Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
File:                     oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft (raw, json)
Hash identifier:          febrhOrXbeaOE6EiXojCucIG1a4Crhuz8ryn0FhVJww=
Subject key identifier:   20:DE:10:D3:CD:BD:B9:43:EF:41:53:A3:92:22:92:DA:57:86:0B:FE
Authority key identifier: A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46
Certificate issuer:       /CN=a122d6d21bd04c46224653a49be029e3c024b846
Certificate serial:       019EBE7F6DDA5EE0AE3CD8AB7FF809CF88F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
Manifest number:          0560
Signing time:             Sat 13 Jun 2026 01:01:22 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:22 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:22 +0000
Files and hashes:         1: 3VvlIVLD8nV-Kprr00nGUqwlEG0.roa (hash: ueTtVv9Izvar/a32kf0F4hmGSZUFBIbcRRQsZSddarI=)
                          2: 7HJItND-ZHUyWIc0zlIoIbcu0kU.roa (hash: 9Bz34LYfCAabYfpSmfTeNq9WvdNCYgrnyawzxf6Rfac=)
                          3: cBS-3HpC_a4rHcbd8xWkU8ryqAo.roa (hash: BFwk1ZVFsJ92QmF6WqyS8lrea+ZBvLbcAz/u0+3fQLc=)
                          4: oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl (hash: 7mswrOzTKqtw5zIPJXOk8t40aaJgmumXYbsRLDer0OY=)
                          5: wpoL_iSupuiaeUF0rSK5oTJDYgk.roa (hash: tmpMUF0ltyMmfrFAPsjl7BnWO5nUIh5IyWezk54S+Pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:6d:da:5e:e0:ae:3c:d8:ab:7f:f8:09:cf:88:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a122d6d21bd04c46224653a49be029e3c024b846
        Validity
            Not Before: Jun 13 01:01:22 2026 GMT
            Not After : Jun 14 01:01:22 2026 GMT
        Subject: CN=20de10d3cdbdb943ef4153a3922292da57860bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3e:84:a4:0f:3b:7d:fd:a9:43:68:a2:28:92:
                    44:8c:4c:aa:66:a4:8a:fe:32:78:80:74:f9:6a:2c:
                    26:ec:e6:ec:04:ee:b8:cd:dd:18:09:94:c0:15:f4:
                    0c:0e:73:cd:e0:8f:3f:80:af:dc:56:8b:c1:4d:a1:
                    9e:e2:4e:1f:e0:84:d5:04:a1:43:9e:ca:fc:89:24:
                    ee:1d:36:22:77:2a:86:06:5a:d1:4e:bd:6a:87:18:
                    a1:7a:6f:19:56:70:4a:28:f6:39:25:e9:94:9f:30:
                    8c:a4:60:9d:4b:6f:5d:d4:52:14:db:76:4b:6d:14:
                    39:0b:e2:5b:2b:f5:09:31:d8:ee:52:82:d5:80:b1:
                    6d:56:f4:dd:c0:a4:2a:53:60:0c:e3:ad:a9:6f:42:
                    00:6d:06:a1:1a:d4:e0:23:a1:b3:72:fb:9e:b9:c5:
                    a0:ba:8b:08:6b:25:79:12:51:91:09:f9:47:fc:ea:
                    93:1c:d2:b7:e9:d8:18:36:f9:c7:25:31:8f:bc:2e:
                    8e:e9:af:a4:be:62:0b:1f:46:64:93:28:c7:78:31:
                    ea:ce:1b:eb:a6:06:f6:98:92:ae:e6:67:b2:00:41:
                    2e:8f:60:74:38:1c:2c:2e:db:43:0e:f3:42:5b:7c:
                    92:64:8c:ce:8b:ee:3a:d3:78:e0:01:e1:29:8c:f1:
                    b6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DE:10:D3:CD:BD:B9:43:EF:41:53:A3:92:22:92:DA:57:86:0B:FE
            X509v3 Authority Key Identifier:
                keyid:A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:84:50:95:de:e9:ba:39:dd:e3:ec:62:6b:b0:2f:b2:04:64:
         4b:35:58:04:c0:bf:a6:da:8a:7b:d9:52:d4:74:1f:f4:aa:d7:
         7b:1d:fd:48:da:39:76:e1:81:cb:cd:43:27:88:4c:b3:30:09:
         8c:57:19:78:d5:a6:87:ac:28:43:f6:06:97:12:93:00:d9:df:
         75:ad:8d:85:24:bb:0c:78:46:5f:32:90:5a:dc:af:22:56:a9:
         ec:1d:ad:15:f4:f0:82:23:53:5f:d6:f5:13:f1:13:0c:09:ad:
         9c:8c:b6:e3:de:e6:7d:b9:e8:e2:e1:41:ed:fd:b6:0f:b8:9b:
         7c:0e:35:17:f2:94:07:9f:f8:9e:ba:b1:67:4c:a6:66:ad:10:
         02:ef:98:76:d8:33:6c:bd:3f:0b:14:2f:64:46:a6:53:f7:8b:
         db:4f:e9:ef:bf:ef:b8:c0:94:b1:5b:43:34:fd:1c:ff:12:2e:
         11:3c:2f:fa:8a:60:9d:59:19:ae:f4:cc:eb:4f:ea:63:bd:57:
         cd:30:0d:d1:4d:86:92:20:a4:4e:78:17:05:9b:3e:88:92:fc:
         9a:53:ae:9a:91:05:f7:cd:92:cc:7c:b1:51:6e:ff:b8:9f:93:
         37:63:2a:7f:d3:ac:f5:1c:33:7a:71:f4:2a:a8:62:94:a0:43:
         f5:a2:10:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:18:20 2026 by rpki-client