Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
File:                     oSCGrcccvsWuoqH4lU36ZCtTDDs.mft (raw, json)
Hash identifier:          rFOchCJ2uFewbfbgptOvsZfF+ueXm34ouv0HmBQcpA4=
Subject key identifier:   3F:44:C1:C9:FF:35:51:C0:4C:D6:AF:E1:25:DC:AC:CA:95:CC:D7:CE
Authority key identifier: A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B
Certificate issuer:       /CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
Certificate serial:       019EB6C6128179C75438081800575D1D3DF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
Manifest number:          1957
Signing time:             Thu 11 Jun 2026 13:01:34 +0000
Manifest this update:     Thu 11 Jun 2026 13:01:34 +0000
Manifest next update:     Fri 12 Jun 2026 13:01:34 +0000
Files and hashes:         1: 0xOSlFF4qEJ0-V611FUixhfdX0Q.roa (hash: 2cl0zm8Cn1RFnkSxPtYibLq9wI+6x0kOdV+BL5DuDG4=)
                          2: oSCGrcccvsWuoqH4lU36ZCtTDDs.crl (hash: tX7AulSNn6Case29KJn2ch9frf3kdW6tef1kTiaR//c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:c6:12:81:79:c7:54:38:08:18:00:57:5d:1d:3d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
        Validity
            Not Before: Jun 11 13:01:34 2026 GMT
            Not After : Jun 12 13:01:34 2026 GMT
        Subject: CN=3f44c1c9ff3551c04cd6afe125dcacca95ccd7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c4:fa:bd:5c:84:b8:99:ee:21:9c:08:18:42:
                    ae:f6:2c:5f:b6:79:fd:55:70:c2:79:02:8b:1d:b5:
                    23:8a:ab:44:ba:a7:3e:bb:1a:e3:5c:12:3e:a1:7f:
                    65:a0:ba:b0:c2:93:44:23:5c:14:b9:4a:5d:f9:32:
                    7a:d8:8b:c4:99:5c:7b:22:a4:f8:e3:eb:32:5d:d7:
                    94:7b:a1:cf:44:cb:3b:41:20:94:e4:c5:fc:35:21:
                    d9:a3:35:b7:e9:13:8d:05:65:8e:23:73:bb:f1:21:
                    e2:9c:9f:a4:ad:17:3a:17:30:29:ef:1f:d2:32:59:
                    1d:61:95:dc:fc:ea:25:19:f2:74:2e:93:7e:84:2b:
                    d9:1b:d2:45:e7:4a:b0:09:23:d6:9a:52:80:72:69:
                    52:cc:7a:30:84:fd:82:b4:9f:fa:ab:ef:7c:21:a9:
                    6b:f3:a9:1a:a1:ab:0c:63:2e:16:25:74:35:0a:a2:
                    c5:3e:bd:a5:7b:54:43:bc:66:73:95:b7:36:7e:77:
                    5a:e2:59:f9:61:a9:80:45:06:5a:59:10:1d:0e:de:
                    29:07:3f:5c:2a:00:02:ce:db:bb:61:51:86:40:3b:
                    89:97:51:7c:af:89:5d:47:8e:c3:5e:53:94:86:92:
                    e2:89:19:7d:74:8f:cc:40:35:d7:82:55:fe:e9:10:
                    9f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:44:C1:C9:FF:35:51:C0:4C:D6:AF:E1:25:DC:AC:CA:95:CC:D7:CE
            X509v3 Authority Key Identifier:
                keyid:A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d1:4a:1a:ef:74:4c:6d:14:c2:66:48:72:40:cd:dd:d2:9c:
         31:ef:7c:a1:50:87:e8:f3:f4:86:e7:87:63:62:47:9b:de:ea:
         25:59:20:74:c7:6f:85:75:49:71:7b:27:1d:ce:1f:48:29:e6:
         e1:7a:73:26:93:10:d2:c7:c2:68:55:08:27:e5:f1:31:d3:a6:
         43:2e:17:62:cf:9a:89:8c:37:7f:4a:73:33:e6:50:01:d1:40:
         41:ce:88:cb:a3:62:6b:46:b2:54:a8:04:28:f3:8c:73:ed:05:
         80:80:cf:c4:70:01:9f:ed:0a:35:2b:95:14:30:f6:55:a5:de:
         5a:7d:20:0d:21:be:26:b7:22:0b:26:10:69:e3:8a:26:ec:fb:
         f0:93:3f:21:87:db:da:69:86:75:8b:9f:a9:8a:37:ed:6d:52:
         99:5c:3a:d4:74:af:c0:1e:d4:8f:4e:c6:10:10:d0:46:21:66:
         b7:81:04:b7:00:f6:de:10:8d:fe:c4:5f:71:ab:9b:6e:0b:99:
         fa:28:75:fe:16:1d:aa:83:da:79:32:78:7e:b1:1f:5e:99:eb:
         2c:cd:92:d9:72:45:02:45:f7:b3:ae:6c:66:96:49:16:55:d2:
         7d:60:30:7d:7b:b1:b7:5f:ab:41:e3:78:d9:fb:51:96:5b:5a:
         16:1c:4c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:57:59 2026 by rpki-client