Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
File:                     O47zaZ48ewDP9VFOVME2EqO8CBA.mft (raw, json)
Hash identifier:          ENSY3VieFLMAiU8tI4lV4IGASeIVIAdjaH+D0WizRYE=
Subject key identifier:   C8:8D:6C:7D:A3:ED:8D:76:7E:07:F7:7E:CE:11:70:6C:1E:5B:9F:D9
Authority key identifier: 3B:8E:F3:69:9E:3C:7B:00:CF:F5:51:4E:54:C1:36:12:A3:BC:08:10
Certificate issuer:       /CN=3b8ef3699e3c7b00cff5514e54c13612a3bc0810
Certificate serial:       019ED619E38A9759CEBB3EE28D621480E352
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
Manifest number:          012D
Signing time:             Wed 17 Jun 2026 15:01:21 +0000
Manifest this update:     Wed 17 Jun 2026 15:01:21 +0000
Manifest next update:     Thu 18 Jun 2026 15:01:21 +0000
Files and hashes:         1: O47zaZ48ewDP9VFOVME2EqO8CBA.crl (hash: GCyKUQf6d6qPWTvM3Hz4CsIMCkIfE1A40OqxkUPHde4=)
                          2: sLLadZHcLuLxJyRCEcg6ugP5rdc.roa (hash: z14c08hX3kPcGJfG3drJX75MFVvqokGJtQr08nJp+rA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d6:19:e3:8a:97:59:ce:bb:3e:e2:8d:62:14:80:e3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b8ef3699e3c7b00cff5514e54c13612a3bc0810
        Validity
            Not Before: Jun 17 15:01:21 2026 GMT
            Not After : Jun 18 15:01:21 2026 GMT
        Subject: CN=c88d6c7da3ed8d767e07f77ece11706c1e5b9fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:de:aa:a8:21:2d:12:c3:ec:be:33:be:ec:73:
                    86:f0:75:65:4a:78:7e:70:51:1d:3a:43:1a:b7:53:
                    e4:11:b8:c7:e0:82:1a:ea:b6:c5:84:9b:1d:42:8f:
                    75:8a:e1:15:27:c4:f5:67:a7:69:e4:39:6f:23:8b:
                    7e:6d:18:99:b4:38:bd:c2:84:bb:8a:5e:bb:12:76:
                    43:7c:de:9e:96:8f:79:d2:bd:5b:ca:99:88:e6:71:
                    ba:f3:18:c6:1e:46:68:34:c9:02:cb:3d:2b:3a:04:
                    7c:ab:80:9a:0a:1e:c2:3e:53:c4:20:59:4d:09:6b:
                    fd:a2:79:38:e3:67:4e:7d:b7:6c:89:9d:12:2d:32:
                    fe:41:df:71:55:db:5a:42:fd:97:bb:b9:62:6f:42:
                    33:21:f5:02:64:67:62:94:42:0a:42:c8:de:62:94:
                    bb:a4:12:34:ea:64:02:63:11:09:91:02:9e:c2:19:
                    b9:22:bc:bf:de:79:cb:ff:c2:ea:d1:a9:f3:14:1d:
                    eb:6a:bf:c5:5c:bc:aa:04:7e:0f:09:9e:69:c2:23:
                    a2:df:36:21:9e:5e:7a:78:8c:dc:9f:5f:3e:2e:86:
                    d0:d6:0f:58:19:49:17:5b:a6:ec:0d:fb:ab:06:fb:
                    1a:8c:37:ee:5f:08:16:b2:6f:99:f4:fb:80:26:e0:
                    08:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8D:6C:7D:A3:ED:8D:76:7E:07:F7:7E:CE:11:70:6C:1E:5B:9F:D9
            X509v3 Authority Key Identifier:
                keyid:3B:8E:F3:69:9E:3C:7B:00:CF:F5:51:4E:54:C1:36:12:A3:BC:08:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:2b:c3:96:55:86:91:10:75:18:f6:c5:2e:f7:ab:a4:20:ed:
         bc:e3:b3:cf:3d:70:18:e2:a0:c9:19:7a:bb:8e:bd:b6:b8:ce:
         00:1b:09:b3:68:d8:92:cf:62:5f:69:8b:ee:a9:f3:23:9a:c2:
         ed:e0:00:a8:91:86:8e:91:39:cf:8f:0d:42:25:81:53:6d:3c:
         d2:7a:99:e9:fe:ea:2b:59:a5:59:56:a6:93:26:bf:d8:45:45:
         17:49:cc:00:56:b5:37:da:b1:d4:ab:8f:b1:5e:a9:36:57:92:
         9e:1b:0a:c0:22:e1:8f:0d:52:87:94:24:a0:6e:e5:51:c6:6c:
         9c:4d:0e:5b:d6:c8:bc:0c:80:d7:1d:a2:a1:26:31:3a:2c:71:
         9a:5d:ec:89:37:89:34:8c:5c:de:cb:d3:bb:aa:65:78:c3:2c:
         2c:6d:9a:46:41:b3:5a:52:f3:61:90:c6:70:dd:ce:90:e8:30:
         f2:01:74:a0:c5:09:09:af:fc:d8:bf:a2:53:93:c3:cd:b3:ce:
         74:0d:ed:1d:c8:5e:d2:86:09:e6:88:0b:83:46:71:ed:b5:2a:
         b6:5e:a9:21:c7:f1:09:68:4c:94:0d:b3:d7:34:e1:ce:6e:73:
         7c:d0:3d:a1:c9:d9:61:b5:84:3c:68:8d:a1:22:1e:18:0b:7b:
         21:ed:7e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 18:04:18 2026 by rpki-client