Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
File:                     oIwpap_lpgUVguWt5HVJhfbxGzE.mft (raw, json)
Hash identifier:          IrGO7KiJlejS32ezc89s7SRWMBDxww5QjXb9spGLkmU=
Subject key identifier:   C7:F6:94:90:C4:B0:68:E3:F1:40:A1:DE:D2:7B:12:56:C8:60:41:2F
Authority key identifier: A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31
Certificate issuer:       /CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
Certificate serial:       019EBAA2A113349C3B3B0275F5D73BB39F21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
Manifest number:          0181
Signing time:             Fri 12 Jun 2026 07:01:20 +0000
Manifest this update:     Fri 12 Jun 2026 07:01:20 +0000
Manifest next update:     Sat 13 Jun 2026 07:01:20 +0000
Files and hashes:         1: PZKZVJbLIiC-nyKzbha8Q1plbB0.roa (hash: OGaxQzQU67t4LsOvlqtFqnosSDCkJ4cDH47PaItpnpE=)
                          2: oIwpap_lpgUVguWt5HVJhfbxGzE.crl (hash: ZLb1xp1rSW8g5j3RwqOom5V4XPHOq72/aHvEV5827LI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 05:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:a2:a1:13:34:9c:3b:3b:02:75:f5:d7:3b:b3:9f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
        Validity
            Not Before: Jun 12 07:01:20 2026 GMT
            Not After : Jun 13 07:01:20 2026 GMT
        Subject: CN=c7f69490c4b068e3f140a1ded27b1256c860412f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:eb:6a:2e:84:e5:34:7e:ac:96:56:b1:48:85:
                    47:c5:05:4f:03:e9:75:c6:f6:aa:3a:46:be:82:0b:
                    d0:19:1d:55:01:41:b4:d1:3c:1b:5b:cf:31:c8:d4:
                    0b:e4:c4:4f:e6:51:24:82:47:42:d5:b5:38:29:a4:
                    38:c5:5e:22:c9:d0:a5:53:3c:0c:53:f2:e7:0b:5e:
                    7c:ab:a7:37:28:e7:b1:f2:92:97:f0:20:7a:d6:6e:
                    96:b2:74:da:c8:e2:fa:89:73:e7:2f:4c:9c:a9:40:
                    03:cf:e1:2b:f9:2b:7e:a4:0e:1f:d0:bd:ed:11:84:
                    53:1e:22:34:55:80:51:e4:32:44:42:c4:05:20:de:
                    2d:0a:17:fb:01:46:13:d1:7f:94:69:89:68:64:33:
                    35:21:30:da:3d:21:2e:7e:08:01:04:f6:28:75:6e:
                    83:3f:87:dc:db:e3:94:cc:59:4f:76:96:96:69:f6:
                    19:d9:ee:23:7d:70:99:f6:e8:c1:ff:74:a8:e4:02:
                    02:7a:88:20:b2:00:1c:40:d3:16:53:90:27:c5:57:
                    d2:1a:25:c9:62:2b:01:66:31:1a:f4:6b:86:11:54:
                    57:8e:e6:e5:3f:29:8a:17:b4:3a:e3:00:25:78:31:
                    8f:ac:f4:d4:37:16:00:d6:ce:41:20:21:d9:12:bd:
                    b6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F6:94:90:C4:B0:68:E3:F1:40:A1:DE:D2:7B:12:56:C8:60:41:2F
            X509v3 Authority Key Identifier:
                keyid:A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7a:d0:a6:67:e6:eb:a8:40:45:27:71:4e:8a:5e:2b:60:3a:
         80:20:f9:ce:a7:df:7e:eb:06:96:f1:75:aa:5a:58:b7:26:8f:
         22:9e:68:0b:14:3a:2b:25:41:48:97:d4:e7:9f:59:80:c6:62:
         87:1b:9e:9f:19:69:23:33:c0:77:f2:47:59:05:66:9d:26:f1:
         d4:1c:c4:13:48:85:47:b6:a3:e6:d7:e6:ff:af:f0:bb:79:1e:
         e0:52:68:8f:10:cf:48:b7:11:ae:ec:37:07:87:84:58:5a:5a:
         8d:7c:83:29:e8:ab:27:9e:d2:4c:47:52:3f:91:44:5d:40:d1:
         3b:c8:2e:02:05:cd:33:ab:90:3f:00:5a:77:78:a0:55:59:a9:
         f9:36:7c:02:9c:14:5c:3f:7b:01:32:ce:2f:c4:0d:32:11:62:
         1e:2e:a9:0a:c9:ba:ae:4b:60:a7:e6:d1:b2:cf:b8:4c:7c:c1:
         12:e6:2f:08:80:3c:be:74:1c:b6:bc:c5:20:39:59:cf:30:09:
         4a:93:53:4e:1a:2a:79:e1:dd:81:e2:9d:6a:c7:61:f7:3f:b4:
         0f:19:86:b3:be:2f:40:de:c9:86:f4:0c:e5:bb:bb:52:f8:f4:
         e1:fa:74:71:e1:47:66:98:19:64:61:0c:56:88:f0:fd:76:2f:
         00:30:d6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:52:03 2026 by rpki-client