Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
File:                     oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json)
Hash identifier:          GrtLut3ioMS5EpoI5uaH6//aShPp5OGAGtf1tXyVZqU=
Subject key identifier:   FD:33:42:AA:DE:80:DB:53:D9:DF:44:1C:CE:9B:1A:21:04:55:82:63
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Certificate issuer:       /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial:       019EC292637D9AC381E93232577CC91E0A4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
Manifest number:          11F5
Signing time:             Sat 13 Jun 2026 20:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:33 +0000
Files and hashes:         1: Lw6dpIVKTrHkqnvz6_8ZfhY3LHE.roa (hash: zWKT6y6B8vxLNvJ+sCTyWUsXCNlPOrbo7d9YXIBVvAM=)
                          2: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: dOnsH0r/H8/dHxQza2ApzOkufwo3ihqDrLag+7qKcHs=)
                          3: yGo3bd_PBkdSOHP97aSwO25CbMs.roa (hash: 4G7Mo+idHxtoGcT5AVhMItxtHJ9uui0A13uK+5ubrzY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:63:7d:9a:c3:81:e9:32:32:57:7c:c9:1e:0a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
        Validity
            Not Before: Jun 13 20:00:33 2026 GMT
            Not After : Jun 14 20:00:33 2026 GMT
        Subject: CN=fd3342aade80db53d9df441cce9b1a2104558263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b9:4f:a7:95:c9:9f:36:3e:be:61:5f:98:1d:
                    2b:4d:0e:33:39:a4:23:b9:63:21:0c:7d:f9:9b:41:
                    f5:a1:f8:53:76:c7:d0:dc:ae:85:ae:2b:9d:ff:6a:
                    72:08:a5:54:d2:4a:24:ad:f6:a0:12:70:ee:05:e0:
                    7c:31:53:b4:06:7d:08:c9:40:47:d5:c4:3f:fc:fa:
                    9d:c7:bf:16:72:6d:38:17:a6:ab:5c:35:ab:f3:6b:
                    ad:c4:be:3d:50:bf:20:f6:35:b2:8f:08:b1:82:58:
                    97:3f:5e:94:7d:f1:ae:3d:f6:af:34:02:9c:aa:4f:
                    2b:89:0c:9a:0d:2c:93:84:c9:8c:3e:4f:7f:5d:59:
                    5f:3a:63:b9:7b:4e:15:b1:52:f6:96:4e:2f:33:a7:
                    c8:e1:1d:dc:3c:fd:8e:64:1e:e4:0f:50:58:46:94:
                    f5:92:f6:ac:00:a5:8e:0e:1c:6a:da:32:dd:dc:96:
                    a0:d0:05:a0:97:5b:fd:7f:55:d8:07:71:0a:1c:d6:
                    d4:f0:af:82:8c:de:e0:e8:6e:62:20:91:b6:a0:39:
                    fb:b3:1c:f8:e4:93:ae:16:c9:9d:5f:dc:3c:0f:1d:
                    7d:90:ac:06:80:d1:4a:f8:98:e2:89:12:f7:41:33:
                    e7:5a:b5:6a:0b:bd:59:61:18:90:c3:68:1e:45:b0:
                    43:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:33:42:AA:DE:80:DB:53:D9:DF:44:1C:CE:9B:1A:21:04:55:82:63
            X509v3 Authority Key Identifier:
                keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:5a:76:c4:4f:25:27:20:77:fe:87:0a:4a:99:f8:b5:a5:a6:
         32:eb:4f:eb:a2:d5:5c:6a:32:0a:fc:c1:7d:7b:12:df:4d:19:
         c0:db:69:c4:58:35:ca:b4:78:62:aa:cd:3a:ff:0c:f7:b3:37:
         70:03:a6:fd:cc:9b:b7:94:bc:91:23:06:f2:63:d5:00:28:a8:
         1b:44:b6:14:50:e1:0a:60:da:52:5b:fc:3c:6a:69:3d:42:eb:
         69:8b:d2:b5:05:50:d4:72:5d:89:dc:62:6b:9f:4d:ae:3d:05:
         ac:64:f0:95:9b:ea:70:31:a3:17:44:4f:40:1b:53:7c:30:65:
         12:bb:b7:ee:cf:1d:59:b0:8a:15:84:c8:ec:46:9b:2f:f0:2b:
         31:18:34:32:3f:e3:c5:bd:97:23:47:ee:5f:80:5e:01:4d:2c:
         59:2c:0e:e3:e4:47:1e:4d:77:09:cb:a4:d9:67:0e:75:2f:54:
         e2:cf:6a:7d:0e:81:8e:b0:c1:77:03:13:3d:e6:61:3a:63:9b:
         66:76:17:e3:ed:34:82:af:78:b7:4c:59:67:a0:34:13:d0:35:
         05:62:54:15:c0:a7:57:aa:2f:b1:57:36:26:69:83:09:e1:35:
         3e:7e:7b:99:1b:b5:c9:79:9b:97:48:2c:13:27:cb:9e:34:cb:
         05:7a:9c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:44:08 2026 by rpki-client