Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
File:                     oeqN4xzspVgDzzrxTUpyea6ERtA.mft (raw, json)
Hash identifier:          925iVh3+iS9jOzdCckKUTiq/72cFM2HLgIesq+9BKuA=
Subject key identifier:   AD:F7:B1:81:CD:A2:94:51:CA:2D:8A:95:E5:21:CF:4B:B4:4F:32:05
Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
Certificate issuer:       /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Certificate serial:       019EC25BEC00B628D552F6EA4938B48B04A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
Manifest number:          1627
Signing time:             Sat 13 Jun 2026 19:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:04 +0000
Files and hashes:         1: 0BJKSsJW7qiVAHXCjZXJq3R-Kpk.roa (hash: r7csimlTjHrK6Lrz57cYuylUp8cy5+rV8BLjohqs/qU=)
                          2: oeqN4xzspVgDzzrxTUpyea6ERtA.crl (hash: fl/vZ5S0vpODNiy/zMwP3FIFecM8dzcvduj00aeVFds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:ec:00:b6:28:d5:52:f6:ea:49:38:b4:8b:04:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
        Validity
            Not Before: Jun 13 19:01:04 2026 GMT
            Not After : Jun 14 19:01:04 2026 GMT
        Subject: CN=adf7b181cda29451ca2d8a95e521cf4bb44f3205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:10:de:50:f9:2e:9c:02:c1:6a:55:94:49:
                    53:76:e8:7f:40:16:76:44:94:72:73:0d:a7:ca:45:
                    44:7b:a8:c1:c0:ae:59:0c:47:07:01:b7:23:75:47:
                    0c:6e:c5:af:cd:08:f2:70:fc:33:65:7f:57:4a:c1:
                    08:e7:cb:cc:ca:a3:81:a2:ae:06:7d:e8:db:69:3a:
                    db:d7:50:88:0c:9c:10:23:e5:f0:44:34:e1:43:1b:
                    20:f3:7e:6c:c2:41:6c:7d:57:bb:8e:bf:88:02:42:
                    ec:98:87:7e:7d:1a:aa:d0:1f:53:e1:ef:ef:dd:21:
                    49:5b:5d:ea:67:c1:16:c9:bd:31:42:c1:b0:9b:a7:
                    c7:f4:e1:41:43:8d:31:40:5d:d5:02:ff:ed:c9:2f:
                    33:19:db:0e:9d:d6:0f:9d:c8:3d:a5:b9:e3:54:b9:
                    38:21:73:81:15:09:fa:69:4e:0a:4a:64:fa:7c:55:
                    fc:7a:4e:1b:b5:87:79:75:d7:2d:5b:06:c8:d5:7f:
                    61:e7:37:c3:1b:12:3d:58:29:1c:6f:75:24:95:3f:
                    b8:c6:79:e0:a6:d9:69:62:2b:5a:be:d6:7a:39:88:
                    d3:e8:8f:6d:63:14:e4:fc:2f:43:a3:4f:16:fa:e5:
                    08:18:30:fe:9e:77:a2:56:02:66:09:3b:17:4b:2f:
                    ae:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F7:B1:81:CD:A2:94:51:CA:2D:8A:95:E5:21:CF:4B:B4:4F:32:05
            X509v3 Authority Key Identifier:
                keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:6c:4c:6b:6f:2e:a1:fd:4d:5a:7e:3f:dd:4f:50:ca:62:e7:
         2c:8b:77:1e:14:2f:e4:6d:c2:57:5f:23:43:e0:03:bd:f7:f1:
         0f:48:04:5d:ca:cf:78:5f:e2:3c:91:b1:d9:62:86:5d:89:7e:
         7c:74:72:6c:cb:7c:ab:86:56:58:31:01:ec:37:8e:fd:b1:8a:
         a6:1f:e1:ff:bb:f3:20:b0:b8:76:ee:c4:46:4f:e5:5d:c4:58:
         62:1b:ab:e9:da:80:ca:c4:b1:e1:f0:53:ac:4a:c3:be:c3:d9:
         56:c9:41:3e:d5:da:b2:ff:f1:35:cc:a1:be:1a:e3:26:14:2c:
         e3:cf:58:bc:50:44:39:2e:77:b4:c0:94:8a:86:68:cf:29:7d:
         a7:91:16:13:ce:c7:96:3e:91:9a:19:0b:71:4f:ab:ad:74:71:
         36:3f:c6:54:eb:0d:0f:37:bb:1d:66:24:00:77:c8:b8:86:79:
         4f:eb:97:6d:49:85:16:42:9f:b6:f8:5b:db:51:48:5c:54:b7:
         17:21:e5:b6:38:77:87:d3:19:f0:e7:06:a4:cf:4b:16:1d:2f:
         bf:1b:32:a3:c8:68:c4:5b:ec:b5:34:9b:c5:e1:c6:a0:ae:32:
         d4:cd:29:9d:e6:c4:35:35:3a:92:06:14:20:84:8c:26:2e:d0:
         33:43:f1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:44:59 2026 by rpki-client