Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
File:                     oet7cZVO3_yjWEyF-gj7EiQv7NU.mft (raw, json)
Hash identifier:          z9SlMrAHLhY49/QevhXsBdZ++4K7vaUc641JdLdZZjU=
Subject key identifier:   06:3C:F0:E8:77:7E:2E:EB:EA:49:15:B5:F0:86:75:A9:E1:67:84:1D
Authority key identifier: A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5
Certificate issuer:       /CN=a1eb7b71954edffca3584c85fa08fb12242fecd5
Certificate serial:       019EC3DC2F22AFF0A78A46C4DE676A8CC563
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
Manifest number:          022D
Signing time:             Sun 14 Jun 2026 02:00:47 +0000
Manifest this update:     Sun 14 Jun 2026 02:00:47 +0000
Manifest next update:     Mon 15 Jun 2026 02:00:47 +0000
Files and hashes:         1: lE1Kxf9PJiSztZNrzwwBPAVYUcU.roa (hash: jNZxU5D1EKLny/wqaNa70XGzWgiNnFCUNtLqg86RKFE=)
                          2: oet7cZVO3_yjWEyF-gj7EiQv7NU.crl (hash: DJ207SHgRrj/FLwkqsTeV4NXx3nXjpFXLFwfZ62Ne14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:2f:22:af:f0:a7:8a:46:c4:de:67:6a:8c:c5:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1eb7b71954edffca3584c85fa08fb12242fecd5
        Validity
            Not Before: Jun 14 02:00:47 2026 GMT
            Not After : Jun 15 02:00:47 2026 GMT
        Subject: CN=063cf0e8777e2eebea4915b5f08675a9e167841d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8e:e2:32:c6:78:19:a8:66:13:14:9e:51:f8:
                    6f:8d:b6:fb:bb:e7:cd:3b:0a:2f:66:8d:17:31:3b:
                    85:44:d5:0d:5d:27:69:58:1c:7e:d6:91:90:c4:ba:
                    b5:83:c7:23:32:16:5d:96:e6:1b:77:26:93:aa:57:
                    80:28:92:37:df:66:fc:7f:59:e1:37:a4:06:d9:d7:
                    31:d7:55:8b:83:98:e8:81:85:e8:a3:4c:c9:73:39:
                    6d:25:5c:5a:4d:18:6f:6b:4e:31:b8:5d:3d:48:98:
                    a5:61:db:f5:4c:3d:c3:1a:d2:a8:8b:7d:b9:ff:69:
                    ab:40:b3:01:58:1d:bd:c0:8b:d1:ad:34:88:43:4b:
                    ca:7f:4c:7f:69:2c:ba:35:8a:18:c9:14:a1:9a:5a:
                    51:f6:21:96:60:39:16:d9:09:84:bf:b5:b1:a3:49:
                    0c:55:87:f5:dd:b2:42:d6:dc:c9:9a:72:90:1d:36:
                    92:6f:90:c7:4a:8d:75:78:ad:cc:84:ef:21:8b:a5:
                    1f:c5:3d:ae:7c:a1:c5:a5:77:91:07:d1:fa:da:dc:
                    0b:2a:d5:b6:a0:2d:85:6f:e7:6e:75:6f:89:64:f4:
                    de:b3:9d:90:7e:fc:8c:8f:37:01:01:d1:a4:6a:2d:
                    f7:67:d2:23:16:98:db:69:22:a4:30:50:b1:cd:7e:
                    1d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3C:F0:E8:77:7E:2E:EB:EA:49:15:B5:F0:86:75:A9:E1:67:84:1D
            X509v3 Authority Key Identifier:
                keyid:A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ae:9c:0b:13:3c:2c:5a:62:fa:f0:9b:9a:8e:10:0b:1e:57:
         b7:00:05:3f:1b:21:e9:8e:fb:fa:ee:7e:c7:29:f0:b6:1e:91:
         bd:54:2b:25:14:a6:b6:f4:88:0c:8f:f9:ec:45:00:e1:2d:f7:
         d5:e3:e4:8f:c5:6d:8b:1c:9c:bc:cc:a5:d4:5e:15:e6:3d:7d:
         fc:20:8d:19:b5:25:86:63:a7:13:55:85:8b:bd:9c:2f:d8:25:
         17:f7:b3:bb:9d:a8:12:e3:7f:bf:7b:d1:78:39:a7:9d:85:b5:
         ec:7d:30:06:0e:dc:97:43:f0:99:14:81:9e:94:64:8c:a3:c6:
         8d:63:ab:46:a6:07:b5:30:a9:24:57:5e:cc:bb:17:c5:69:e4:
         91:19:2b:86:ea:1e:89:02:52:da:94:e7:17:0e:79:ab:cb:e9:
         53:50:54:9b:d0:bc:44:07:ed:3f:0a:27:e1:38:09:08:d2:e9:
         ef:e5:fd:74:38:d6:cb:39:ac:12:3d:60:45:fb:02:67:a1:a4:
         82:6b:31:ae:5d:5e:1a:0d:24:ac:83:83:98:a3:f5:f7:36:a2:
         b8:2f:8f:41:8d:8b:6a:05:02:6d:46:0b:ab:b0:64:af:ef:aa:
         59:56:d0:ba:86:de:f6:0b:0b:ca:bf:15:34:4d:0a:72:36:9c:
         d6:d6:ba:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:23:03 2026 by rpki-client