Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File:                     OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier:          W6foI865A+wPhvJOs3HWdgWilvKJ0ox+7BvRkjefzJ4=
Subject key identifier:   D7:88:48:BD:3D:F8:03:25:19:B4:E2:AC:02:4B:09:CF:46:AC:8C:BF
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer:       /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial:       019EBF234544B766CC7781EB3A3F31D8CE50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number:          1969
Signing time:             Sat 13 Jun 2026 04:00:20 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:20 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:20 +0000
Files and hashes:         1: 4F0qq7jfLgA4RD6gA7xmoqFDdAQ.roa (hash: 9eu4ch/L8yFJeyFrLuDangAXcD7SJ7FBYBZ7Pt6AAHE=)
                          2: 99glb-3Nuv_a0drFASic1bJFZuM.roa (hash: EO6/AN96gR8JorI8GqJHXMAny+YSIF2zqACbqvRTJsE=)
                          3: IJPq1vTmby5eiLb59FjMHsI8kO8.roa (hash: TSRPeSrUsn2p8OKZKn5eOe4aj6tQf87gvJ5n6A763wg=)
                          4: IcJ3NkApy3ZuH6zT14y3NRctQTs.roa (hash: YF8uwCi6VEOuzkntI7vmvok4914x30Fr6OxRnIaMfhE=)
                          5: JPCCmHU8ahX1DiUwh62NrS-GovE.roa (hash: DSN9B+i7KCMrZdm0LMRFnAUtEcKLHOT2ja1tLaLHNkQ=)
                          6: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: 0iEUdYnDX35dT4xSVC04YfRx01/m6UmJWsMITppei+0=)
                          7: OFEBywh1Kwn1I5HYsaeGw4Ma2k4.roa (hash: RYqKKTPbXc/XKGK59E0CVeAp+/m79LKM8knlKmtIDxU=)
                          8: T5yYywsjzls8YnVZdYQ-a-4k-Ko.roa (hash: krQ0smxzDZda7B7KpUT9hBrYxqmFAcCTTFjGI8ObPzU=)
                          9: sDR3Qo8DCVWVTmCrOSCeC4FMQOw.roa (hash: AssTAkGRC23ZzSmSnnu6XD2o7Ux1qMOvYA5IiLgtAlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:45:44:b7:66:cc:77:81:eb:3a:3f:31:d8:ce:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
        Validity
            Not Before: Jun 13 04:00:20 2026 GMT
            Not After : Jun 14 04:00:20 2026 GMT
        Subject: CN=d78848bd3df8032519b4e2ac024b09cf46ac8cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:64:19:5f:d5:01:f5:b4:42:93:a8:58:fa:17:
                    e3:36:66:8e:1d:d5:92:d4:a5:6a:fd:85:00:01:d1:
                    0f:34:d5:7c:f3:71:98:49:b0:6c:a6:0c:66:5f:5e:
                    25:59:18:e5:93:a0:cc:2e:50:ad:6c:c8:66:c9:1b:
                    06:7a:5f:69:d1:73:86:5b:4b:b8:33:62:da:95:62:
                    ec:3f:38:bc:48:2c:10:70:34:48:0d:28:39:79:2b:
                    e8:79:58:83:56:24:69:6e:d3:84:9b:59:a5:ab:90:
                    9c:38:a9:e5:8f:3a:b4:68:9e:f0:a1:fc:f1:95:4f:
                    75:2c:fa:63:59:22:04:0a:ba:4d:7e:06:13:86:08:
                    ea:52:f5:5d:32:a9:2d:32:5e:5a:72:55:e0:e8:2b:
                    e4:4a:50:47:3f:cf:7e:08:ff:8b:7b:37:b1:06:e3:
                    b0:db:5b:93:f4:74:6e:f4:0d:9b:db:e8:30:ee:1f:
                    d3:b8:2f:7e:3e:d4:80:99:5b:63:71:df:99:55:ff:
                    88:33:54:49:5b:4b:e9:46:61:0d:65:09:31:75:db:
                    58:f7:d4:f2:bd:ae:fb:b4:6d:f3:54:a1:40:64:96:
                    7e:66:62:08:7c:13:91:55:ab:96:bb:cb:7b:98:eb:
                    d5:62:78:de:2d:62:c7:82:63:ec:95:c8:49:51:ad:
                    67:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:88:48:BD:3D:F8:03:25:19:B4:E2:AC:02:4B:09:CF:46:AC:8C:BF
            X509v3 Authority Key Identifier:
                keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b4:78:99:51:3a:cb:0d:7f:48:2a:c6:ca:25:a6:e9:fd:d4:
         31:49:42:b2:b6:db:51:a8:01:46:2f:d0:2c:e2:51:ea:74:29:
         d7:a1:c3:6a:64:fc:28:ad:56:98:1a:d2:e9:a6:71:fd:b6:26:
         f1:d4:b1:42:1b:ff:d3:dc:ba:bf:81:33:61:bd:ff:b1:02:6e:
         10:6d:e5:30:76:54:4d:19:a3:56:fa:81:6c:12:dc:2c:dd:5f:
         d8:06:99:f2:3c:cb:cb:b1:46:d4:a4:6a:42:8a:b1:14:0f:73:
         3e:8d:dc:e9:c5:1f:31:f5:fd:c8:98:32:64:3b:b0:1b:00:af:
         55:99:1f:c0:d3:95:98:d3:ea:5c:5a:6c:db:2c:09:0f:c1:b4:
         3a:84:7e:37:69:4d:81:6a:d1:de:af:51:41:1a:9f:45:9e:39:
         a2:7e:80:ce:4c:c6:c0:0f:82:a4:0c:91:c3:05:43:7f:ee:88:
         c2:45:2d:ef:2d:7d:57:12:b5:02:b4:17:3a:b6:b0:ce:07:ce:
         cc:0c:78:26:4e:02:a4:66:c5:a2:8f:82:5c:43:a5:76:81:b5:
         2c:12:07:74:e0:8b:c6:b8:d6:b5:a0:46:b1:05:80:21:ec:f6:
         8e:5c:b8:56:94:12:d6:c5:dd:af:31:76:33:8c:a1:a0:cb:00:
         f7:27:bf:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:28:23 2026 by rpki-client