Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
File:                     oeX8Y1oad1V0t3muqczWUkzE0Pk.mft (raw, json)
Hash identifier:          GEP1ZvD2m4pPPmuwV5mWqrFuihkXCsapFyXFkoqlVvA=
Subject key identifier:   D2:AB:55:D3:89:FA:7B:3B:14:F7:A7:CF:DB:7C:8A:5B:BB:40:85:C7
Authority key identifier: A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9
Certificate issuer:       /CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9
Certificate serial:       019EB733094BA4340AEE5C7536B1877BC1E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
Manifest number:          02D2
Signing time:             Thu 11 Jun 2026 15:00:35 +0000
Manifest this update:     Thu 11 Jun 2026 15:00:35 +0000
Manifest next update:     Fri 12 Jun 2026 15:00:35 +0000
Files and hashes:         1: h0OnQS_LDhHmHtdq9MOUPdDXqMY.roa (hash: fvbR4O3MuxsJi7oWYqjm2ohLFx0/5Mha06ohU0AwT/A=)
                          2: hM3q0tm1hGdyTy4Pq63zsy3D7-Q.roa (hash: LpyLjFrIDk+LFAUQPWPNyV38HQSScxJQeF0sXMSFCqU=)
                          3: oeX8Y1oad1V0t3muqczWUkzE0Pk.crl (hash: mCftn3Wb1GpklVvUS+2y5PfNBgI4QBf8hjMycRFk2Tc=)
                          4: zY55egblxOayG_XFLEDuLnn2KzY.roa (hash: 3VtoSxzQ+1ALd4QWfODnz+BMqwgszTlt4xRR53OtSeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:09:4b:a4:34:0a:ee:5c:75:36:b1:87:7b:c1:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9
        Validity
            Not Before: Jun 11 15:00:35 2026 GMT
            Not After : Jun 12 15:00:35 2026 GMT
        Subject: CN=d2ab55d389fa7b3b14f7a7cfdb7c8a5bbb4085c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:a4:e4:67:9d:1b:a5:59:7d:c6:e6:52:66:
                    d3:01:21:bd:c6:aa:38:f7:d6:ea:24:11:9a:67:ea:
                    2d:09:df:b7:3b:76:6c:fd:26:02:02:08:fa:ca:2b:
                    67:19:66:d9:5f:e5:51:81:a5:35:c5:d4:80:e8:1e:
                    b3:74:3a:e2:f0:ce:e6:c8:7a:82:af:ac:9a:07:c9:
                    e1:01:3f:a7:36:69:51:53:6d:7b:d3:a6:0f:5f:6f:
                    0d:6c:d8:35:4d:25:fa:22:09:09:d8:e2:2e:d5:92:
                    ae:28:d4:84:19:84:6a:8c:04:06:56:88:21:bb:6d:
                    ff:43:b1:2c:83:d5:72:34:15:ad:c8:8a:58:68:b0:
                    e8:3e:d3:99:be:96:f7:dd:c6:46:76:8c:2a:bc:17:
                    6a:b3:bc:da:22:17:02:cc:eb:b1:43:15:0e:a4:83:
                    31:74:e6:f0:0f:f2:7b:b3:31:bc:e4:61:2b:6d:0c:
                    15:52:e8:4a:07:19:b2:46:02:55:7d:51:08:78:9d:
                    a9:b2:21:3c:c6:d5:f9:dd:06:78:dc:de:ad:b7:13:
                    16:55:34:e7:c8:0a:95:1b:c3:43:86:da:72:1f:ec:
                    1e:aa:31:4e:60:dd:3f:8e:40:62:34:b6:ae:46:33:
                    bf:2e:1b:c9:9e:cf:54:a8:f5:e0:c3:1d:1d:4d:44:
                    e0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AB:55:D3:89:FA:7B:3B:14:F7:A7:CF:DB:7C:8A:5B:BB:40:85:C7
            X509v3 Authority Key Identifier:
                keyid:A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:70:2d:fb:61:16:17:e2:cd:f2:cf:78:9c:a0:44:64:f0:62:
         d4:9c:e7:d2:93:12:d2:0e:25:1f:0d:ee:82:8e:f5:ed:d9:da:
         b1:13:e0:21:17:63:23:ec:f7:9b:b8:f3:f5:2e:b4:8f:13:59:
         63:af:9d:09:65:94:07:68:fe:8b:ad:17:b8:a2:a1:08:3a:82:
         09:58:97:67:8d:b7:79:ef:ef:57:51:76:d7:3e:0d:99:10:dd:
         f3:4b:0f:e9:fd:52:1b:24:0e:5f:30:77:22:00:4a:b7:c8:d0:
         07:33:4a:a2:91:23:40:bc:a3:4c:47:2d:31:d4:de:eb:6b:7a:
         58:ba:a4:c6:db:0a:bf:b1:04:a7:aa:23:1f:f4:8b:dc:03:ce:
         91:17:be:4d:c0:c3:48:6b:16:ee:4f:cd:73:b0:d9:88:02:b5:
         86:55:7a:71:7a:3a:81:6e:bc:db:2c:da:2e:6d:24:34:bf:62:
         f0:5c:fa:de:10:73:9d:3d:58:80:af:2d:b6:51:70:e2:7e:1c:
         06:c8:4f:db:a5:de:2f:10:40:a4:d7:85:4b:48:17:6d:b6:fc:
         ce:e3:00:f3:5c:21:a9:ff:39:57:2b:3d:b7:4e:bc:97:aa:33:
         ee:b1:8e:55:a2:90:f3:0d:01:1b:2a:d9:23:47:d6:4a:e0:b7:
         49:4c:eb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:00:54 2026 by rpki-client