Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
File:                     OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft (raw, json)
Hash identifier:          xsHL0kt5Kg2qtxqQNeVbfcFvDKisktYoiX0u09vY8OA=
Subject key identifier:   78:97:C3:37:DB:02:83:1F:33:7B:E5:42:A3:C3:1E:42:D3:B6:A3:F6
Authority key identifier: 39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
Certificate issuer:       /CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Certificate serial:       019FACE437EC378C8D76F10D8188C3AAD09B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
Manifest number:          104F
Signing time:             Wed 29 Jul 2026 08:01:05 +0000
Manifest this update:     Wed 29 Jul 2026 08:01:05 +0000
Manifest next update:     Thu 30 Jul 2026 08:01:05 +0000
Files and hashes:         1: OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl (hash: 9QqCCgb8FbJVoSHwOjntz6NK07SId7RhWyh/t70KZzI=)
                          2: U_9ae0dR5bvWF_m8_-n5IQjoXho.roa (hash: YhkIXrg11/s9MnoBurHE21hW+DopIbiFzMqganoNxbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e4:37:ec:37:8c:8d:76:f1:0d:81:88:c3:aa:d0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391e994a95012d92fb51a28c8a650ed9f97737b8
        Validity
            Not Before: Jul 29 08:01:05 2026 GMT
            Not After : Jul 30 08:01:05 2026 GMT
        Subject: CN=7897c337db02831f337be542a3c31e42d3b6a3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:46:2f:a1:32:53:c9:41:94:67:d9:d4:a4:83:
                    cc:e0:a8:f8:73:ac:69:47:df:66:2a:0c:ec:9d:da:
                    cc:14:23:b8:44:ae:26:53:9e:02:31:bf:85:b9:84:
                    9a:46:0f:f8:90:e0:81:9b:72:1d:7a:9c:31:4d:d7:
                    17:4f:6b:cf:d0:43:f9:9c:54:74:5e:3a:d4:27:26:
                    5a:8b:8f:cd:0b:11:09:ac:52:00:ef:0b:24:75:81:
                    dd:3c:8e:39:81:de:cb:64:9f:9d:8b:68:3b:d8:ac:
                    e0:af:9b:ea:a5:44:ca:37:ec:45:a8:32:ad:d2:12:
                    d1:a3:aa:ef:0b:6f:cb:8c:60:3a:d6:9c:20:3b:57:
                    ba:7e:3a:48:b7:3b:de:d4:10:66:2c:ca:8e:60:8e:
                    16:5f:59:68:df:dd:f9:cb:cc:a6:f6:70:4c:e9:38:
                    a4:36:3c:0c:84:27:ab:be:26:b5:48:eb:77:49:08:
                    2a:b9:8a:bc:21:05:d5:2b:83:77:cb:5e:bf:21:40:
                    19:b1:f9:d1:30:ee:8c:b2:f3:09:a0:ca:3a:3b:ac:
                    d0:55:cf:a2:94:58:c7:f4:0f:9e:3c:46:53:2c:87:
                    8e:13:c8:8c:80:0c:f0:76:2c:8e:2c:64:8f:c1:90:
                    69:18:40:b6:60:7d:53:13:a7:af:65:33:9c:89:72:
                    21:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:97:C3:37:DB:02:83:1F:33:7B:E5:42:A3:C3:1E:42:D3:B6:A3:F6
            X509v3 Authority Key Identifier:
                keyid:39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:12:13:37:c8:cc:48:2f:07:96:1a:c4:13:bf:a3:c4:fd:80:
         2a:1a:ab:8e:9c:bb:45:9a:30:be:e6:4e:97:3f:fb:fa:fb:12:
         34:e7:b5:30:e8:9d:08:2e:70:c5:1e:87:dd:3e:54:3a:9e:66:
         80:44:05:3f:ca:9e:fe:61:16:0b:34:86:bf:da:e0:ca:5a:d1:
         3a:fb:eb:d3:a6:a0:62:01:16:20:1a:01:13:a8:b1:38:43:f6:
         5a:76:67:b0:16:50:40:db:27:d7:68:f3:e8:f7:a5:f7:c4:63:
         7e:96:9f:ff:99:38:66:aa:d7:80:05:0d:5f:7d:ca:df:3c:70:
         1e:fd:ca:17:16:5d:f7:40:2c:50:80:cb:ba:ea:5e:3a:f6:7a:
         e5:72:71:74:a6:ed:3a:7d:4c:f7:b8:c1:ac:88:9c:5f:bf:96:
         8a:2d:24:00:61:c8:1c:90:9b:cb:9c:72:a4:3e:ac:45:c5:a6:
         65:99:d7:be:7b:7b:ca:21:eb:21:fb:55:df:63:b5:2a:56:bb:
         86:0b:51:ca:eb:49:f4:d1:a7:89:2d:02:a6:34:48:53:ec:5b:
         55:f6:9b:62:88:24:89:be:db:80:06:58:23:cf:1f:a1:6f:d4:
         d8:f1:d9:1b:24:9a:90:c8:a3:33:1d:7e:ec:95:e7:ed:2b:25:
         6c:3e:fa:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:58:59 2026 by rpki-client