Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
File:                     osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft (raw, json)
Hash identifier:          HQYfZom46fiIbFvhq5Uj8TVYBPpinm9Ca96OVmfHAbQ=
Subject key identifier:   E6:35:38:7D:ED:24:5D:0D:86:C4:77:59:B9:56:0F:C7:55:BE:B0:A1
Authority key identifier: A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
Certificate issuer:       /CN=a2c56441d83df94bbd0e60144a554639e40e0535
Certificate serial:       019ED34F2DDFFF4C054964097AF30AB0CF8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
Manifest number:          1156
Signing time:             Wed 17 Jun 2026 02:00:42 +0000
Manifest this update:     Wed 17 Jun 2026 02:00:42 +0000
Manifest next update:     Thu 18 Jun 2026 02:00:42 +0000
Files and hashes:         1: dvdR9JcJ1adEKhDQHP6JqbDnN2Y.roa (hash: VM5iSA8uwKH8wYL20uR8+pC8sXRM47ndx6laWeDwxAU=)
                          2: osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl (hash: r0Xw/GvIaGHV3qJT76Lk36ruXn0fAVmK8FqO1hM5TWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:4f:2d:df:ff:4c:05:49:64:09:7a:f3:0a:b0:cf:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2c56441d83df94bbd0e60144a554639e40e0535
        Validity
            Not Before: Jun 17 02:00:42 2026 GMT
            Not After : Jun 18 02:00:42 2026 GMT
        Subject: CN=e635387ded245d0d86c47759b9560fc755beb0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dc:63:cb:08:ff:40:fc:7b:63:66:5e:26:55:
                    49:2a:39:ab:38:b7:9b:a4:68:21:42:81:0f:70:1c:
                    0e:da:45:3f:08:e3:9b:c7:78:30:6b:a5:46:ff:d5:
                    10:cf:48:2e:a1:e3:97:b8:89:6e:14:95:fa:17:dc:
                    d8:fe:7b:0f:4a:92:cd:e6:4d:08:66:e4:c7:20:8d:
                    37:4d:61:df:be:9d:ac:cc:1a:e2:0f:2b:0e:e1:48:
                    03:d6:60:f8:d6:be:64:0f:5b:d5:62:aa:b2:52:50:
                    bf:04:2d:c8:1d:40:7c:47:7f:43:c7:b7:dc:08:83:
                    95:10:fb:65:13:1b:20:17:e7:4c:cc:95:9c:9b:f5:
                    d3:d4:72:15:01:ec:fc:b8:26:f9:f9:55:f1:68:1d:
                    21:0d:b1:d2:60:fc:6b:6a:d4:4e:d2:d0:28:4f:c3:
                    d9:56:34:07:75:16:f7:b0:4f:9e:a8:b8:45:9f:d4:
                    8e:ed:af:39:ec:9d:c7:fe:6a:5c:28:d9:24:26:30:
                    26:09:d1:e0:7a:a7:df:7c:14:55:c1:b6:7b:26:42:
                    b1:c6:ba:2e:2f:41:97:0a:67:6d:a4:90:34:a6:92:
                    7b:e0:b3:fe:4f:25:6f:18:4f:b1:61:c4:a4:64:a7:
                    18:e5:45:01:29:de:1e:9f:4d:c8:3a:a0:20:df:50:
                    7a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:35:38:7D:ED:24:5D:0D:86:C4:77:59:B9:56:0F:C7:55:BE:B0:A1
            X509v3 Authority Key Identifier:
                keyid:A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:14:53:1a:ff:d3:39:2d:7b:79:39:01:8a:7a:4a:f9:aa:c1:
         f6:fd:c6:07:02:a9:89:e0:07:1e:54:37:02:3d:eb:f5:32:c9:
         49:77:69:11:5c:8e:54:0a:af:8c:63:54:28:84:48:1a:0b:5a:
         a0:89:47:be:b1:e2:6a:db:ca:ec:cc:1b:2a:be:42:95:40:db:
         0e:89:c0:6c:7d:8d:8f:db:6a:6a:d7:31:16:22:22:ef:e2:dd:
         c9:05:9a:2d:4d:06:26:a2:4d:34:6b:aa:61:94:9b:27:2e:9b:
         fb:a6:1b:9a:c5:79:20:eb:b3:8f:e9:35:c1:29:2f:ca:77:8f:
         ee:61:68:23:b0:77:3b:b0:71:0c:8b:5e:e2:1e:06:89:a0:ae:
         e7:25:81:61:4e:52:25:9a:0b:77:30:53:b0:d7:31:10:5e:6b:
         93:cb:c3:8a:f3:a0:29:3f:6f:da:6e:cc:9a:93:ae:bc:d0:1d:
         99:ee:af:15:cb:9d:aa:34:dc:bc:49:e8:40:2d:0c:bf:21:87:
         5b:e3:ed:18:3b:c2:ba:e1:6b:b0:e1:11:fa:ae:17:6d:ee:40:
         2d:6c:7f:0e:c9:49:9a:de:75:05:c9:b3:75:86:e6:82:bb:06:
         90:81:e9:71:04:8f:ca:13:56:c9:3c:ef:2c:af:bb:39:0d:2e:
         d0:b5:98:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:54:56 2026 by rpki-client