Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
File:                     oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json)
Hash identifier:          /nNMZFfgHodOvCOXQ/D3ZyJHtu+p1IpdS4RCVS0QBQs=
Subject key identifier:   05:D8:65:7E:A5:4F:27:38:99:DE:E0:23:8B:3A:8C:AE:A7:0E:A6:CC
Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
Certificate issuer:       /CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Certificate serial:       019EB76A671913CA3AB33AB45FCADB8862F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
Manifest number:          0782
Signing time:             Thu 11 Jun 2026 16:01:04 +0000
Manifest this update:     Thu 11 Jun 2026 16:01:04 +0000
Manifest next update:     Fri 12 Jun 2026 16:01:04 +0000
Files and hashes:         1: NyOZwRR31L4QERSunRsVBOO4EnI.roa (hash: JNaIlhx9XEnG7hI6SJPh01zqvkEjWomvOZdybUhEE4U=)
                          2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: aiv8s511p9cRBm11JImj8yWklToCFIGHxtDDGAUabUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 16:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:67:19:13:ca:3a:b3:3a:b4:5f:ca:db:88:62:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f
        Validity
            Not Before: Jun 11 16:01:04 2026 GMT
            Not After : Jun 12 16:01:04 2026 GMT
        Subject: CN=05d8657ea54f273899dee0238b3a8caea70ea6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4c:f9:6a:0d:4b:bc:c8:cc:cf:93:28:f6:c3:
                    85:0f:9c:94:0c:7b:ff:92:b9:da:39:07:09:2f:84:
                    a6:cc:8c:1a:56:be:92:b2:e5:ff:5a:e0:1a:c4:1c:
                    69:0c:26:9b:34:2f:09:30:b3:b9:08:d8:94:a2:42:
                    d6:89:69:51:65:b2:f0:97:60:fd:6c:f5:c2:71:c1:
                    62:39:d0:09:3b:c8:ef:2b:a7:6e:01:49:c6:e7:69:
                    70:f7:be:d3:a9:1c:6a:81:6f:84:3e:d5:0b:b1:77:
                    e1:c7:65:78:4b:b8:7a:20:5d:e3:8b:cb:ae:7a:60:
                    a4:db:00:ff:b7:a1:f8:3a:bd:8e:2b:f0:c2:41:b3:
                    f5:a7:2e:ce:8e:ad:3f:c1:cf:22:45:af:c0:22:03:
                    ec:3e:49:c4:30:24:7d:b6:c9:b7:a0:3e:61:a4:ba:
                    41:00:58:a4:09:eb:86:b6:98:94:a0:03:84:ac:96:
                    6b:a3:d3:b3:09:32:bf:a1:2f:95:5f:81:2f:fd:7f:
                    99:13:62:3f:36:51:81:86:43:11:68:f4:79:b2:10:
                    f5:07:cb:60:8e:a4:be:ee:1a:96:4d:91:e6:ac:3f:
                    9c:11:c4:d0:e0:12:1a:5a:e3:5e:9f:0b:fd:ee:d3:
                    88:4d:e3:a9:7a:64:f2:dc:7f:8b:91:d1:db:a2:d4:
                    4a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D8:65:7E:A5:4F:27:38:99:DE:E0:23:8B:3A:8C:AE:A7:0E:A6:CC
            X509v3 Authority Key Identifier:
                keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ff:0e:12:79:2e:44:62:c6:bd:d2:d7:0a:01:48:ff:de:31:
         7d:de:58:0b:ed:6c:fa:36:3e:1e:97:b3:c7:bf:5f:20:a6:e7:
         b9:31:0c:16:5d:f6:d9:e6:61:30:a5:c5:e8:24:2e:60:e9:3a:
         f4:e7:dc:57:84:bc:2e:54:16:75:44:84:32:d0:ce:38:8a:a7:
         93:6e:56:0c:bd:4d:ef:4c:a9:64:1e:33:8f:aa:de:2d:dd:1b:
         0b:7a:4a:ac:d5:e1:ba:00:cf:dd:38:17:39:4c:86:45:d0:8e:
         00:3b:4c:b1:1a:86:a0:2d:58:3e:6a:32:65:1f:6f:8c:8d:fe:
         4b:ad:4e:d7:f0:23:60:7b:16:a4:fe:04:7d:d9:ad:83:6d:48:
         43:e9:76:92:21:e2:36:ab:a8:03:31:5e:b2:75:8a:fb:bc:c1:
         a0:3d:fb:01:be:0d:47:dc:6e:27:41:4d:3a:98:bd:9b:b0:58:
         15:d7:80:c0:c3:ba:1b:e1:88:1a:63:1b:b2:16:2c:f1:d9:7f:
         90:e5:9f:98:c4:5e:3a:a7:3a:6b:d0:53:d3:3d:17:bb:c0:1d:
         63:25:c9:a7:4a:37:58:74:f8:33:69:0c:68:3e:69:8e:29:4f:
         a4:6c:3c:13:28:d7:0c:28:34:d6:84:06:ac:f3:86:c0:c0:5e:
         01:9a:67:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:35:50 2026 by rpki-client