Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
File:                     O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json)
Hash identifier:          6caY3u99fjOaNMw9hETy2V/+Vv50N3UVBh/fRPln49s=
Subject key identifier:   50:70:72:BA:F6:63:DC:38:37:46:B4:6B:E7:02:E2:71:10:46:8B:87
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Certificate issuer:       /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial:       019EBFFF4A83B964AE14B7086F4C7460CE5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
Manifest number:          1395
Signing time:             Sat 13 Jun 2026 08:00:39 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:39 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:39 +0000
Files and hashes:         1: GPPevbImSvGjVqWAzYGvcpc3FOs.roa (hash: MHorAz/UCfb7aKgx7pKoBAkAFlLncJNyaH/wm4EHMOY=)
                          2: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: ZW1s5aAhEOK5U6BWahQWI3k7dU084+pizjZnfdrpsCs=)
                          3: XD7uuC6NUKDza7PfKtc_jHz7EnA.roa (hash: RPYu/+kKueNaM8YfpMGx6Mxi+JGMI3A7i1eBXpiVPd4=)
                          4: ntt8oBWCvDCUpNDHjPuie_5MUck.roa (hash: Yy1s4qDW987rNxjvZEbp1rZR84GXQU0RB/faIrx/grE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:4a:83:b9:64:ae:14:b7:08:6f:4c:74:60:ce:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
        Validity
            Not Before: Jun 13 08:00:39 2026 GMT
            Not After : Jun 14 08:00:39 2026 GMT
        Subject: CN=507072baf663dc383746b46be702e27110468b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:e6:93:d9:73:ca:17:ce:af:55:2f:76:ef:
                    c3:57:f6:bc:65:d6:86:99:eb:51:9e:c5:c7:57:24:
                    22:f9:7a:fc:90:52:dd:f7:4d:d7:3f:0f:c5:66:ae:
                    fd:ce:5c:02:40:35:58:40:3d:ea:4e:49:d6:c5:b4:
                    33:0e:84:82:92:81:9e:7f:bb:54:4f:40:43:75:68:
                    93:30:9f:83:b8:5d:ae:c5:2a:04:4f:92:ca:e3:e0:
                    b2:4c:e7:ea:fc:97:d4:70:a3:13:fa:27:f9:59:a3:
                    ca:c6:4d:ea:63:e4:98:b0:2a:d4:fb:2a:df:1b:27:
                    3d:fd:e3:9c:a2:32:40:48:da:60:86:76:e1:6c:9b:
                    a7:f0:14:a7:10:14:37:2e:9c:f2:9f:2c:83:01:cf:
                    00:26:81:f8:22:ff:4c:09:96:bd:95:5c:71:93:95:
                    fd:42:42:72:46:4b:34:48:b0:c5:d0:11:fe:18:ad:
                    db:61:51:4e:cc:87:78:84:3f:b7:56:88:b6:e2:2e:
                    47:78:6a:3b:04:59:a8:37:f3:6d:f2:94:aa:eb:91:
                    e9:fd:85:95:1b:1a:00:94:c9:a1:f2:ec:3c:3b:25:
                    b6:3c:bc:16:30:3f:f6:b2:be:82:a0:d6:ca:7a:2c:
                    6e:61:d6:01:57:82:e0:87:d6:60:15:db:61:40:85:
                    ae:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:70:72:BA:F6:63:DC:38:37:46:B4:6B:E7:02:E2:71:10:46:8B:87
            X509v3 Authority Key Identifier:
                keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ec:05:80:82:34:80:d9:66:ad:f2:84:ae:85:50:cc:01:8f:
         86:bb:89:e8:9b:bb:da:66:b2:fe:f3:6f:55:7c:6c:7a:b7:0a:
         e6:9e:f1:2d:58:bc:19:d5:ed:f2:d6:54:b2:2a:2f:93:24:2a:
         bf:f0:25:f3:0c:8a:70:4a:4a:c2:d4:44:67:f0:e8:de:38:d0:
         72:74:a0:ef:6d:5a:e9:20:50:5e:01:af:59:85:43:f0:93:5c:
         f9:51:55:e0:6e:e4:f2:2d:af:85:f9:ed:9e:e5:42:33:bd:64:
         8c:0a:3b:67:2c:bd:1b:18:93:2d:11:ac:15:4e:bf:13:36:c7:
         90:42:39:f8:c4:07:42:33:8c:74:f0:d1:fd:bb:06:62:dc:bf:
         8d:94:7c:d7:aa:5e:20:9d:b1:cb:88:61:85:5d:7d:28:26:75:
         79:19:39:c7:20:86:c4:16:87:19:e2:00:1b:2b:f0:51:d8:8a:
         f5:bb:69:65:7f:c3:eb:92:66:ea:e4:f8:b9:b9:6b:b8:22:2a:
         43:e7:c6:25:c4:e1:77:9e:82:21:37:54:56:93:93:d9:9e:1f:
         9a:ca:3e:7a:7d:37:94:42:f2:0c:8b:27:31:d0:78:44:7d:e7:
         ef:08:6d:97:33:8f:d8:a4:92:9d:a3:38:0a:94:6a:39:57:b2:
         e4:80:a3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:51:14 2026 by rpki-client