Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
File:                     oE_JgO38R54EauArEOVyRbuSyLc.mft (raw, json)
Hash identifier:          zfX2byNuTgawuJ8KMWEd2VumCkjKqGlgusjw2b0jH1o=
Subject key identifier:   FF:DA:9F:4E:BA:AB:2A:FF:A0:CA:DB:7F:03:11:8D:C4:BA:BC:18:94
Authority key identifier: A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
Certificate issuer:       /CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Certificate serial:       019EC148B92D2031B21696A535682AEA8F96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
Manifest number:          095E
Signing time:             Sat 13 Jun 2026 14:00:29 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:29 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:29 +0000
Files and hashes:         1: EKDCPhWPs30l0DSrD9ZjD1tFQkw.asa (hash: /VjX2BQnC3wIjMi5VEBP8mPkyeVmam6lGlm8WGBjxBI=)
                          2: oE_JgO38R54EauArEOVyRbuSyLc.crl (hash: TOj3Vj+jllwY6pA3fjzkM9qAesu5RSSe6OSZNKAng3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:b9:2d:20:31:b2:16:96:a5:35:68:2a:ea:8f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
        Validity
            Not Before: Jun 13 14:00:29 2026 GMT
            Not After : Jun 14 14:00:29 2026 GMT
        Subject: CN=ffda9f4ebaab2affa0cadb7f03118dc4babc1894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:eb:f4:c8:ad:4a:65:e7:2a:01:27:61:57:6b:
                    e5:5a:5e:fc:9d:5f:f6:cb:4f:30:0e:37:4b:a5:b9:
                    c8:68:59:11:88:67:bd:47:b3:9b:38:16:7c:61:fd:
                    34:6a:3c:a9:19:e8:c7:91:be:b0:0b:89:b7:07:35:
                    4b:dc:b5:e2:ee:9d:1b:99:09:bf:ca:6b:1a:29:5b:
                    c5:08:47:23:0f:5d:6f:50:5f:6c:f3:9e:1b:e1:57:
                    b4:72:8b:10:0e:49:db:5c:7a:40:91:d5:8c:3f:54:
                    bc:55:00:01:13:f3:32:a7:ee:78:3f:99:e7:e1:38:
                    3f:9d:05:8d:fd:bd:cc:92:ea:80:38:45:92:d3:4f:
                    27:06:b9:7a:d5:0d:f9:49:f1:a0:fb:bd:56:34:3e:
                    e2:90:46:a2:8e:fd:a5:8a:0f:46:29:01:f0:15:a8:
                    80:4d:50:05:cd:7d:a1:51:4e:b2:0f:05:1e:bc:d6:
                    93:d3:63:f4:d1:5c:25:a2:92:cb:4a:c8:39:23:ad:
                    4d:d4:ec:67:36:54:92:ba:65:42:51:9b:bc:d0:8e:
                    7a:b9:3c:51:55:47:d0:3b:f2:6b:c5:2d:8b:1e:33:
                    b9:6b:87:25:fd:fc:62:4b:5a:41:89:b4:ed:0f:76:
                    2f:89:b1:e6:3d:f5:a2:65:bb:7f:35:9e:73:af:ad:
                    d3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DA:9F:4E:BA:AB:2A:FF:A0:CA:DB:7F:03:11:8D:C4:BA:BC:18:94
            X509v3 Authority Key Identifier:
                keyid:A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:0f:53:3e:28:3f:61:e2:54:d5:98:e1:5a:dc:05:86:40:a1:
         36:a9:ed:20:a3:dc:97:5e:c6:67:4c:e9:37:1d:5e:b3:e2:00:
         50:1e:07:0c:d2:f3:53:ca:b6:05:35:7b:7a:b1:e8:5a:66:6b:
         53:61:e0:b4:33:29:7b:c1:38:06:bf:38:ec:68:b5:a3:1b:5a:
         e1:f6:79:82:7d:60:ff:43:16:92:05:8c:2c:df:fe:4e:e4:86:
         5c:e6:08:42:e3:4a:71:e8:17:93:38:2d:56:f1:d5:b1:a9:3b:
         90:db:93:12:3f:65:bd:ea:83:c0:89:43:db:f6:70:56:b6:7c:
         70:e4:90:7a:a2:4d:5e:35:6c:93:7a:d9:87:9f:a1:22:c3:e7:
         93:07:6d:a7:37:3c:7d:00:bd:1b:6a:02:3f:7e:bc:a0:55:c7:
         34:eb:c3:1a:65:df:37:ab:af:59:b1:bf:c4:91:16:2a:13:3b:
         b7:7d:3d:c0:2d:b2:7c:90:ab:a4:e0:31:6a:05:a2:3f:45:0c:
         d7:f4:97:15:26:08:2b:eb:b5:cb:09:42:09:1d:78:64:2b:d3:
         09:f3:6c:7e:a2:35:e9:cf:71:84:9c:0e:96:9c:de:f6:09:77:
         97:b3:26:83:40:1e:94:02:ac:fb:d0:ed:6c:39:f9:fe:fa:2a:
         8f:b4:22:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:17:46 2026 by rpki-client