Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft
File:                     OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft (raw, json)
Hash identifier:          AcaLiB5SpYojnkzI5DcjPOc2n2ZfSvGylGaVGbegeeU=
Subject key identifier:   1E:2B:40:40:F6:A4:8E:0A:C8:58:A3:46:1E:AA:08:91:FE:CE:AD:51
Authority key identifier: 39:F9:E6:81:AB:27:27:E7:AF:03:C9:AF:C5:9F:6B:AD:83:18:FA:AF
Certificate issuer:       /CN=39f9e681ab2727e7af03c9afc59f6bad8318faaf
Certificate serial:       019EC0A3B57858E019D87F2E39258F7DA555
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfnmgasnJ-evA8mvxZ9rrYMY-q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft
Manifest number:          77
Signing time:             Sat 13 Jun 2026 11:00:14 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:14 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:14 +0000
Files and hashes:         1: OfnmgasnJ-evA8mvxZ9rrYMY-q8.crl (hash: 2POMONLxrB47szOEY1zRK8TW/BOgnUIT24nRRY/Sk4k=)
                          2: c0Vk60kJ7ueTPIokv7qGtH3eTTQ.roa (hash: O+dHMuQMe/fBcOZ5bxLhWVDzmIw1sCX/tFC/j0yj2qI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OfnmgasnJ-evA8mvxZ9rrYMY-q8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:b5:78:58:e0:19:d8:7f:2e:39:25:8f:7d:a5:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f9e681ab2727e7af03c9afc59f6bad8318faaf
        Validity
            Not Before: Jun 13 11:00:14 2026 GMT
            Not After : Jun 14 11:00:14 2026 GMT
        Subject: CN=1e2b4040f6a48e0ac858a3461eaa0891fecead51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9a:a2:8d:d7:13:8a:f3:dd:7b:87:b3:23:38:
                    7d:4b:49:f1:27:b7:9f:2a:2a:3b:b7:b0:7c:7f:eb:
                    5d:99:9b:77:4b:1e:1f:9e:4e:d7:bb:d8:10:e9:18:
                    f4:75:23:28:a4:80:36:ea:73:10:e5:45:2e:73:c5:
                    2f:f2:18:d5:80:24:e4:87:1b:e3:6e:db:d0:09:53:
                    e4:ea:99:16:40:f3:c2:30:f9:3a:97:0b:37:54:9a:
                    c6:c0:1d:ad:a3:2d:7e:c1:3d:a0:e3:82:cd:b3:07:
                    ab:ed:10:5e:02:c2:05:f0:10:71:08:4a:f5:16:83:
                    fa:c8:54:02:67:31:54:c4:69:20:76:15:94:a7:ae:
                    53:7f:c1:c9:7b:fc:0c:ad:bd:ea:08:94:57:1c:84:
                    08:06:4f:6f:ea:c8:ff:85:65:4a:8e:2e:43:97:5d:
                    2f:8d:f2:f8:4e:55:bd:4e:01:77:eb:b4:6e:86:d3:
                    1a:e6:af:0e:a7:f0:a5:7f:51:ee:b6:df:62:26:59:
                    9a:bd:48:d5:39:3c:39:ac:a6:61:9f:ee:62:08:9f:
                    65:7f:30:f9:eb:80:7e:59:99:35:31:06:6f:53:1e:
                    12:52:e2:11:62:c6:bb:d4:79:61:22:5b:1e:ca:89:
                    16:f1:a1:f7:1d:d7:40:6f:38:94:02:92:1d:93:df:
                    a1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2B:40:40:F6:A4:8E:0A:C8:58:A3:46:1E:AA:08:91:FE:CE:AD:51
            X509v3 Authority Key Identifier:
                keyid:39:F9:E6:81:AB:27:27:E7:AF:03:C9:AF:C5:9F:6B:AD:83:18:FA:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfnmgasnJ-evA8mvxZ9rrYMY-q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c10fc8-a3c6-48ac-8da9-24eee8943931/1/OfnmgasnJ-evA8mvxZ9rrYMY-q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:3e:ba:44:e4:e0:b8:9f:e8:90:a0:8d:4f:32:dc:1a:67:8b:
         d1:a7:f4:27:c1:41:0d:9b:40:81:7c:5b:ae:f4:2a:05:b3:59:
         87:3e:9f:5a:40:10:54:b4:e8:d3:90:6d:62:75:5f:dc:af:c5:
         55:fa:a5:a0:f2:5e:b3:9c:27:89:57:c4:3a:44:62:1b:c6:0d:
         c2:5b:9c:26:98:d0:b6:7d:65:ed:63:14:8a:85:31:a9:df:ec:
         06:c5:fc:fb:7b:c5:d7:04:ba:95:73:39:cc:3a:68:35:73:68:
         04:6f:a3:d8:3e:84:43:b7:59:fb:bd:b0:af:60:f4:36:4c:ba:
         61:f6:2e:35:29:62:7b:08:58:51:e3:b4:1f:3e:91:17:6f:1b:
         c6:b6:71:bd:c3:28:82:27:6c:fb:5f:42:3d:5b:17:be:db:38:
         45:c4:ca:1e:a0:66:1d:97:94:bc:f9:df:1b:45:98:ce:41:87:
         ba:94:48:a8:ba:0e:88:bf:de:de:47:c1:d9:b1:09:ef:73:e2:
         95:4b:4d:a8:10:18:44:b8:6b:e8:5b:9a:4e:d3:14:10:ff:9d:
         6a:6c:63:fe:1e:bc:23:3b:cd:cc:08:3e:1b:70:fd:15:ce:c4:
         46:3d:07:c1:43:9a:c3:f3:10:29:34:5a:4d:70:2c:6f:ef:e9:
         54:45:84:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:29:02 2026 by rpki-client