Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
File:                     ojKhc4Do4liY3qnCIzIaKs5SNvE.mft (raw, json)
Hash identifier:          TqV8YiUXbUgUJF5K0ZH6Sq+H2MSnwuVm8sIVNsta+xM=
Subject key identifier:   CD:A6:EB:EB:52:D0:6D:D5:9E:BF:28:49:46:6A:EB:8F:83:D1:DA:D5
Authority key identifier: A2:32:A1:73:80:E8:E2:58:98:DE:A9:C2:23:32:1A:2A:CE:52:36:F1
Certificate issuer:       /CN=a232a17380e8e25898dea9c223321a2ace5236f1
Certificate serial:       019EB68E44F4E72E61BA3FE8CF62DEB69DFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
Manifest number:          95
Signing time:             Thu 11 Jun 2026 12:00:37 +0000
Manifest this update:     Thu 11 Jun 2026 12:00:37 +0000
Manifest next update:     Fri 12 Jun 2026 12:00:37 +0000
Files and hashes:         1: ojKhc4Do4liY3qnCIzIaKs5SNvE.crl (hash: tWxi0/2g3uKS0qAyhCNENDtVnB6+iRi1S58oki1s1xo=)
                          2: xyoH9R_BmdJ-gyu7Oy-9rS-zs-0.roa (hash: HGNIvY3ULeEgQ68bK1r/+JhRNbs682fuQL9Y7B95gbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 12:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:8e:44:f4:e7:2e:61:ba:3f:e8:cf:62:de:b6:9d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a232a17380e8e25898dea9c223321a2ace5236f1
        Validity
            Not Before: Jun 11 12:00:37 2026 GMT
            Not After : Jun 12 12:00:37 2026 GMT
        Subject: CN=cda6ebeb52d06dd59ebf2849466aeb8f83d1dad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:50:e0:77:4f:82:91:7c:5c:8f:c6:b4:f6:b7:
                    87:c1:28:61:44:7b:d2:24:76:8b:ee:e1:b9:0d:79:
                    3f:fc:3a:a3:38:7b:de:e0:c6:aa:00:db:cc:eb:d9:
                    d8:f2:07:92:ff:3d:19:40:51:f9:ae:ab:4f:c1:ed:
                    08:12:98:1a:85:f5:4c:f2:d8:c9:44:4f:82:92:7d:
                    fc:7b:c3:e9:b8:fa:96:c0:d1:b2:c0:d1:c5:37:d3:
                    52:20:00:f7:cc:9c:17:bf:96:e9:36:b9:c9:a5:85:
                    97:f2:7e:d9:41:e7:2e:0e:eb:aa:52:56:a7:ea:27:
                    af:2c:33:21:b1:10:c1:3c:89:f2:0b:4e:9a:89:a1:
                    4d:d1:c5:d5:c2:83:f9:fe:d1:c3:70:9d:e7:a0:f1:
                    30:79:3f:13:d2:8b:de:9d:81:0b:55:1a:9b:c9:0a:
                    83:17:94:a6:2c:74:3e:6f:3a:0c:57:1d:62:5c:a2:
                    f6:e4:d0:2e:9e:a3:7d:cc:29:a8:27:4c:95:9d:50:
                    33:b5:07:3b:0d:e7:91:36:06:7d:69:b6:56:49:63:
                    87:f0:c8:bd:03:26:a1:60:94:c2:d3:95:59:a3:e5:
                    42:0c:13:b3:1d:4d:ee:e8:a7:99:ac:dc:b1:06:e6:
                    48:66:b8:ba:56:14:f0:0b:0a:8c:55:d4:34:7f:e1:
                    9d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A6:EB:EB:52:D0:6D:D5:9E:BF:28:49:46:6A:EB:8F:83:D1:DA:D5
            X509v3 Authority Key Identifier:
                keyid:A2:32:A1:73:80:E8:E2:58:98:DE:A9:C2:23:32:1A:2A:CE:52:36:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojKhc4Do4liY3qnCIzIaKs5SNvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e4163b-a2d2-4a48-8648-a230f2017338/1/ojKhc4Do4liY3qnCIzIaKs5SNvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:20:1b:8e:fa:61:94:72:e2:94:7d:fe:5b:d5:b9:fd:b8:ee:
         be:33:e7:46:5b:34:64:c4:40:e7:a0:d0:75:10:e0:19:04:d0:
         ff:31:a6:9a:48:f4:f7:33:a3:f9:e9:e8:2e:50:97:c1:7b:ac:
         cc:cb:b9:1c:2a:ff:17:03:6e:8c:80:0d:20:9e:5b:2d:b7:0d:
         a2:cb:ac:ba:d7:94:9a:2a:ec:b3:77:ca:7a:79:a4:7c:51:60:
         ee:84:20:d7:fb:46:50:25:e6:39:3a:87:c7:a8:75:22:30:83:
         0e:b9:ea:70:c6:e7:18:98:03:3f:25:d5:8e:cc:f4:0c:85:f5:
         84:50:fe:38:4e:50:b4:d7:40:31:fe:14:d1:e1:55:98:9c:a3:
         1c:18:e6:d2:e0:87:ee:2c:30:5e:01:e6:c5:20:c4:aa:2b:ad:
         3f:4e:77:fb:d7:41:9f:e6:20:17:05:f5:dc:e5:b3:0c:6a:a8:
         49:8f:bb:0d:b9:9e:a8:07:f0:b6:f6:20:a3:07:fd:38:e6:a3:
         4e:94:be:61:60:ad:2d:80:09:b3:78:47:20:ee:93:58:76:af:
         07:72:19:ec:c7:a6:c1:01:b2:97:39:92:be:2d:f8:e5:5e:7e:
         a6:31:ea:a5:1c:53:09:6f:96:e7:68:8b:ae:7c:b9:15:52:fe:
         79:f3:ab:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:00:56 2026 by rpki-client