Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
File:                     OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft (raw, json)
Hash identifier:          oUW41GXzwq40gH1R1+I1mH0y/h9ZcgCk5fp/PEaJPm0=
Subject key identifier:   CA:BD:DA:86:D3:7B:85:33:FE:37:83:F9:27:35:2A:4B:B6:9E:20:4B
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Certificate issuer:       /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial:       019EBF5A5C75E0B23473F9D7989CB3016B07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
Manifest number:          0EED
Signing time:             Sat 13 Jun 2026 05:00:30 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:30 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:30 +0000
Files and hashes:         1: 1AdLwVTQwnRojaJc6oKg4bE5e10.roa (hash: SmldC7KFTFrB2ovoO23QX0S7PhV2KBqhDfb2PIUZ9dY=)
                          2: OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl (hash: d87pR8Em7GU9L4GfWjDhnFrvc8FHscwI5hmucCrNLsM=)
                          3: RYsY-o2i4jJuo5LcGcM8XUCbb9c.roa (hash: Dw7b6pkuG5rO21BY1jXBfmGu/ri7kYZ0iuN6r4DYx0Q=)
                          4: YAzw4t4zF4HrK6DQM0Hi6OJnv_c.roa (hash: Czpsw7Ht+JmwRHsAFUGdIdcpmViWugcfHRbmpORJDMk=)
                          5: i1ce_KCZyzzJnWCLHJltrqd5osU.roa (hash: YFwwgtjx89C2fEmhpNXxjUv1MUQKaMCAp+nvJdfMp5o=)
                          6: qw0bNos2uMNz09JenRAlkTtNmd8.roa (hash: SLKj00aaETL606oUEHzZc3k3yjfYWagWu8LRBWMxnBA=)
                          7: sYth0C5gNTA4Nn0ZVlj2vFu-rcA.roa (hash: YQlDl2GO98hMqxb9t2YAM1lWkbesF46HgOB5GJrP+Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:5c:75:e0:b2:34:73:f9:d7:98:9c:b3:01:6b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
        Validity
            Not Before: Jun 13 05:00:30 2026 GMT
            Not After : Jun 14 05:00:30 2026 GMT
        Subject: CN=cabdda86d37b8533fe3783f927352a4bb69e204b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:4f:98:1c:ac:9e:fd:c5:8d:81:86:23:a3:
                    2a:78:af:9e:c9:a2:08:7e:31:4c:3c:a0:de:b5:95:
                    ef:f7:c4:a4:ff:81:1c:18:49:8d:89:8a:1c:b0:7b:
                    2f:25:8b:49:6e:35:d5:e7:b0:74:ee:c4:76:df:15:
                    92:1a:e4:96:b1:b6:7a:81:30:98:01:f5:e2:46:a9:
                    a5:b6:f1:27:51:e1:59:e8:63:72:02:b8:3e:a0:13:
                    9b:46:ca:66:25:ad:ea:d0:92:4f:39:52:30:0a:c3:
                    11:b0:b3:d0:46:55:a3:e8:dc:5e:db:9c:81:ff:39:
                    65:18:53:93:95:f2:7b:7a:8f:bb:8e:94:ab:43:a4:
                    76:04:47:a6:cd:8c:ca:60:c0:a0:38:72:47:64:94:
                    e6:63:8b:fe:6d:dc:f8:84:0f:11:d0:e9:95:52:c4:
                    5f:d3:74:09:d8:46:2d:05:39:cc:9d:f2:c4:c3:6f:
                    bc:c6:25:c8:f9:d0:a0:17:db:cf:d0:f7:3d:1c:5c:
                    a8:a0:b7:ea:26:4f:2b:40:63:2b:95:da:38:2d:2c:
                    85:99:51:a8:9b:b5:13:cc:2e:bf:03:1e:69:ba:e3:
                    e7:ed:06:0b:bf:0c:f2:30:7e:ab:9b:26:21:3b:ff:
                    29:85:28:84:e2:2c:9d:cb:4c:15:98:1b:fc:f0:eb:
                    2a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BD:DA:86:D3:7B:85:33:FE:37:83:F9:27:35:2A:4B:B6:9E:20:4B
            X509v3 Authority Key Identifier:
                keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:75:7b:60:f9:f9:d2:39:a8:7e:70:83:26:d9:8b:dd:79:41:
         b8:6b:80:2f:88:45:40:72:0a:ee:6f:49:24:e5:fa:7e:d6:35:
         fa:f8:21:b8:fb:82:12:fd:6f:11:31:68:da:ef:a6:50:e0:db:
         fe:18:9c:47:48:04:8c:ce:08:5a:0f:d3:9f:83:6b:e1:90:89:
         40:42:2f:c3:b5:63:6c:41:ba:70:ac:df:cb:df:f7:c1:dc:6e:
         85:09:24:ce:fe:a1:bc:3d:85:43:f4:97:ba:91:3d:1e:a0:11:
         9b:ca:22:55:4d:c2:1e:fb:cd:12:d6:ee:86:ff:8e:81:1d:8b:
         15:21:99:83:d5:ab:f0:ab:81:81:88:21:f5:2a:14:d3:54:1c:
         93:0e:1c:24:6c:4d:00:ad:7e:0a:26:a7:a1:79:cd:1d:00:9a:
         08:7b:65:c7:ea:39:fe:43:10:cb:bb:b9:27:4a:b4:1f:90:bd:
         50:30:77:b6:9f:89:1d:05:b6:27:4c:35:53:ee:b5:87:56:a1:
         61:4a:6e:3a:6f:ce:4e:b0:dd:6c:af:4b:51:3f:8f:d7:e4:c6:
         81:4e:b2:39:f1:07:be:6e:0b:34:84:8f:c6:39:bb:ee:2c:77:
         4a:8f:21:76:dc:0d:ad:bc:6f:25:bd:be:5a:a9:a9:c0:58:da:
         29:8e:0d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:03 2026 by rpki-client