:70:45:0d:bd:02:75:ae:
         dd:55:f9:81:b4:ea:26:73:47:0f:c9:b3:1b:4b:ca:52:e8:20:
         ef:fd:db:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 08:01:38 2026 by rpki-client