Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File:                     oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier:          ImSxV3ZzLBIKnRMvopu4V9NPgbmKjSNulukF0DWfWoY=
Subject key identifier:   64:0B:D3:39:66:AA:E7:50:DF:A1:FC:2B:2A:60:10:38:AD:62:18:85
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer:       /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial:       019EB98F1408F3BA028C3DAD2A7D0C53EC49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number:          1337
Signing time:             Fri 12 Jun 2026 02:00:22 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:22 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:22 +0000
Files and hashes:         1: 0an2pQXOSUa9Qv0CDLezuYXP9Rc.roa (hash: GI3HMCo+UnX0/WFi5FDffbeewol6/ny0qWi9o7/s4mw=)
                          2: 1-Xka6nhHlTAY0IkAtp7cisl4Q0o.roa (hash: cYSQflXuM4PG35Mh50PGE2nbDxv/tnzYwdWGgGNp7kU=)
                          3: 3-zjNQeLr2VYnGvtAQl3wPrAttQ.roa (hash: oZEc3kU6X6afeD3VVmtRDKKInN6hBgwdLqV0FrQL9OA=)
                          4: 3xEx3bVGfXIchqPcHOE-UCr11f0.roa (hash: y+CVyDs3ZBJgnuFTk7NR2y3nV9NJmzoB4Ik1Ns4joJs=)
                          5: U8YrDUVn3egAnNyXxX_1fs7ypak.roa (hash: 0J1ye72rXLmhonZZf0ebjERiurn0AgXIl7ABqMnbTn0=)
                          6: gr24W9hYxDP-t_iDnbRQ3OZdbjk.roa (hash: 3hVp+1R1qAZlY2bc8T6diQXm1af3Uw7Bq4eqKsz2fRA=)
                          7: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: I52GmnKk2+ny2xdCGPXjRR9XQRuEA/Tf6rQnD+xW900=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:14:08:f3:ba:02:8c:3d:ad:2a:7d:0c:53:ec:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
        Validity
            Not Before: Jun 12 02:00:22 2026 GMT
            Not After : Jun 13 02:00:22 2026 GMT
        Subject: CN=640bd33966aae750dfa1fc2b2a601038ad621885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:91:d7:4f:98:79:c1:30:6e:59:cc:b7:22:c9:
                    f4:10:13:6f:74:f9:dd:03:5a:cf:28:5c:28:ae:04:
                    d0:0f:f1:2a:d0:3c:ed:8d:03:a7:94:38:f9:e4:44:
                    99:da:89:be:be:b6:91:b0:b3:af:17:74:f5:25:6d:
                    b3:a3:e9:81:cc:cd:32:1f:de:4d:68:54:3b:a7:c7:
                    7b:9e:01:14:96:52:cf:24:cf:bc:75:df:4c:52:98:
                    01:25:1e:31:22:5a:80:8d:54:7e:12:60:5f:be:58:
                    c6:af:d6:e7:7c:88:22:12:b9:1e:96:f7:61:7b:de:
                    db:89:0a:75:d0:a5:20:9c:7d:d4:2d:a1:63:d8:63:
                    38:0d:46:e7:de:c4:9c:76:83:ca:bf:e1:7b:e2:98:
                    70:14:0b:b2:4c:3d:93:0f:b9:db:f0:13:a9:b0:12:
                    10:f9:18:11:bd:c0:b4:23:3d:ec:fc:4d:b4:48:56:
                    0f:cd:e4:00:21:4b:55:5d:e4:b7:88:d2:c9:72:51:
                    f2:77:b7:84:70:61:2b:30:b3:2b:0f:a6:5f:be:38:
                    45:15:6a:17:ad:cd:18:bf:de:c6:81:54:fd:66:00:
                    e0:af:85:27:6f:a9:54:2d:0a:67:85:9b:02:b9:83:
                    8d:00:b9:e4:ce:5b:85:f5:ce:f9:23:cd:6d:8f:f7:
                    3f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0B:D3:39:66:AA:E7:50:DF:A1:FC:2B:2A:60:10:38:AD:62:18:85
            X509v3 Authority Key Identifier:
                keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:7b:fc:a3:5b:7b:11:00:c7:ea:2c:25:b8:50:6e:7f:67:3d:
         88:64:54:c9:1b:86:e8:0b:4e:5c:25:88:0e:3d:44:28:44:00:
         a8:58:13:82:80:56:34:e3:0e:54:d6:5e:79:99:90:a8:65:54:
         c5:15:00:07:8e:36:26:0c:ca:c0:2b:ff:37:5c:87:3a:9c:45:
         8c:db:da:0a:35:7e:10:04:77:26:09:96:b1:08:b0:86:f6:0d:
         fc:23:e3:89:78:60:3b:60:1e:1b:18:1d:69:78:ce:b0:4b:15:
         72:d9:bb:d8:ee:51:86:18:32:1d:29:79:58:b3:d0:24:b0:fb:
         eb:44:f4:67:b3:fd:62:fe:5b:d3:42:1d:d9:ea:fa:2e:62:8f:
         31:8c:8e:b2:21:29:58:b4:5c:dc:2b:e0:5b:72:25:80:fb:d7:
         eb:f8:4a:93:19:ec:db:77:cd:7c:9c:08:cd:ec:1f:5d:b7:a1:
         38:69:47:04:e8:5e:63:c4:fe:f9:ef:10:e3:0d:12:fa:b8:8f:
         ce:26:77:78:84:5c:0f:31:21:86:1b:ab:5f:02:75:1f:ef:2a:
         0e:5b:1a:9d:e8:38:a1:b7:8c:90:33:1b:ae:23:8a:74:0a:ee:
         61:4a:7a:9a:13:02:51:84:97:8c:fc:3e:54:f8:be:2b:b5:db:
         99:2e:83:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:34:32 2026 by rpki-client