Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
File:                     OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft (raw, json)
Hash identifier:          7U7ftjAb+zdNVWpyOpn0UbpYAKAdvydws1wTr1vPjpk=
Subject key identifier:   DC:65:77:2B:D7:EB:0D:FF:74:C2:6C:79:71:BB:18:8D:DA:E8:79:69
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Certificate issuer:       /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial:       019FA906F82C939A64AE350B8A562145C110
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
Manifest number:          0F66
Signing time:             Tue 28 Jul 2026 14:00:34 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:34 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:34 +0000
Files and hashes:         1: 1AdLwVTQwnRojaJc6oKg4bE5e10.roa (hash: SmldC7KFTFrB2ovoO23QX0S7PhV2KBqhDfb2PIUZ9dY=)
                          2: OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl (hash: s/nUzV+vCNXtddXQC5D1x/zA7KvMcQ8L8Ucevg0vQiA=)
                          3: RYsY-o2i4jJuo5LcGcM8XUCbb9c.roa (hash: Dw7b6pkuG5rO21BY1jXBfmGu/ri7kYZ0iuN6r4DYx0Q=)
                          4: YAzw4t4zF4HrK6DQM0Hi6OJnv_c.roa (hash: Czpsw7Ht+JmwRHsAFUGdIdcpmViWugcfHRbmpORJDMk=)
                          5: i1ce_KCZyzzJnWCLHJltrqd5osU.roa (hash: YFwwgtjx89C2fEmhpNXxjUv1MUQKaMCAp+nvJdfMp5o=)
                          6: qw0bNos2uMNz09JenRAlkTtNmd8.roa (hash: SLKj00aaETL606oUEHzZc3k3yjfYWagWu8LRBWMxnBA=)
                          7: sYth0C5gNTA4Nn0ZVlj2vFu-rcA.roa (hash: YQlDl2GO98hMqxb9t2YAM1lWkbesF46HgOB5GJrP+Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:f8:2c:93:9a:64:ae:35:0b:8a:56:21:45:c1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
        Validity
            Not Before: Jul 28 14:00:34 2026 GMT
            Not After : Jul 29 14:00:34 2026 GMT
        Subject: CN=dc65772bd7eb0dff74c26c7971bb188ddae87969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4f:36:84:29:9c:86:08:03:e1:ac:5c:fa:c0:
                    2e:80:5f:4a:8d:f3:e6:c0:95:cf:0a:0e:d6:c3:54:
                    89:a9:33:e3:05:19:9e:79:47:4b:c2:69:ab:a6:87:
                    23:8b:04:68:2b:d6:e1:6d:8f:05:0d:a9:47:2c:2f:
                    49:c3:22:75:67:5f:cc:78:33:d9:b8:a4:15:fb:f2:
                    fc:f4:5e:38:9d:06:ed:c4:71:a2:15:74:ad:2f:40:
                    af:01:7b:ce:e9:4b:fe:3d:14:95:0c:98:54:e3:6f:
                    ae:4c:e2:ff:99:a3:b0:0f:58:df:0b:ab:9d:7e:80:
                    db:c4:31:1b:7e:ec:e1:05:03:88:c7:05:b3:3c:e2:
                    aa:b1:07:0d:9a:07:fb:15:14:18:18:75:4f:1e:f7:
                    e7:61:0f:10:fb:a6:1e:da:9f:cf:77:2b:0e:bd:84:
                    e9:90:01:11:d0:3d:9d:c1:77:97:81:7a:47:f6:96:
                    5a:9a:65:6f:dd:cf:5b:b0:23:b2:24:db:3b:51:7c:
                    a1:e9:1f:ef:55:4a:ed:a0:6a:0b:dd:df:32:dd:4d:
                    d9:d0:1a:d0:7c:db:8b:85:34:a6:7e:5f:fe:b8:a9:
                    0b:8e:8b:e1:b5:72:d9:c9:30:3a:52:98:61:ef:01:
                    48:17:49:4a:8b:88:61:2f:f0:3d:42:f9:06:96:fc:
                    f0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:65:77:2B:D7:EB:0D:FF:74:C2:6C:79:71:BB:18:8D:DA:E8:79:69
            X509v3 Authority Key Identifier:
                keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:29:86:cd:08:9d:ee:45:4e:72:67:54:50:e6:53:c9:d9:ed:
         ee:11:84:a8:f7:b1:b0:7d:2c:c3:85:8b:d8:3b:0a:b1:3f:b2:
         13:25:f2:ef:67:79:a9:ab:94:e1:74:c4:72:04:13:6c:c4:90:
         9a:5c:ce:7d:05:00:e5:14:88:73:3c:7e:dd:e9:36:d6:b8:af:
         93:84:08:98:fb:fd:d4:6f:42:5e:1f:94:83:3c:34:8b:b8:de:
         fc:98:a3:50:7a:65:e0:cd:76:71:7f:a0:6f:24:4e:a2:ea:7b:
         16:99:23:85:5c:ad:57:d4:a6:e0:02:64:39:b2:a7:11:5f:42:
         44:0e:66:3a:49:9f:e2:d9:5e:2f:f7:51:f2:c8:56:11:87:1e:
         dd:d7:0c:02:df:f3:ba:7a:1e:ec:81:ed:73:fc:f1:e5:89:36:
         83:83:a7:5b:04:c1:99:b3:6a:bc:84:4a:07:1b:d2:e5:ef:f7:
         42:4e:11:11:56:c4:80:32:a6:08:92:48:f2:d1:51:85:4b:40:
         25:3c:75:61:6b:56:83:3b:c3:6a:1c:d1:46:ec:f2:c3:e8:8a:
         0c:57:6b:5a:ac:21:a6:11:64:cb:e4:b4:7c:f5:a4:cf:e9:5d:
         39:f6:5e:f7:ed:e5:ee:46:3d:d9:06:d5:79:32:68:1d:8a:7d:
         cf:aa:f9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:54:22 2026 by rpki-client