Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
File:                     PubOz_2bi7oY1HTns5k-Ch0U27M.mft (raw, json)
Hash identifier:          /uH/eVyOpbiopOwaJzuf71BXzDKWOfV6nuzE/EO5sQk=
Subject key identifier:   7B:4A:C3:1B:3B:DC:61:5E:ED:BD:27:15:1C:8C:77:65:AC:2C:95:44
Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
Certificate issuer:       /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Certificate serial:       019EBFC8BB8A00D155D8E5CDF856676C6168
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 07:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:03 +0000
Files and hashes:         1: HgjQlaKjOcxyBGYejwW2nEs1AV4.roa (hash: A/JVdLkAtd7xSgRJY34UCglbvZrgY4rTBx9M0XvHris=)
                          2: KbPCfCpgY4busEPKG3wKIKYL4ts.roa (hash: /r3wKFeByv8IWPnZi01I5rTvuzXRQVBcL8LQjvMalwY=)
                          3: PubOz_2bi7oY1HTns5k-Ch0U27M.crl (hash: 5lj7homEbU/dPKM6kQAmGwBsFMKi45mXArY5YHHC34M=)
                          4: TR9cohMhMoQQxWhWiR1qGs1BMC8.roa (hash: LYdTaX6pjmd3oJ4vpjV9U20LQlY3HXHKSPGaKNT6k0M=)
                          5: VVHWjLC5gXhkxNQ7IVFDXzmzeZI.roa (hash: xCZynqZw2sX0L0GEOZPMQ2Okzgf6Cs5V0s8Gbvable4=)
                          6: na7v2RTX0iJO5QICr8PmbCw-LUM.roa (hash: jwROABglDlbIBf0fqlrQ82IKxKEdLiyV166j/7Y15oM=)
                          7: ycbxLoTJEDsv40EPKCzklrp5vCU.roa (hash: ik9FtWC2uSrCFeO2vECTjX7gm9PiFa3XhpXGDwO8G94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:bb:8a:00:d1:55:d8:e5:cd:f8:56:67:6c:61:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
        Validity
            Not Before: Jun 13 07:01:03 2026 GMT
            Not After : Jun 14 07:01:03 2026 GMT
        Subject: CN=7b4ac31b3bdc615eedbd27151c8c7765ac2c9544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d2:dd:ae:ae:4a:21:98:2b:f5:24:3b:ed:7a:
                    40:cd:bf:33:0c:ab:7a:75:62:1b:8d:a6:a8:7d:12:
                    f7:79:af:fb:6b:0a:95:26:7c:a4:db:28:bb:c9:c4:
                    9b:ed:af:3c:c5:e5:e3:86:fb:bd:67:bc:10:aa:d3:
                    f7:eb:6a:d4:71:17:ae:10:63:0d:65:17:71:20:7c:
                    12:1e:9e:53:27:d3:fb:5c:d8:59:58:72:ed:63:64:
                    dc:fb:20:96:c0:eb:34:8a:b8:1f:43:35:ee:bb:9f:
                    4b:8e:01:d1:33:b4:82:14:1d:76:27:d3:f5:84:e6:
                    39:84:55:f9:97:6a:5e:64:94:e6:48:21:64:46:e8:
                    cc:ee:10:cd:47:c1:58:3e:ff:f5:e7:90:91:af:30:
                    8f:f8:15:1d:5a:cf:ba:0c:10:9f:65:4b:ad:04:ae:
                    58:6a:cc:32:0b:62:e7:13:b4:b9:37:59:7b:56:d6:
                    79:7a:a3:4b:d3:c5:70:ed:cd:b3:03:1d:42:45:7c:
                    51:a5:12:ae:2e:75:18:72:36:df:65:50:90:8a:40:
                    3d:28:3a:3d:cb:39:1a:e5:99:10:7d:75:66:e2:5a:
                    46:33:b7:54:00:3d:2f:8b:3c:72:f9:f1:77:e5:15:
                    67:f3:2a:75:f1:f7:ba:72:58:ba:28:94:43:0b:6a:
                    2a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4A:C3:1B:3B:DC:61:5E:ED:BD:27:15:1C:8C:77:65:AC:2C:95:44
            X509v3 Authority Key Identifier:
                keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fa:44:3b:1c:7d:98:36:d1:e1:33:92:cd:bc:de:99:cd:3a:
         eb:04:89:08:2b:00:5b:7b:55:e3:b2:dc:bd:48:f1:a0:f8:e1:
         9a:1a:05:52:f5:d3:fe:d8:0e:95:c6:17:55:e2:3d:60:a3:cf:
         6d:0d:ab:96:a2:7f:02:0f:14:97:44:eb:18:b3:c1:37:dd:b4:
         d3:69:ec:d8:a3:ec:35:21:7e:c7:77:ca:b9:d0:17:25:d8:8e:
         1b:22:67:66:98:71:18:8b:6c:84:11:24:dc:07:33:f3:1a:ed:
         a3:45:f2:1a:2e:3b:70:dd:07:ad:25:cb:24:e5:08:b7:27:65:
         a6:c9:45:5f:13:a5:ac:a9:aa:bb:b6:e2:cd:d0:14:19:19:17:
         ae:1a:66:fc:fe:f6:d2:5f:06:34:bf:db:ca:5b:52:2b:2d:11:
         ac:bb:d0:14:1b:e3:7c:ea:9b:43:6d:c2:71:86:be:fe:ce:c9:
         7d:1b:f4:e9:05:5a:96:2c:a1:63:2c:bf:a8:d2:a2:bb:05:c7:
         de:79:ae:02:42:38:c1:6d:e3:c7:87:02:63:77:3c:57:8b:90:
         d4:16:dd:54:ee:79:7d:b2:e0:44:6d:bc:06:30:97:4a:84:cd:
         cb:7e:f7:ff:14:4b:1f:7b:27:7a:2b:58:40:93:ac:d9:c5:f3:
         9d:6c:3d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:36:47 2026 by rpki-client