Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
File:                     oOOBtudsuVIOjY9Wd27KD-F2zEA.mft (raw, json)
Hash identifier:          LMAYyOLsDJW3YXcx3R/5tv4PfJ+nw3LP1rT0dR8x83M=
Subject key identifier:   F3:D0:51:F8:39:46:41:DA:47:E7:16:56:05:61:07:03:72:0D:06:4B
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Certificate issuer:       /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial:       019FAA19FDE3134A55B7865EFFD2EC9E3000
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
Manifest number:          19E4
Signing time:             Tue 28 Jul 2026 19:00:57 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:57 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:57 +0000
Files and hashes:         1: BWTvXgAXmLi5C-gjg1XGZb6Xx2k.roa (hash: 42jeeBbxleiQhbuMxXur6p7rLIKmwfR/0QUFcIvSOuI=)
                          2: EqeB8tqHFp5nwKidq-l-rJcDnGA.roa (hash: LkoQtN+QmOCni6JN0Z5FUtSBkw3mqkVOTFE6VSZr0m8=)
                          3: U13FecX6J3UOL0Ga46JJjAYTBnM.roa (hash: jhsgEsNANGrcwvVO7xJiaTQ5oa51oynlcgVfqCGIYnY=)
                          4: V2TMTG4WDi8rsRzuUJ35K6X29Mw.roa (hash: M4JvfosFkWwb5FMHFRCzlviyPCyGNqJtznLLB1q9hHc=)
                          5: oOOBtudsuVIOjY9Wd27KD-F2zEA.crl (hash: 74UHSqOe6hd2AtPwa+DNeVHoF5P79g/T/DgCURoxhZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:fd:e3:13:4a:55:b7:86:5e:ff:d2:ec:9e:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
        Validity
            Not Before: Jul 28 19:00:57 2026 GMT
            Not After : Jul 29 19:00:57 2026 GMT
        Subject: CN=f3d051f8394641da47e7165605610703720d064b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:70:24:cf:36:83:0b:5c:4b:f9:5c:9b:ef:b3:
                    ff:55:b9:bd:11:86:c9:82:b3:31:18:9c:cb:d3:38:
                    ca:ab:b0:2d:f8:52:ab:65:60:1d:bc:ae:e6:7d:60:
                    d1:aa:f3:67:d2:20:0a:6a:99:43:28:2c:08:3b:42:
                    3c:53:16:40:ba:5d:f3:6f:20:04:74:99:6a:a2:61:
                    26:0f:ee:1a:e0:ed:b5:36:18:ac:c0:b6:a1:57:41:
                    e5:0e:93:f1:34:ff:8f:22:41:a2:fb:24:6d:ea:d9:
                    37:94:60:91:82:6a:d3:a3:7f:89:a6:d0:46:fc:df:
                    59:29:3c:e3:56:c3:30:a8:e5:42:13:b4:85:b2:b6:
                    a9:6c:fe:35:87:f7:32:7d:c1:e6:f0:c0:02:ba:24:
                    a7:7b:8a:91:b3:69:9c:cd:28:fd:14:e0:f1:a9:e4:
                    43:81:c8:f5:00:64:b9:23:ac:a1:57:81:a6:e3:e6:
                    1a:10:47:5a:34:d8:37:36:6d:74:92:25:c0:d5:c8:
                    bf:33:e1:cc:25:fe:a9:95:5e:e6:d8:55:17:37:d7:
                    1f:df:e6:fc:f3:e8:0a:e6:eb:5e:3f:c5:0f:e3:27:
                    cc:bf:e1:cf:f6:ab:07:57:3e:67:bd:46:c4:4a:08:
                    37:05:ca:5c:fd:3c:99:95:00:a9:9c:bc:9f:47:c0:
                    1a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D0:51:F8:39:46:41:DA:47:E7:16:56:05:61:07:03:72:0D:06:4B
            X509v3 Authority Key Identifier:
                keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c5:b0:4e:ab:ef:42:8d:3a:f0:17:4f:9c:d2:c3:f8:bc:cb:
         47:2a:5c:85:80:14:03:8a:a4:d9:97:6c:f0:14:eb:c5:46:16:
         03:6c:f2:1c:c3:f2:36:54:42:99:8f:06:c5:b4:44:cc:1f:fd:
         ac:51:8c:ce:ff:95:de:ec:e5:33:f8:24:d4:f5:f5:2b:cf:f6:
         f4:49:3e:29:8f:3b:64:83:af:22:9f:74:42:4a:ba:de:91:01:
         46:6d:41:5b:e3:66:42:2d:f2:97:9d:78:b1:13:6f:91:0a:f4:
         39:40:66:5f:e8:e7:b8:0a:8d:49:42:1d:fc:a0:1c:a9:99:55:
         f6:e3:17:c2:0f:c0:96:87:e2:16:9a:9a:a4:e2:20:31:ee:ea:
         38:c7:7e:be:20:c6:8e:7d:99:de:16:d8:b9:da:8d:a6:55:b5:
         f2:67:ee:de:ed:ad:c8:e0:79:d2:5a:7b:fd:7c:ab:c6:3f:13:
         14:50:cb:91:54:68:39:f6:7d:c3:5e:b1:c9:ff:3e:61:92:2d:
         b6:68:36:2f:0a:41:61:20:4d:86:c2:ff:9e:15:2e:dc:fd:13:
         88:a6:6d:6b:84:a0:f2:89:a1:5d:57:fb:95:41:da:94:97:f8:
         13:7b:7b:9c:fc:0b:e3:40:e8:6f:af:22:ae:b4:02:cb:0d:a2:
         68:a5:15:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:10:17 2026 by rpki-client