Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.mft
File:                     oYM1MM41ev8SGjHmyY4f6RM7sCM.mft (raw, json)
Hash identifier:          B85MuNjXSrC9/qB+ZNnSeK91IeciT4v9QL5lJLEAXz4=
Subject key identifier:   F2:7B:9E:56:0D:9F:77:39:B7:0E:30:61:FA:82:79:0C:A4:70:2C:B0
Authority key identifier: A1:83:35:30:CE:35:7A:FF:12:1A:31:E6:C9:8E:1F:E9:13:3B:B0:23
Certificate issuer:       /CN=a1833530ce357aff121a31e6c98e1fe9133bb023
Certificate serial:       019FAA88CB287A699D8563FE6810A9BA270A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oYM1MM41ev8SGjHmyY4f6RM7sCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.mft
Manifest number:          4D
Signing time:             Tue 28 Jul 2026 21:01:59 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:59 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:59 +0000
Files and hashes:         1: oYM1MM41ev8SGjHmyY4f6RM7sCM.crl (hash: yhv74PTuEkB4DpRtYtx74MRfMI5BzQNubtmpAsq8wgA=)
                          2: vZuspMqoseBbPHNG2fmOMxJAoRk.roa (hash: O8Akdsdgsu3O3BLQ4nDzeqQ7DRsdv1T4urleIjReCIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oYM1MM41ev8SGjHmyY4f6RM7sCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:cb:28:7a:69:9d:85:63:fe:68:10:a9:ba:27:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1833530ce357aff121a31e6c98e1fe9133bb023
        Validity
            Not Before: Jul 28 21:01:59 2026 GMT
            Not After : Jul 29 21:01:59 2026 GMT
        Subject: CN=f27b9e560d9f7739b70e3061fa82790ca4702cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7b:70:25:ac:63:30:c1:de:48:48:89:3c:f5:
                    ea:3f:28:a3:31:e8:b4:56:9d:94:1f:d8:a7:6b:2b:
                    c5:fa:d9:4e:ce:2a:af:2e:7f:9f:c8:c1:af:da:3a:
                    f0:c1:1e:22:6f:29:e1:cd:c1:a2:0e:49:6c:35:12:
                    f5:42:20:b7:e8:75:be:e0:49:6b:0b:65:81:10:9c:
                    56:ee:8b:76:c7:a2:b3:b1:21:33:8b:dd:ae:5f:64:
                    3d:4e:54:95:d2:89:2a:8d:44:e8:73:28:a3:4b:7a:
                    d8:3d:d5:7c:79:10:7b:d7:de:8b:56:8d:d4:45:ec:
                    07:b7:c6:b6:ad:70:00:47:a2:88:64:9a:7f:e0:3a:
                    09:dc:a4:9b:d5:16:e4:4c:e2:99:4e:46:85:de:85:
                    44:ef:ed:ff:66:49:57:9c:66:21:18:e8:d6:f5:1c:
                    65:83:3c:76:42:43:dd:5d:6c:ce:11:20:3c:51:01:
                    3c:23:18:ba:b1:b1:92:03:b5:26:fe:4e:db:df:e7:
                    7e:fc:03:1a:04:80:80:18:ca:93:f4:d1:6a:3c:d1:
                    df:a3:9f:b7:fc:48:33:1f:40:2c:33:14:f6:f4:89:
                    c1:47:79:6b:16:d2:04:bb:96:87:b3:27:17:41:7f:
                    2f:d4:10:cd:c9:3c:37:b0:3c:65:26:e0:a8:6d:ae:
                    ad:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7B:9E:56:0D:9F:77:39:B7:0E:30:61:FA:82:79:0C:A4:70:2C:B0
            X509v3 Authority Key Identifier:
                keyid:A1:83:35:30:CE:35:7A:FF:12:1A:31:E6:C9:8E:1F:E9:13:3B:B0:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYM1MM41ev8SGjHmyY4f6RM7sCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:3d:a4:b2:83:5f:bb:2c:61:76:63:06:6d:6c:5e:2b:a0:49:
         1f:e8:1a:fa:a7:fa:4a:23:9b:9b:fb:27:d4:13:72:6a:62:cc:
         39:36:c8:7b:1f:d4:00:a0:87:4d:82:88:af:5b:1a:8e:6d:12:
         45:50:8b:e1:9e:50:08:b6:db:e4:8f:71:a2:e6:0d:13:f9:ff:
         91:97:8c:4d:3f:3c:39:bd:d1:31:18:a6:94:91:bf:b9:99:29:
         03:11:43:63:be:05:a2:b7:10:4a:23:c1:06:27:15:f2:69:3e:
         4c:bc:be:48:b7:72:09:6b:72:49:1e:54:75:a5:2e:0e:cb:09:
         2e:54:ab:62:5d:d5:aa:1d:b3:b5:d6:17:ea:98:03:00:d8:9a:
         5b:f5:95:07:61:48:83:61:15:42:c6:5e:d5:23:53:e2:19:6f:
         ba:b5:6b:e3:6c:4d:d6:03:5d:d5:6a:f5:8b:b8:2b:22:ae:19:
         7d:54:10:2b:7c:38:8a:57:8c:76:f6:d2:aa:a9:47:f2:f0:ff:
         ee:9e:87:42:4c:a3:d2:ae:45:01:78:1a:28:b1:33:f9:d4:b6:
         0e:6f:cd:0b:cb:16:1d:0a:04:ec:f4:9d:ff:f4:f4:d1:11:1c:
         26:c4:63:74:54:d8:cc:05:36:b6:44:12:7c:c0:56:fb:ea:4c:
         8e:7e:4e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:22:40 2026 by rpki-client