Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
File:                     O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft (raw, json)
Hash identifier:          h438ja3KAenya8PfWKMVDFLqlOhnxFb1B9Q6BjW5L0E=
Subject key identifier:   77:26:8E:FF:47:8F:41:8B:73:D4:93:EE:86:12:33:D9:DF:EF:77:C7
Authority key identifier: 3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
Certificate issuer:       /CN=3b53867284132eeccd56e6b155cf7f627d264f40
Certificate serial:       019FAB63918C11963381749A4E767CBDBD59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
Manifest number:          01DB
Signing time:             Wed 29 Jul 2026 01:00:56 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:56 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:56 +0000
Files and hashes:         1: 3DUSLYibsJXd_Fv_mFQGMWyoD3E.asa (hash: 217ApHrz+ZFZBxQTuwBPGHegzD2Mli8dYOKOyw3Mk20=)
                          2: 8a6S-UC-PzVNfuKH4VEcSEi_3xs.roa (hash: ggJLncnSKUJfbzTsD0cgxExXtCcR+Y6TnGQ+ZK/8VVg=)
                          3: O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl (hash: pEPKblpAMRdL1/8b5TYhFk8P/N5Scb+/tolvMFzP3LE=)
                          4: Zod6GEOcMGfwO02xipiRUjS5UHo.roa (hash: pJwxMJ8KyAb6ixNPNoNOHcynw+GKshz9SMdlh6JQuFk=)
                          5: bF4AIoJbZesIwX86iDSdyGssluQ.roa (hash: mpdkvKaWVXrslEPSu3+IjnM2tbW2AQwtygmvrWacIvU=)
                          6: hSst--j5VCqGQF-z8DIf_npvY-Y.roa (hash: BqwaIWDOiFPECUGgrwgZoSY04WbWfryAxU75uG2cx4A=)
                          7: y-sWnGP-0hQwy4lYSwzVC6rKYt0.asa (hash: 9jRAa+Up2q3z80Ly9J5h5nlaT4zsmd3d7aVIdsnLuHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:91:8c:11:96:33:81:74:9a:4e:76:7c:bd:bd:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b53867284132eeccd56e6b155cf7f627d264f40
        Validity
            Not Before: Jul 29 01:00:56 2026 GMT
            Not After : Jul 30 01:00:56 2026 GMT
        Subject: CN=77268eff478f418b73d493ee861233d9dfef77c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f2:4f:dd:59:07:f4:7a:23:f6:69:3a:bc:dd:
                    af:c9:e6:fe:4b:87:b4:d9:45:9b:fe:9e:04:17:ae:
                    b1:04:75:41:50:e8:03:4c:a5:0a:29:eb:86:e7:0d:
                    fe:77:a7:92:d8:e9:49:2b:5f:e7:63:7f:24:2b:93:
                    a6:43:06:96:e4:0b:79:15:f0:d5:2d:7f:b7:6a:e6:
                    02:c8:ba:b3:37:25:9d:2b:33:8d:bc:3b:1f:96:01:
                    6a:80:d9:23:e9:3f:db:ed:e1:1b:a8:43:c7:0a:8d:
                    f6:79:bd:4e:cd:c1:30:22:59:bd:f9:74:4f:89:ed:
                    67:c3:24:62:a2:4d:2e:da:cf:08:5f:fd:74:de:b6:
                    0e:d4:d0:6a:4a:89:bb:83:31:8f:af:11:f0:ca:ec:
                    e1:65:b0:e9:70:4e:ff:3f:cd:f7:bb:77:17:43:49:
                    1b:97:af:4b:39:2b:47:31:f1:f9:ac:ca:a5:39:93:
                    ca:95:ce:96:09:4e:8b:17:ce:4f:ef:86:53:61:42:
                    31:93:d1:9a:f4:1b:5f:e4:ec:32:9a:80:b9:1f:a3:
                    f9:12:79:06:42:fe:a8:f0:56:51:5c:64:f8:ef:d7:
                    9e:7c:8e:af:4f:4d:56:43:12:25:a4:e7:aa:0a:43:
                    3c:45:21:b4:76:d9:27:0f:ac:47:ec:8d:fd:9d:e7:
                    b2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:26:8E:FF:47:8F:41:8B:73:D4:93:EE:86:12:33:D9:DF:EF:77:C7
            X509v3 Authority Key Identifier:
                keyid:3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:7c:b7:dc:d2:bd:c9:14:e2:e3:6e:bd:ee:bd:d5:af:0f:44:
         e3:4e:2e:a0:67:9d:7d:b6:44:09:3e:75:5b:14:61:42:e6:39:
         86:a0:c7:ef:c2:b6:39:86:78:cd:f8:67:12:0f:10:24:19:99:
         c5:13:25:2b:e2:12:fc:3e:21:f9:06:a7:f3:bb:39:da:4d:ce:
         a4:00:da:78:77:e6:8d:da:34:75:5b:8e:e5:99:57:04:8f:2c:
         6a:f0:af:69:0e:43:05:c9:de:d5:56:93:88:74:fe:07:72:11:
         f1:42:fb:b1:87:70:0d:c3:29:03:13:e7:43:d2:68:ba:b0:93:
         fe:7a:32:a8:ce:72:5f:bb:f0:24:d0:00:a2:75:3a:9c:90:43:
         0e:7d:6c:0f:54:ff:3b:30:82:c0:7c:50:fb:be:5d:47:95:32:
         c0:a9:1b:00:32:56:d6:e6:ba:5e:0a:85:e1:ae:f7:6e:5a:9f:
         8e:81:1e:ee:cc:0b:a0:9c:5f:8e:58:48:40:87:ef:09:4d:1b:
         06:66:f3:8f:05:1f:ce:6d:d4:1f:dc:26:dd:1d:9d:2a:2e:f3:
         f4:d4:fa:57:dc:b2:7a:06:af:59:b7:d3:7a:42:e8:ec:27:38:
         9b:2e:01:e7:7c:ee:b1:84:d9:96:a6:f5:de:91:3f:0a:19:e5:
         19:76:89:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:19:28 2026 by rpki-client