Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
File:                     Cs1OLATDntskKmcFG4tYEmNDbnk.mft (raw, json)
Hash identifier:          4QD0jZZXCJfg5WuX091aH3oWHcvjNvAO/bBRZta31mQ=
Subject key identifier:   43:03:7A:54:15:9A:47:E0:2C:43:4D:E7:C4:53:BC:CA:37:2A:C6:59
Authority key identifier: 0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
Certificate issuer:       /CN=0acd4e2c04c39edb242a67051b8b581263436e79
Certificate serial:       019F19438A2356D691C21E06D36346E5FAC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
Manifest number:          150D
Signing time:             Tue 30 Jun 2026 16:01:24 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:24 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:24 +0000
Files and hashes:         1: CZFrmS7OK82FHDO74YLfgO-iIlg.roa (hash: JybF1Ge4abfRKAmvsEXm7iMoOTvGMrH+sTC79u98R8M=)
                          2: Cs1OLATDntskKmcFG4tYEmNDbnk.crl (hash: qc2qhK9FCGASPJGjkqqYVLDkNtIMnncncbkmejA6bTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:8a:23:56:d6:91:c2:1e:06:d3:63:46:e5:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0acd4e2c04c39edb242a67051b8b581263436e79
        Validity
            Not Before: Jun 30 16:01:24 2026 GMT
            Not After : Jul  1 16:01:24 2026 GMT
        Subject: CN=43037a54159a47e02c434de7c453bcca372ac659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1a:c7:d8:cd:4e:3e:e7:cb:ab:94:6a:2a:97:
                    48:eb:d0:63:c6:2e:af:1b:fa:37:fd:b5:f5:eb:f3:
                    68:87:b6:fa:38:c3:70:90:07:6a:e2:bb:23:ed:ea:
                    da:e5:55:fa:25:2e:5a:07:61:80:6e:61:23:a4:87:
                    f5:b2:ba:1e:e9:19:9d:f6:18:15:0f:ef:f8:1d:58:
                    8a:3e:4f:55:20:55:3e:5d:4c:6f:51:3a:7e:c0:b6:
                    e7:cc:e7:9e:25:12:44:a1:33:bd:d1:58:49:d0:4a:
                    36:15:2d:d9:0b:1f:ca:24:b2:ee:7d:a8:e4:a0:2d:
                    8a:15:b6:d5:51:61:f6:3b:32:d9:67:6f:2a:bd:2b:
                    6f:83:64:6b:82:64:1f:26:70:bc:21:1c:42:de:05:
                    da:f0:0a:2b:f5:81:46:ef:a3:7c:8c:25:c5:0b:46:
                    3c:de:87:4d:d2:22:1b:8b:83:c7:40:5d:99:a7:d7:
                    aa:c4:0e:75:63:74:be:e1:50:5d:ef:f0:22:0a:ec:
                    46:ec:67:cb:a7:17:73:a8:c0:5d:9e:e1:ca:71:44:
                    8f:dd:4d:03:1d:44:73:56:78:ae:a3:f1:0d:98:00:
                    c0:75:4f:da:27:31:11:cf:29:34:69:79:67:e6:ef:
                    f8:89:c6:61:a7:6a:87:bf:60:f9:f1:88:66:21:06:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:03:7A:54:15:9A:47:E0:2C:43:4D:E7:C4:53:BC:CA:37:2A:C6:59
            X509v3 Authority Key Identifier:
                keyid:0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:89:e3:bc:e2:e8:12:28:c1:a3:c8:f7:3a:f9:58:40:78:2e:
         30:0d:ad:d4:08:ec:70:7a:31:7b:cf:0e:35:69:0c:dd:ad:ce:
         80:9a:1c:73:2b:50:35:3b:6e:48:4e:4c:35:e0:13:3c:12:b7:
         97:67:42:ec:75:6e:65:4a:1d:67:d5:c5:d4:ea:65:09:d3:f4:
         4a:6a:55:95:43:85:f6:b6:65:60:70:87:81:af:df:b4:70:e5:
         09:dc:20:df:f6:3e:a3:5c:bb:28:df:d3:b9:a2:b5:07:d6:47:
         cd:b1:98:e8:03:f8:8f:1c:16:80:ab:81:02:44:e8:6a:b3:c3:
         e4:69:c9:56:ec:c4:0e:d6:d7:b9:fe:e0:f5:e1:6f:4a:d6:ab:
         45:33:d2:e7:5d:89:a1:00:83:6f:a0:6b:59:25:aa:ee:b0:1a:
         16:08:d8:bc:a2:55:91:7d:6d:68:d1:93:39:89:e1:91:d5:cf:
         c9:73:20:97:7c:7d:10:03:4a:73:4d:a2:99:f4:b8:96:fc:29:
         95:5a:5b:e2:e1:b2:8b:86:ba:2d:5e:a7:d1:6f:3e:66:a2:45:
         a6:e0:a0:8c:10:c5:f1:91:8c:be:a3:61:6a:11:d1:c7:e4:88:
         34:4c:83:2f:d1:fd:a9:06:c1:bf:d0:1f:c7:39:0d:94:0d:7e:
         5e:10:0e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:10:34 2026 by rpki-client