Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
File:                     3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json)
Hash identifier:          ty8x/nlicA/tf/YkY9jFsQiUMZipzNn3kUHM8gaxiTs=
Subject key identifier:   B3:5F:D6:11:7E:83:C4:06:63:E5:54:2B:AF:A7:D8:64:A1:58:4C:84
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Certificate issuer:       /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial:       019EC25C2C86E36DF5F8EBE274ED5C2400DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
Manifest number:          18EF
Signing time:             Sat 13 Jun 2026 19:01:21 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:21 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:21 +0000
Files and hashes:         1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: bZLw0nCUAMLuKwbL1qenYVB1GZBIbcfRBQUvYQwKyrE=)
                          2: O-gxnsHzDhdYKwTNHTFr-Ch9dJM.roa (hash: kVKhuC0dJOQWPqNSK7n1W9Bj9SrxDJpJnAeLYtUm8Yw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:2c:86:e3:6d:f5:f8:eb:e2:74:ed:5c:24:00:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
        Validity
            Not Before: Jun 13 19:01:21 2026 GMT
            Not After : Jun 14 19:01:21 2026 GMT
        Subject: CN=b35fd6117e83c40663e5542bafa7d864a1584c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:f5:f9:76:f3:fc:05:ff:e2:23:6f:17:97:
                    89:35:ac:a4:b2:ef:89:44:ad:46:7a:fd:ae:6f:79:
                    cc:c3:db:7b:95:9c:b6:d9:43:62:6d:e5:26:55:8d:
                    2c:b1:2c:c1:22:27:8d:2c:f2:6d:f4:a6:4b:e5:80:
                    17:04:2a:02:9e:26:1d:b5:cc:56:a3:c8:0f:d9:1d:
                    57:ae:f4:33:3f:a5:f0:81:38:de:0b:de:e0:8a:09:
                    02:e4:12:ab:12:70:fa:aa:5b:3d:ea:57:19:27:9c:
                    8f:b4:f6:98:1f:54:97:f2:a8:9c:29:45:d6:90:d8:
                    2d:a0:16:b7:ec:52:de:07:ee:21:48:96:39:24:5d:
                    a1:d2:88:f5:4b:73:15:f7:26:bc:52:75:5b:12:52:
                    50:c5:96:f6:58:1d:73:59:18:85:51:3e:6c:2b:43:
                    e9:5f:67:b0:21:da:27:23:ae:f8:58:4e:ec:b8:9e:
                    66:2e:67:21:69:96:47:11:6b:d8:5b:bc:b0:23:cc:
                    c3:79:0f:dd:fe:63:01:56:e1:d9:33:18:f8:06:77:
                    e7:5f:66:70:bf:8f:d4:1f:2c:aa:3a:d8:d7:dd:7e:
                    0f:0c:b2:bb:57:aa:b0:71:27:c9:11:3e:ab:35:69:
                    71:b7:d4:8f:ef:15:d0:68:90:0a:47:aa:03:8b:94:
                    65:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5F:D6:11:7E:83:C4:06:63:E5:54:2B:AF:A7:D8:64:A1:58:4C:84
            X509v3 Authority Key Identifier:
                keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:31:b8:91:37:cd:f9:e2:89:51:f2:3b:ef:43:8e:99:50:7d:
         2c:3c:d2:ff:71:ca:f4:09:b0:ff:1d:53:ea:77:b1:60:9c:73:
         8b:71:d2:eb:c9:a1:e7:e4:26:50:26:67:36:bc:d6:78:f2:ab:
         aa:76:b7:21:ac:b6:54:9e:1c:0b:30:f4:af:ed:3c:0d:c5:c4:
         f0:5e:26:c0:a9:fc:af:b8:26:4d:83:2c:4c:58:fc:e9:c0:be:
         d1:a0:db:24:08:2e:5f:03:01:7c:09:d8:bb:8c:6e:6f:3b:ad:
         e3:c5:7a:30:0d:e6:bb:65:80:55:19:de:18:e8:79:66:5b:aa:
         d7:67:65:b3:2e:d0:e9:1f:14:2e:c1:14:80:f0:4d:8f:46:b5:
         31:08:da:f9:63:01:c8:57:01:b0:49:f4:a3:f4:7a:3f:e1:01:
         ac:05:7c:f6:44:4e:68:46:3a:78:e6:51:04:a4:c8:9b:9f:8a:
         2f:d8:71:3c:ef:b9:f3:c2:fb:68:1b:a2:60:61:d2:18:e6:40:
         39:3f:38:bf:b9:91:2f:87:b3:4c:6e:fe:e0:34:53:81:24:e5:
         ad:20:e8:2e:d6:3b:ba:d9:4a:b5:91:d3:f1:fb:7c:31:42:1f:
         0b:db:0e:21:ef:86:5c:7f:50:53:c0:bd:4d:0d:df:7f:f6:ee:
         11:31:c1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:45:08 2026 by rpki-client