Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
File:                     oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft (raw, json)
Hash identifier:          6wA4Bi7wrG/IssR5WnQtsaoxpNkrNQnAj8S/pgD/saM=
Subject key identifier:   99:39:50:C5:3B:A4:E4:9B:6C:7A:5D:1C:96:B3:6C:BF:B6:7B:BA:CB
Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
Certificate issuer:       /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Certificate serial:       019F295AEBF289D44A5797F5E636B56B91F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
Manifest number:          16CB
Signing time:             Fri 03 Jul 2026 19:00:52 +0000
Manifest this update:     Fri 03 Jul 2026 19:00:52 +0000
Manifest next update:     Sat 04 Jul 2026 19:00:52 +0000
Files and hashes:         1: lh0K5-Z5Aaz0j8wGnxp6HsFtPYk.roa (hash: JhDyY/3KKD4NQI4A4Yynp5xK7eSjDNrmxGYBJDA+6gE=)
                          2: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl (hash: RSuy4eRb7HxY3vkVxY0SpZyxQzZVzI25Vdg3gObikwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 19:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:29:5a:eb:f2:89:d4:4a:57:97:f5:e6:36:b5:6b:91:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
        Validity
            Not Before: Jul  3 19:00:52 2026 GMT
            Not After : Jul  4 19:00:52 2026 GMT
        Subject: CN=993950c53ba4e49b6c7a5d1c96b36cbfb67bbacb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:8d:02:b7:a3:c3:1a:e8:67:34:d8:20:f7:
                    5d:05:60:d1:33:34:85:5e:f9:74:6e:74:24:28:63:
                    80:eb:2f:ca:4c:46:a9:97:d4:4c:f0:f9:f8:de:5b:
                    e9:df:86:21:0d:9c:61:57:8b:e4:f5:85:4c:64:2c:
                    3f:82:e2:2f:ca:73:50:68:e3:df:95:78:b4:79:6e:
                    f0:92:51:28:5c:7e:ce:4d:3b:63:03:12:0e:c1:a5:
                    a2:12:3e:a1:b0:30:ac:1e:4e:2c:fa:39:9d:36:d2:
                    24:5f:f4:04:48:f6:7e:02:d3:b9:c1:13:32:3d:51:
                    1e:c2:09:de:ef:3b:23:77:7a:46:c6:ba:8b:91:ab:
                    96:b1:49:32:4e:47:c2:bd:c4:5a:b6:0c:58:f7:45:
                    4c:3f:61:95:35:28:61:18:bd:58:f7:eb:32:8d:8d:
                    70:26:e9:6a:a8:25:c3:54:43:71:02:ff:2f:2c:bf:
                    68:24:21:96:95:b8:e4:2a:1a:59:59:e7:30:d5:61:
                    5b:6d:7b:8c:42:12:17:62:31:0e:96:22:1e:92:c5:
                    a7:23:ee:22:ef:fe:3d:1a:80:11:62:a3:55:45:43:
                    d5:6b:26:37:29:a1:85:dd:68:b0:80:d8:98:13:e1:
                    5e:ae:5b:c7:42:a8:4b:60:8e:f9:7f:f7:3c:03:9a:
                    8d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:39:50:C5:3B:A4:E4:9B:6C:7A:5D:1C:96:B3:6C:BF:B6:7B:BA:CB
            X509v3 Authority Key Identifier:
                keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d3:99:dc:a1:3d:40:01:2f:d5:b7:5f:8c:2e:8f:fd:45:22:
         fa:c9:49:44:d6:5f:3b:8c:94:a7:06:14:35:27:ba:c4:d8:9d:
         1b:6f:19:89:06:cf:ec:e3:48:90:d7:3d:cb:d0:8e:bd:d2:5a:
         17:3d:ce:41:5c:d3:70:1a:98:87:12:ab:d1:4d:b0:00:74:aa:
         63:04:43:f3:db:a7:3a:e7:de:e0:30:b3:90:6e:33:c2:04:e9:
         23:f2:ac:51:b9:f1:57:7f:27:5f:1b:2a:db:a4:3f:20:06:46:
         4e:91:ee:2b:35:09:a1:a3:df:04:87:00:16:cf:2e:a3:5e:53:
         63:e3:85:14:b0:a5:1c:71:a7:f4:8d:ba:d6:01:7f:85:24:a0:
         c7:26:e7:55:92:ca:64:64:1a:da:1c:34:af:c6:30:63:dd:1c:
         4c:e6:43:f4:0f:6a:94:8f:32:9e:17:0c:e0:eb:15:31:6d:8e:
         bf:d8:cc:89:4d:de:82:1d:63:bb:96:82:c1:03:51:8e:39:ac:
         38:b4:e3:b2:51:fa:f8:d9:3a:e1:da:91:07:60:92:b8:ae:12:
         56:61:8d:c3:2a:3a:07:14:d5:43:aa:1c:14:a9:00:c5:d9:a9:
         ff:fa:af:99:6d:96:23:87:5e:e7:4b:ff:38:73:22:40:6e:64:
         c4:84:bc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:45:34 2026 by rpki-client