Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
File:                     9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft (raw, json)
Hash identifier:          fFVBiHjn5lpwboYFBhJi9Y+cqcs0gk7uao0N7s/+EnM=
Subject key identifier:   6B:17:42:85:AF:2F:0A:F3:18:38:C6:29:C8:AA:8D:A7:B5:95:4D:E1
Authority key identifier: F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
Certificate issuer:       /CN=f4e1805f847e00afd63179e4c252a367e945b26a
Certificate serial:       019EBE48278301C384895A9AE8E3C3E4D221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
Manifest number:          1856
Signing time:             Sat 13 Jun 2026 00:01:00 +0000
Manifest this update:     Sat 13 Jun 2026 00:01:00 +0000
Manifest next update:     Sun 14 Jun 2026 00:01:00 +0000
Files and hashes:         1: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl (hash: cJnh+H8u4M0NQK/vuhJ4Df6Y6FSYLpPUxhzUXhKbpsc=)
                          2: arliBhhCazfqYB3QIekl14-Z-Tc.roa (hash: Yk7QGRYvHZ4mOm/M0+qWtbOZ3XSsCNWJWnDjcQIrUQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:27:83:01:c3:84:89:5a:9a:e8:e3:c3:e4:d2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e1805f847e00afd63179e4c252a367e945b26a
        Validity
            Not Before: Jun 13 00:01:00 2026 GMT
            Not After : Jun 14 00:01:00 2026 GMT
        Subject: CN=6b174285af2f0af31838c629c8aa8da7b5954de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:a4:0e:98:35:43:2a:b3:a5:9d:7d:21:2f:
                    03:b7:70:ec:c0:4a:49:04:c3:ba:37:7b:f4:53:b5:
                    d4:c6:3a:b6:bf:87:af:f3:9f:17:5d:a0:18:96:cd:
                    bb:93:0c:ff:70:34:bb:f0:05:6c:e5:31:13:39:23:
                    c6:92:6c:01:69:1d:57:1a:e1:cb:cc:d2:3a:58:80:
                    7d:44:31:b4:b5:a7:bd:d5:f3:5a:a2:93:da:f6:61:
                    80:82:1c:aa:58:75:c5:27:3f:aa:d5:0a:9b:92:8e:
                    b3:eb:a3:e0:f9:08:9b:e0:78:c6:63:44:f7:36:70:
                    77:a4:c3:1e:b0:de:7e:0b:f1:6f:03:a5:df:ea:20:
                    a9:8e:3d:09:43:92:28:0c:12:9a:0b:e1:a6:48:d2:
                    2c:4b:a2:b2:8a:db:20:79:1d:6d:ba:09:73:70:ea:
                    8d:62:49:72:e6:90:10:36:2a:f9:35:b9:45:d9:7c:
                    5c:97:1f:55:a8:cd:fe:f9:5a:d0:3a:67:28:41:1f:
                    e6:c4:26:ef:97:98:b4:63:6d:de:55:da:6e:71:6e:
                    14:f7:85:b5:b3:a5:89:f2:7b:a0:7d:1c:77:14:71:
                    48:27:61:b5:29:38:91:17:41:da:59:1b:d1:5f:08:
                    58:81:c4:b2:56:68:39:8d:f4:fb:5a:29:db:3c:3a:
                    14:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:17:42:85:AF:2F:0A:F3:18:38:C6:29:C8:AA:8D:A7:B5:95:4D:E1
            X509v3 Authority Key Identifier:
                keyid:F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:40:09:59:74:b5:f5:40:e4:ab:a7:58:30:de:99:11:24:b2:
         2d:13:ee:49:76:e2:22:b2:9d:67:0b:55:18:bb:14:36:04:de:
         ec:7d:23:e0:ea:72:9c:cc:3f:e4:c4:be:b2:2e:b2:f0:d3:57:
         94:27:f1:91:f4:4f:26:81:2f:02:29:90:e4:0f:5f:e7:88:2d:
         4d:f1:5c:d9:af:a5:88:22:a7:7a:ab:fa:cf:cb:08:93:25:f9:
         3c:ed:74:d0:df:c7:42:6e:cd:68:69:7b:a8:b7:67:ca:36:e2:
         8c:e4:72:d9:6c:cb:d7:66:7f:4d:7a:f4:bd:31:ab:3b:71:3c:
         a2:b9:2d:9e:35:ed:c5:4e:77:0a:09:5b:5e:c1:b9:77:82:49:
         5b:f7:a3:87:07:e0:42:80:b2:2c:56:4b:68:19:d9:23:2a:1b:
         d8:b5:3a:f5:a5:99:e8:14:51:7c:78:d4:dd:6e:fc:21:4b:33:
         92:e7:f9:40:9c:0e:8e:f2:4a:c3:5c:a1:c2:7d:90:4e:64:df:
         4a:b1:7a:93:08:2a:64:85:42:fb:55:91:1c:58:8b:a5:b4:24:
         2a:10:f4:1e:73:f1:81:d8:47:39:7f:84:43:6d:81:77:5b:d0:
         45:7f:f1:30:ea:cb:b6:0d:93:9a:51:72:8f:0b:0d:1d:8e:60:
         21:eb:74:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:32:27 2026 by rpki-client