Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
File:                     OEgrEyC5gPRtbkBP59WL2xHVD9M.mft (raw, json)
Hash identifier:          HSmXkoOd7cqdl3CSX25vAZepjTD9ffkDpVwm2edOnJA=
Subject key identifier:   9F:B0:91:55:13:E3:11:A6:D5:BD:2D:4E:17:DF:A8:6A:5C:F5:5F:00
Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
Certificate issuer:       /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Certificate serial:       019EC1EE22824A490BCFFD9B890EE0BBC455
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 17:01:09 +0000
Manifest this update:     Sat 13 Jun 2026 17:01:09 +0000
Manifest next update:     Sun 14 Jun 2026 17:01:09 +0000
Files and hashes:         1: OEgrEyC5gPRtbkBP59WL2xHVD9M.crl (hash: fbDJjIwMl48nwmq4KJnPjtFB8hTUKmdJ7m5Qr0Obmdo=)
                          2: XY5E_RelyGQ_x471R3yDmTVoDTk.roa (hash: eROWL67g5W2cGW9pnAdECfpL0HCLybLp8h6TDlEvGJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ee:22:82:4a:49:0b:cf:fd:9b:89:0e:e0:bb:c4:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
        Validity
            Not Before: Jun 13 17:01:09 2026 GMT
            Not After : Jun 14 17:01:09 2026 GMT
        Subject: CN=9fb0915513e311a6d5bd2d4e17dfa86a5cf55f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:83:7f:71:aa:65:e2:a2:7d:b2:c3:51:b8:08:
                    0e:9f:c0:13:be:f9:03:b7:dd:95:51:99:b4:dc:a1:
                    9d:ad:82:48:fc:cc:24:61:3b:f1:42:1a:7d:b8:3f:
                    ee:43:8e:05:1c:01:1c:32:50:5a:41:ff:99:1b:be:
                    9d:8f:d5:ef:eb:2e:69:2a:32:55:af:b3:c5:95:94:
                    9e:5e:40:5e:89:53:bd:89:ea:60:4b:72:e4:63:50:
                    cd:55:14:21:d0:4a:34:b2:8a:34:56:0b:e6:61:9c:
                    c7:de:73:3b:f9:c1:e8:7d:d3:f5:52:b9:dc:70:aa:
                    b9:88:4f:e3:89:92:ca:81:2c:66:fc:f7:8a:a9:4f:
                    61:49:25:96:b8:a7:18:a6:67:56:8f:bf:46:45:ed:
                    72:9d:e3:9a:66:72:ce:c2:e2:be:81:ef:83:94:e2:
                    22:98:c5:11:f3:68:ae:c5:f4:20:e3:91:85:b1:1d:
                    45:32:ea:d8:b4:e1:4a:9e:69:20:25:13:28:c5:e8:
                    48:e8:89:3f:67:4c:53:37:4b:e8:60:d6:df:71:de:
                    4f:a3:87:fb:21:3c:d6:98:d2:34:68:61:fb:c6:a6:
                    1f:27:dd:47:7b:5b:b0:3e:09:6c:15:4a:e0:9f:28:
                    e4:f1:56:32:3c:21:a9:f9:5b:cd:14:1f:c4:b9:96:
                    47:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B0:91:55:13:E3:11:A6:D5:BD:2D:4E:17:DF:A8:6A:5C:F5:5F:00
            X509v3 Authority Key Identifier:
                keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e4:3a:5a:f1:5a:95:de:29:4d:62:aa:ec:d3:9b:a4:a2:ed:
         24:81:a1:b2:46:05:c6:88:6c:16:7c:5e:b1:62:3c:fb:05:1e:
         60:1b:67:3b:e7:a3:e6:54:07:39:16:6a:79:e4:68:26:4c:40:
         0a:f5:43:71:b3:a2:a5:27:dc:a3:ae:9c:bc:08:99:2e:c2:ba:
         92:03:15:89:25:13:ee:ef:c7:e8:62:a5:02:d6:0d:5a:54:b8:
         04:93:88:65:87:b7:48:78:8e:aa:c4:a3:3d:fd:13:f2:82:c2:
         4f:0b:ef:f8:3d:c1:94:e2:b3:68:37:e7:fb:fc:6f:9a:2b:8f:
         67:8a:b3:89:5c:dc:94:75:34:dc:77:e8:15:38:6b:63:b9:87:
         e9:6a:ec:81:f6:4d:ea:3b:83:8d:95:0e:07:a3:85:38:72:95:
         59:af:59:26:d0:f7:9e:c8:27:ee:a4:f7:4a:02:25:82:63:1d:
         7f:7f:a2:fb:13:5c:b7:65:1d:f1:57:88:50:ef:d1:30:95:13:
         56:79:1e:0d:91:d0:3c:ee:1d:53:2e:19:47:70:b7:88:5a:54:
         30:00:6e:f4:cd:b3:8d:4c:52:54:90:90:85:93:9d:aa:d0:54:
         69:54:57:da:56:4c:20:91:5b:ce:1a:84:7c:d2:7c:7a:2c:46:
         ce:0a:8a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:32:52 2026 by rpki-client