Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
File:                     OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft (raw, json)
Hash identifier:          MwhBPszDFb17vYoaXuyBxU45AjJHEtZQEZuaootlGIk=
Subject key identifier:   51:5D:E4:ED:26:F8:BD:5D:4F:BA:2A:F9:DC:76:CF:1E:4C:9B:44:3F
Authority key identifier: 3A:62:74:69:67:90:0B:24:C5:9D:21:4F:40:53:2D:76:FE:FF:81:E4
Certificate issuer:       /CN=3a62746967900b24c59d214f40532d76feff81e4
Certificate serial:       019EC17FB9E868DFD6A4133F04ADA78FA4A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
Manifest number:          97
Signing time:             Sat 13 Jun 2026 15:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:33 +0000
Files and hashes:         1: OmJ0aWeQCyTFnSFPQFMtdv7_geQ.crl (hash: WKqTr2ft+5YjPAF+oIZiqmO9zkAfWSUxzujcr5jcCjo=)
                          2: aIKcl8xyOE8c2T5VfSfWvfIZQIU.roa (hash: rP1uuNWiqen7TPqE1GYuJGzp+rVZ1OGQdR+rdwxUdFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:b9:e8:68:df:d6:a4:13:3f:04:ad:a7:8f:a4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a62746967900b24c59d214f40532d76feff81e4
        Validity
            Not Before: Jun 13 15:00:33 2026 GMT
            Not After : Jun 14 15:00:33 2026 GMT
        Subject: CN=515de4ed26f8bd5d4fba2af9dc76cf1e4c9b443f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a3:5e:0d:ae:71:7d:a7:82:39:d7:ae:0b:7c:
                    d4:83:86:eb:ac:ff:6f:83:a9:47:99:ad:0a:43:7a:
                    61:9d:d4:ee:39:66:20:37:c1:f8:2f:68:07:57:ac:
                    9d:47:a3:d6:00:a5:61:35:58:54:ff:25:d9:d4:e8:
                    56:6c:a9:ab:1d:9c:a8:15:1f:f0:4f:d7:91:6f:70:
                    ea:8d:a4:e0:dd:28:90:95:b9:d8:94:28:a6:e1:83:
                    27:31:e6:3d:92:fb:68:82:c5:cb:27:94:37:25:79:
                    74:30:0c:7e:b0:b9:63:c8:70:c6:71:d3:9e:16:f5:
                    49:0d:5f:77:20:9c:40:c9:78:f6:5e:7a:79:fb:64:
                    42:8f:f5:6f:15:3b:23:06:a2:d4:ae:54:51:0b:d7:
                    28:0b:44:14:85:72:e2:e9:76:25:47:8a:2a:ca:cc:
                    27:88:81:8f:7c:17:1b:33:8e:09:f8:34:46:81:8e:
                    db:62:a1:75:f4:61:8b:eb:d9:ce:22:86:91:03:d2:
                    f4:c3:4f:b2:5c:d5:5e:ee:0e:4a:c5:95:2b:86:74:
                    5d:81:b0:54:57:1f:f9:7f:ba:39:16:8d:ac:39:bb:
                    91:2b:4a:e1:64:27:6b:21:82:79:eb:60:4c:c1:62:
                    6b:48:0c:71:ca:88:b2:8f:c2:70:7e:b7:ef:33:96:
                    a5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5D:E4:ED:26:F8:BD:5D:4F:BA:2A:F9:DC:76:CF:1E:4C:9B:44:3F
            X509v3 Authority Key Identifier:
                keyid:3A:62:74:69:67:90:0B:24:C5:9D:21:4F:40:53:2D:76:FE:FF:81:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ea:ee:52:f8:7c:5b:bb:1b:4d:3b:c6:f3:4c:86:a8:e5:5b:
         f9:3d:7c:92:1a:f8:b7:74:c3:87:4a:96:cf:9f:0a:40:a2:60:
         3c:7c:95:2f:32:39:19:9a:5b:22:f5:dd:b8:49:b5:af:38:50:
         d8:9a:17:cf:d3:11:99:39:11:24:f4:85:62:51:1d:3f:12:86:
         10:15:c1:9c:06:b2:09:b3:3c:e0:56:be:f6:1e:71:26:70:d0:
         9d:20:1f:b0:ec:57:95:82:b1:3f:25:db:e1:f0:ef:2d:6d:87:
         d8:68:3f:67:b5:54:dc:62:1d:29:46:95:22:21:29:2d:5e:c4:
         fb:8a:d3:c1:ec:5e:c0:da:b8:e3:d8:a5:a7:92:e1:f3:4d:66:
         d1:f1:00:8b:bf:5b:c4:1c:5c:6c:6f:8c:00:1b:08:91:ff:b8:
         52:09:6c:61:06:93:fc:0e:df:6b:be:4b:85:b2:da:bf:ea:3c:
         fa:93:33:ff:89:a1:fc:ab:1a:ca:4a:3c:3e:59:d9:f8:5b:51:
         db:d1:e3:66:76:28:bf:50:bd:1b:57:93:62:c4:b3:60:97:a9:
         b4:84:07:6e:44:9b:07:a7:9a:67:c6:df:a8:72:35:3c:14:e1:
         f7:f8:e3:7d:e3:5e:95:6e:26:a4:4b:e4:c6:a3:06:a5:2e:af:
         d8:ec:12:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:58:55 2026 by rpki-client