Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File:                     OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier:          dIMvrkitaDRoSQvmnU2biD8U2c4ug5eK7adHx1EckHg=
Subject key identifier:   DD:4C:79:B0:B9:D4:FC:7A:EC:53:CD:75:9B:BE:73:2E:06:41:BE:44
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer:       /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial:       019F243478B70B9690024FF6CD173575A7E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number:          0610
Signing time:             Thu 02 Jul 2026 19:00:46 +0000
Manifest this update:     Thu 02 Jul 2026 19:00:46 +0000
Manifest next update:     Fri 03 Jul 2026 19:00:46 +0000
Files and hashes:         1: 5kdfSFfIXpTRDKj7nU9dTnk_a7Q.roa (hash: Qud0EaTIzAf2oGbBUwUkaVwSjph89PDDdo19BAvVZGk=)
                          2: IxT2p1USvkgGTKI4jIEAGlYZs-c.roa (hash: RpYym6oxELeUAn+F/Xd8p5iioExynMd0f+38UAxEIvY=)
                          3: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: DywgI8GDxxhl286Gs0sbCoGTDBY259lesve+FoN3eKw=)
                          4: oVKcWW4duCpkxQJ1oP8E7IC2AzU.roa (hash: myh6PixZ04dXKVpBJ7oXGMj9UcP3arkRwKqy/fuyKlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 Jul 2026 19:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:24:34:78:b7:0b:96:90:02:4f:f6:cd:17:35:75:a7:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
        Validity
            Not Before: Jul  2 19:00:46 2026 GMT
            Not After : Jul  3 19:00:46 2026 GMT
        Subject: CN=dd4c79b0b9d4fc7aec53cd759bbe732e0641be44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c0:54:69:6e:72:cb:88:8e:65:97:54:74:1d:
                    1b:9d:41:81:c9:99:cd:b6:01:7b:d8:42:ca:ce:1c:
                    fb:b8:8b:32:94:77:06:99:c1:b2:71:5d:c4:24:b1:
                    aa:ad:3d:28:e8:d9:49:c2:60:af:8b:f5:d8:28:9f:
                    99:68:f9:e3:4b:48:29:82:ce:a3:bb:8c:df:2a:65:
                    87:f2:0a:fe:6b:1a:18:3f:f8:ab:75:25:5f:5f:e2:
                    1e:27:7b:c9:4a:39:2a:50:aa:96:00:17:94:a1:ce:
                    96:50:a5:36:7c:fc:b9:f6:25:91:c5:75:59:c3:4c:
                    bd:d0:3f:ef:2b:7f:e8:ba:f2:03:e9:24:c1:ae:9a:
                    69:1c:95:69:46:eb:ac:c2:02:16:d2:5c:8e:7c:87:
                    70:a2:d2:48:f0:f9:3e:34:06:8a:e4:9b:19:9f:f2:
                    6e:32:f6:95:4f:ef:bc:82:ab:e6:4e:0a:8a:2a:7e:
                    58:2b:98:48:72:43:f8:bd:19:c0:ac:e5:49:89:e4:
                    a2:1a:7c:1b:5e:93:56:cc:30:df:4f:f1:da:2c:15:
                    07:db:54:5a:7d:c9:75:91:a8:92:e4:a7:c7:ef:78:
                    17:9d:19:62:88:ed:9e:02:7b:15:2b:7e:6d:de:de:
                    26:27:35:d1:eb:a0:71:a5:c1:d5:97:1d:06:a4:ba:
                    42:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4C:79:B0:B9:D4:FC:7A:EC:53:CD:75:9B:BE:73:2E:06:41:BE:44
            X509v3 Authority Key Identifier:
                keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:fe:16:ae:4d:8e:8d:6c:0f:12:1d:6f:b5:e3:a7:0f:d2:e8:
         15:64:bc:7d:1c:40:f8:a6:81:5f:de:50:26:d2:46:9b:06:f4:
         ce:8d:f2:a8:d8:ad:67:60:93:78:eb:4e:35:ad:50:81:2d:5d:
         15:a5:db:3c:7f:7c:e1:0f:d2:e5:9c:dc:5b:6b:ad:e6:67:10:
         64:e2:50:0b:3f:9c:04:4f:f4:c6:32:64:20:9f:b5:37:2a:37:
         1d:2c:59:a2:52:71:6c:23:b7:7f:27:0d:d7:49:a9:67:7e:58:
         00:ca:13:81:5f:34:3b:49:3b:0b:2e:8e:2b:6b:99:3e:c3:14:
         3e:d5:f8:32:eb:21:79:03:af:56:29:c2:57:65:92:5f:fb:fa:
         10:62:02:6a:c2:55:b9:21:98:cb:12:c7:45:ba:39:ce:e4:a2:
         c8:5b:13:d2:a6:84:c2:74:4b:a9:60:27:33:43:87:d7:37:c7:
         f7:91:7f:ce:2e:10:c4:7f:f3:ee:14:81:e5:d1:df:78:ce:fb:
         02:3c:e5:c4:33:a6:b9:cb:37:1f:62:18:12:5b:2f:52:5f:e3:
         39:bc:69:56:e6:45:8c:60:04:fb:60:df:c9:be:46:d7:82:15:
         14:36:59:c6:30:c0:dd:9a:78:61:c4:f4:f1:98:9f:5d:90:4a:
         35:1d:88:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 03:43:15 2026 by rpki-client