Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
File:                     0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft (raw, json)
Hash identifier:          S1f8gbLat7Fu1ORWcT8uR7RnX70zKsGaJqQgylRxbYM=
Subject key identifier:   F4:67:1C:5A:5C:08:CF:90:D8:3C:A9:71:9F:F3:58:26:B5:73:68:4A
Authority key identifier: D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A
Certificate issuer:       /CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
Certificate serial:       019EBEEC914C15A7FC6B19FB8466CBBED31B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
Manifest number:          1958
Signing time:             Sat 13 Jun 2026 03:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:35 +0000
Files and hashes:         1: 0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl (hash: IgkfG7zukqJhAWdvi6nU9NwNnmjeATtOsowjd5GsNxA=)
                          2: UFUNHcp59zFp-s7epnaBCk3fSDI.roa (hash: 5JNnpeUYOHWtCY7aisWTKc4iY+kJ/fdA3iBaqT6fPPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:91:4c:15:a7:fc:6b:19:fb:84:66:cb:be:d3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
        Validity
            Not Before: Jun 13 03:00:35 2026 GMT
            Not After : Jun 14 03:00:35 2026 GMT
        Subject: CN=f4671c5a5c08cf90d83ca9719ff35826b573684a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:36:d7:5f:de:76:51:72:66:e6:7d:46:16:c3:
                    fb:70:fd:d6:90:91:b4:c2:3d:29:cd:53:4b:69:40:
                    3a:b4:f4:9d:5d:89:6e:f0:29:f4:58:40:62:40:91:
                    76:c5:d4:f6:37:b5:64:cc:00:dc:0e:4d:82:fc:52:
                    22:89:7d:64:4f:fd:11:4f:be:85:fa:a4:d1:9c:a1:
                    0c:ac:c3:d3:a6:a1:3e:1e:78:8a:80:bd:c7:1d:a9:
                    73:14:f4:d8:91:9a:54:9f:88:eb:0e:5a:92:79:be:
                    03:70:6c:ea:1f:ba:f1:b0:f7:94:74:1e:3d:3b:8e:
                    b8:fb:0e:d5:6e:da:46:b1:72:3b:7f:98:49:97:14:
                    4d:7d:76:25:15:f6:fb:3b:75:d6:3b:3b:fc:3d:37:
                    43:22:22:5f:b1:9f:a5:4e:a1:bf:ed:27:51:bd:9c:
                    96:25:d7:f3:a4:fd:ae:69:0c:7e:d6:3b:92:d8:01:
                    9d:6d:a4:95:dd:95:ae:43:86:39:0d:74:40:29:33:
                    45:ca:fb:fe:d7:a0:41:43:e3:98:3f:15:83:e5:11:
                    02:87:cf:6a:42:98:01:10:09:17:76:54:08:31:30:
                    7a:ad:c1:63:9b:f0:83:04:2e:8b:b8:48:eb:c3:8c:
                    6c:64:31:c5:f9:78:d3:19:82:e4:88:c9:f2:0e:61:
                    c4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:67:1C:5A:5C:08:CF:90:D8:3C:A9:71:9F:F3:58:26:B5:73:68:4A
            X509v3 Authority Key Identifier:
                keyid:D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:b8:7b:a0:37:b5:43:5b:81:41:99:38:9e:02:8b:2b:a5:f2:
         a0:87:24:21:ae:42:76:20:69:29:49:e7:93:44:e9:97:92:4f:
         19:e9:1e:8b:59:2d:fe:11:a0:8b:df:17:b8:94:ba:a8:49:17:
         3a:bf:1a:82:ae:75:68:80:2c:07:43:ad:f5:57:4f:07:3f:64:
         55:0b:f6:50:c1:ea:28:7d:17:fd:60:33:58:49:80:21:44:54:
         73:e9:04:e4:c3:ea:e6:a7:ac:da:7c:ce:1a:82:8b:ff:cf:d0:
         7e:ac:ba:0e:45:89:48:45:b5:e4:08:8c:ab:ce:6f:b9:a2:65:
         cb:ec:26:af:3e:1b:f4:f4:df:2e:18:a7:31:5d:4b:ae:c6:7b:
         58:b1:2d:ce:7b:3b:e0:fa:2d:33:bf:91:d6:1b:00:b6:d8:11:
         68:79:82:95:18:9d:b6:bd:ab:17:22:a3:13:ed:a0:85:f5:4a:
         25:f6:04:f3:cd:01:1f:bc:11:df:2b:cf:8c:a5:97:97:4b:ed:
         47:9f:8e:d5:d0:37:39:f8:29:4c:07:26:38:66:0b:9a:a6:69:
         03:dd:03:3d:92:ed:a4:01:48:85:b2:df:0f:46:fe:00:eb:ea:
         1a:79:bc:3a:f9:82:3a:0f:bd:4e:53:e3:14:e8:ac:ce:f2:48:
         f8:a8:e8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:22:42 2026 by rpki-client