Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
File:                     OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json)
Hash identifier:          VWgxjilQGr2Xdzi+8PasvXhll209vUXlKdXYCe5BHcQ=
Subject key identifier:   D0:24:34:1B:C6:C8:87:FD:52:A7:E2:C8:92:58:4F:BA:AB:07:C1:C5
Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
Certificate issuer:       /CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Certificate serial:       019F1A1F04451D4D8C1F242E738C1A897735
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
Manifest number:          1919
Signing time:             Tue 30 Jun 2026 20:01:08 +0000
Manifest this update:     Tue 30 Jun 2026 20:01:08 +0000
Manifest next update:     Wed 01 Jul 2026 20:01:08 +0000
Files and hashes:         1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: mgQrBW+Zs2FEol3YdZU21M3EBU88fBlKTBuXc4lc81I=)
                          2: qOowaPdAtIoEeA8UwWKl0WeOo_E.roa (hash: qf6D/9fKMsy5vRBqrt+Mp9eken3A/z5tlK1SkhHLKO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:1f:04:45:1d:4d:8c:1f:24:2e:73:8c:1a:89:77:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb
        Validity
            Not Before: Jun 30 20:01:08 2026 GMT
            Not After : Jul  1 20:01:08 2026 GMT
        Subject: CN=d024341bc6c887fd52a7e2c892584fbaab07c1c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:88:9c:6b:4b:d3:00:88:29:a2:54:87:34:62:
                    39:6e:53:bb:68:53:48:eb:57:33:80:39:77:b2:05:
                    33:ea:4e:41:f7:fe:1a:fd:e3:61:81:49:3b:70:e7:
                    32:b3:84:3f:22:41:f9:ba:4b:e6:10:14:02:82:fd:
                    22:27:ef:57:2d:ef:3b:5d:11:1e:db:56:7c:4d:41:
                    16:84:3b:6f:ac:0e:3f:24:8a:fa:07:08:99:32:13:
                    47:23:74:b9:3d:9d:92:19:ba:bd:0c:dd:bf:f0:81:
                    45:e1:78:2e:89:73:29:fb:68:2f:82:94:3c:15:54:
                    0b:67:c0:c3:e7:92:73:6f:80:c8:7d:f5:87:2a:2f:
                    a2:5c:3d:06:56:7e:5c:c2:68:6a:57:93:e8:a0:59:
                    96:6b:fc:5e:cb:e5:15:47:6e:c9:ac:37:9f:48:71:
                    ea:d3:ab:7d:90:ea:c2:51:80:25:13:4a:58:1b:85:
                    8e:93:25:2d:ba:71:47:f1:12:a3:71:a3:ea:22:48:
                    93:e5:fd:f9:46:0f:f9:1a:61:30:e8:a1:b2:9f:4e:
                    a5:48:1e:cd:18:99:4d:84:bf:ec:2b:1a:50:f2:5a:
                    08:43:3d:2a:fb:bd:1f:17:48:16:d9:d6:01:3a:50:
                    99:fb:2e:cb:e4:ac:84:f8:b8:23:54:63:c1:c8:54:
                    bb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:24:34:1B:C6:C8:87:FD:52:A7:E2:C8:92:58:4F:BA:AB:07:C1:C5
            X509v3 Authority Key Identifier:
                keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f5:69:89:f7:c1:41:51:34:05:a4:21:d8:bb:0a:21:8a:30:
         b3:ea:99:b2:eb:53:ca:83:6c:8a:25:9d:ed:75:bb:c6:cc:17:
         43:1b:d9:96:7e:eb:91:b6:84:b1:7b:6b:c8:73:e6:ed:f7:9c:
         30:26:b5:72:ec:d4:61:4b:47:e2:e7:11:bd:1e:ad:02:06:3a:
         8a:d0:af:b5:8c:35:19:e8:fc:6a:1f:03:e2:1c:25:c1:b3:56:
         75:97:63:ad:71:64:7f:c7:16:7e:77:03:08:48:86:51:f5:ff:
         5a:f4:2c:7f:d5:f2:af:5a:dd:1f:3c:c6:b1:86:51:6d:33:97:
         5b:fe:9c:73:ea:76:b3:00:ff:62:e9:72:11:9f:df:24:47:0f:
         24:ea:da:63:8a:cf:ae:0a:15:31:e8:27:15:fd:67:2d:13:a6:
         de:75:d5:7b:3a:c5:74:6c:e9:94:8f:d3:d1:e0:e1:9c:36:68:
         8d:d8:3f:93:04:91:df:5d:f7:a6:32:61:7c:f3:b4:bb:13:99:
         c8:25:0f:fa:36:86:c2:0a:2c:13:63:8b:2b:27:bd:9f:b7:7e:
         77:35:e8:a7:f6:68:53:1b:02:d2:b6:41:60:3a:05:ab:a3:b8:
         b2:21:eb:bf:d3:4b:30:93:49:20:d4:be:f2:28:33:c2:e1:56:
         30:a4:7c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:34:30 2026 by rpki-client