Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
File:                     oOOBtudsuVIOjY9Wd27KD-F2zEA.mft (raw, json)
Hash identifier:          PLLXuTwjxQ0DJOv64Kch4pAFA9bqe4sCaY7SCDIcdbI=
Subject key identifier:   52:84:C7:37:06:6C:1A:FB:FC:FC:1E:79:B1:49:99:8B:33:1C:76:4B
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Certificate issuer:       /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial:       019EC06E504FBD3919EFFC82E1485722C872
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
Manifest number:          196B
Signing time:             Sat 13 Jun 2026 10:01:55 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:55 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:55 +0000
Files and hashes:         1: BWTvXgAXmLi5C-gjg1XGZb6Xx2k.roa (hash: 42jeeBbxleiQhbuMxXur6p7rLIKmwfR/0QUFcIvSOuI=)
                          2: EqeB8tqHFp5nwKidq-l-rJcDnGA.roa (hash: LkoQtN+QmOCni6JN0Z5FUtSBkw3mqkVOTFE6VSZr0m8=)
                          3: U13FecX6J3UOL0Ga46JJjAYTBnM.roa (hash: jhsgEsNANGrcwvVO7xJiaTQ5oa51oynlcgVfqCGIYnY=)
                          4: V2TMTG4WDi8rsRzuUJ35K6X29Mw.roa (hash: M4JvfosFkWwb5FMHFRCzlviyPCyGNqJtznLLB1q9hHc=)
                          5: oOOBtudsuVIOjY9Wd27KD-F2zEA.crl (hash: hhqnX1mV4tg9G/BxwhJseCH9pSVZf++R8dG8+pbNJaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6e:50:4f:bd:39:19:ef:fc:82:e1:48:57:22:c8:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
        Validity
            Not Before: Jun 13 10:01:55 2026 GMT
            Not After : Jun 14 10:01:55 2026 GMT
        Subject: CN=5284c737066c1afbfcfc1e79b149998b331c764b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:04:ae:33:d3:ee:a3:80:39:ae:75:31:02:59:
                    f4:ec:96:23:07:51:6f:eb:b9:52:9a:8a:65:7c:70:
                    79:9d:e1:6c:92:d7:57:4c:f2:7d:80:18:10:06:a7:
                    1f:cb:b2:16:e1:7d:59:d0:b3:b5:4f:a0:4d:73:c7:
                    92:cc:90:1a:59:ed:8e:a0:d2:a6:da:ee:40:c5:80:
                    a2:26:21:f2:0a:bf:dc:cd:b4:25:dd:fe:f9:48:52:
                    16:9e:93:18:67:74:1e:f8:ba:d3:8e:72:ee:3c:00:
                    b9:4c:03:cb:bd:d5:c4:91:74:84:b9:e4:3f:2d:ab:
                    c7:f1:e5:b9:27:c3:3a:a2:aa:59:04:6c:f3:40:02:
                    fc:88:ff:16:cf:d2:0e:ce:55:09:5e:13:c3:8e:25:
                    16:3c:74:9f:02:5b:ee:0c:3c:9f:f5:86:4f:f4:13:
                    5e:3e:e2:5f:ca:1b:da:6f:e7:58:fc:b8:32:95:cb:
                    c6:b0:04:24:b5:51:b4:4d:0e:12:f9:59:db:bd:3c:
                    df:03:65:6e:8a:e5:95:35:10:cf:e1:84:f5:d6:56:
                    c6:22:d5:dd:46:95:a9:e5:07:f0:5d:3c:f2:91:f8:
                    73:ef:5e:98:75:fc:25:de:a1:60:e1:10:f5:4a:9f:
                    92:46:85:84:85:e1:09:bb:03:6c:46:22:d9:38:91:
                    9b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:84:C7:37:06:6C:1A:FB:FC:FC:1E:79:B1:49:99:8B:33:1C:76:4B
            X509v3 Authority Key Identifier:
                keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c3:76:f5:63:31:29:c0:d9:f6:2c:5e:d1:fc:43:9b:b4:09:
         d0:af:1a:f1:21:38:26:19:94:99:cd:48:f5:28:26:81:09:a1:
         53:05:1a:97:a4:37:41:d7:82:1a:a8:d4:0c:30:e7:09:94:16:
         15:08:53:0c:ff:c1:70:1e:ed:77:e4:ad:ae:c7:ec:5a:ae:94:
         e2:73:b6:cb:43:02:3b:e6:18:c4:f0:14:60:71:2d:b1:92:c0:
         b0:3c:fd:38:ba:1f:9c:31:ad:9e:a8:be:d8:13:b3:3d:56:a2:
         2d:d4:e4:57:49:f1:60:bb:d6:6c:8b:e2:4d:63:a9:21:b5:ac:
         bb:cc:ba:28:c4:cc:12:f7:fd:04:c5:20:64:30:61:2a:87:a0:
         04:fb:a2:4d:ff:c8:54:5e:c8:15:3b:d2:66:a0:86:45:81:4a:
         f9:08:f8:5f:e6:8a:e9:fc:ee:b4:29:dc:d2:5d:bb:ad:e1:de:
         91:8c:2c:b2:1e:91:a2:b7:1c:70:ca:33:af:0e:aa:aa:1b:d3:
         dc:de:be:6e:de:3b:7b:b4:53:88:5f:8d:6b:54:5f:aa:59:fa:
         7d:5e:1d:68:e8:65:0a:d2:4f:b7:f2:71:91:62:34:b7:55:b8:
         27:75:a3:49:24:dd:9f:a8:9c:62:6e:48:4e:cd:67:b9:4b:dc:
         89:05:8c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:16:00 2026 by rpki-client