Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/OggZA5tm-u8UP2Jid5J3Yikxe2I.mft
File:                     OggZA5tm-u8UP2Jid5J3Yikxe2I.mft (raw, json)
Hash identifier:          1mWzSeXuUzjSzWBooJtTrpNdICQl7M7OC/ePPj3RGcc=
Subject key identifier:   8C:BB:C2:21:73:F1:ED:5B:85:BB:CD:AC:2F:45:CE:09:FD:D2:F4:C7
Authority key identifier: 3A:08:19:03:9B:66:FA:EF:14:3F:62:62:77:92:77:62:29:31:7B:62
Certificate issuer:       /CN=3a0819039b66faef143f62627792776229317b62
Certificate serial:       019F9D03C21B90983352B94B42812ED336E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OggZA5tm-u8UP2Jid5J3Yikxe2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/OggZA5tm-u8UP2Jid5J3Yikxe2I.mft
Manifest number:          46
Signing time:             Sun 26 Jul 2026 06:01:36 +0000
Manifest this update:     Sun 26 Jul 2026 06:01:36 +0000
Manifest next update:     Mon 27 Jul 2026 06:01:36 +0000
Files and hashes:         1: A9l3yW06MCRhC0vPEP_5L6oe6PU.roa (hash: QnT+4PmCf+dobjyw/dCsgXjulmPpCRJdE+AVb3L/yCw=)
                          2: OggZA5tm-u8UP2Jid5J3Yikxe2I.crl (hash: Tum3/v+tswTDh0YaM6JKffgF0oDJsDmvJyrbi3btvDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/OggZA5tm-u8UP2Jid5J3Yikxe2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/OggZA5tm-u8UP2Jid5J3Yikxe2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OggZA5tm-u8UP2Jid5J3Yikxe2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 06:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9d:03:c2:1b:90:98:33:52:b9:4b:42:81:2e:d3:36:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a0819039b66faef143f62627792776229317b62
        Validity
            Not Before: Jul 26 06:01:36 2026 GMT
            Not After : Jul 27 06:01:36 2026 GMT
        Subject: CN=8cbbc22173f1ed5b85bbcdac2f45ce09fdd2f4c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:5c:2f:b6:ae:cd:1e:bd:3d:f3:3a:c7:95:
                    eb:25:40:18:9e:d4:a7:12:0c:60:1a:35:31:f8:71:
                    5a:5a:c3:80:a2:f2:93:21:0e:b5:f3:a6:95:e8:98:
                    66:43:88:92:ef:35:1f:ff:cf:3a:f4:ba:1b:d8:d7:
                    f9:c5:61:93:28:4a:06:cb:92:63:7a:cc:88:30:44:
                    92:13:80:25:e2:77:37:35:08:c9:a2:90:88:36:ca:
                    09:b0:6e:db:a1:3c:d7:5e:dd:0f:e5:2f:50:c3:73:
                    17:9d:86:28:c6:f4:6e:d0:8f:87:32:af:c8:41:5f:
                    bd:43:b2:d2:52:74:fc:79:26:f2:99:28:f2:02:3a:
                    ff:47:de:0a:10:d6:94:61:a7:97:14:d9:d9:7c:80:
                    db:0b:c4:f6:e1:a5:88:be:1c:9f:0b:21:bc:50:bc:
                    9f:26:bb:44:bf:e2:a3:c9:ab:4a:c3:94:67:ca:9f:
                    64:b8:54:76:35:91:bf:15:dc:fb:d6:9e:3b:dd:0c:
                    57:5e:f3:51:e9:91:a5:77:ce:6d:ee:16:94:cc:e5:
                    e0:18:09:60:44:20:36:74:9f:28:56:bb:85:95:d2:
                    09:16:ed:f3:f0:0e:c5:40:2e:1f:d3:40:4f:c2:5e:
                    f8:d4:ca:ce:55:d5:cf:36:31:c1:88:3d:ed:f1:0d:
                    4b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BB:C2:21:73:F1:ED:5B:85:BB:CD:AC:2F:45:CE:09:FD:D2:F4:C7
            X509v3 Authority Key Identifier:
                keyid:3A:08:19:03:9B:66:FA:EF:14:3F:62:62:77:92:77:62:29:31:7B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OggZA5tm-u8UP2Jid5J3Yikxe2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/OggZA5tm-u8UP2Jid5J3Yikxe2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/OggZA5tm-u8UP2Jid5J3Yikxe2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:22:ba:a2:df:7c:26:6e:03:9b:77:2b:a2:77:51:32:09:b5:
         ab:e9:14:f2:a8:8f:5b:80:e9:a0:66:87:0b:a7:72:a3:9c:83:
         b9:11:4f:18:b2:79:96:f6:71:b7:ef:ed:62:ae:07:d3:e0:32:
         ff:38:04:b7:7f:2e:6b:14:eb:a3:27:54:a4:c8:61:55:6c:74:
         85:2e:2a:4b:e3:cb:92:66:05:dc:94:4f:f5:64:c8:78:5e:b7:
         a2:43:64:e7:62:6d:11:3b:ed:84:61:2c:3d:e7:4b:e5:e1:a8:
         76:87:b1:cd:32:a4:05:02:46:af:b7:85:33:30:97:f2:17:d7:
         72:9a:6f:e7:27:e4:c6:42:02:bc:7c:09:8f:16:8d:ef:1a:b4:
         43:8d:b4:53:5d:16:60:f5:9f:7e:3d:6f:ea:17:a8:b2:d2:9d:
         4f:a3:c1:50:a9:e6:6f:57:4d:ac:05:35:58:21:2b:42:a6:04:
         b1:d2:de:89:4f:22:3b:23:0f:28:27:e1:d9:17:36:26:61:c2:
         e7:fe:e8:b0:0d:a0:a5:e1:ae:af:92:76:4d:c5:24:b7:32:ab:
         d4:b5:e6:36:3f:af:3d:57:80:46:35:f8:5b:71:09:4e:f5:0a:
         c2:70:cf:f5:8c:d2:c2:a9:6e:56:b2:92:78:77:b0:a1:76:70:
         4f:03:cf:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:46:14 2026 by rpki-client