Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
File:                     oZ_WM6TT0hDez321fRIrZIuY7SU.mft (raw, json)
Hash identifier:          2x95EP9SQjJvSEl8uBq0EvnGIZ8Fy7oOL79otlHj6zs=
Subject key identifier:   C8:23:96:EE:07:23:DF:BA:B4:32:0C:82:6C:DE:8E:AD:95:AD:3C:6F
Authority key identifier: A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
Certificate issuer:       /CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Certificate serial:       019EC0A3DA2BFE729DA755C755A120F0A7A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
Manifest number:          0564
Signing time:             Sat 13 Jun 2026 11:00:24 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:24 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:24 +0000
Files and hashes:         1: aJE-N8XrZPq5jSOvU59Z2wJzXNU.roa (hash: UfTHGBjQ2zBZbaFR7hvw5/SPevdqWF43OgeNjM2xfIM=)
                          2: oZ_WM6TT0hDez321fRIrZIuY7SU.crl (hash: rOipcQcklJ3ZhYp4YaKodNNh73ITpCaBTL19jdHS6kA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:da:2b:fe:72:9d:a7:55:c7:55:a1:20:f0:a7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a19fd633a4d3d210decf7db57d122b648b98ed25
        Validity
            Not Before: Jun 13 11:00:24 2026 GMT
            Not After : Jun 14 11:00:24 2026 GMT
        Subject: CN=c82396ee0723dfbab4320c826cde8ead95ad3c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a9:c0:a6:52:34:81:d1:ba:a0:56:c5:07:2f:
                    ca:28:da:f5:06:c9:bf:f3:34:8a:f4:f1:57:40:d2:
                    77:70:89:3b:1c:d8:ac:a0:3d:be:f7:b8:60:47:f9:
                    d5:50:0c:9b:1b:d0:e1:af:47:42:07:2f:f4:c0:7f:
                    d6:b5:52:22:ea:0a:92:c4:7f:da:e1:67:38:76:05:
                    d2:7a:96:14:8c:e4:96:05:7e:18:26:d4:04:22:b9:
                    c2:63:16:49:4b:79:6b:ec:97:3b:92:71:71:38:30:
                    60:38:72:7d:4c:06:83:e5:1c:e0:9c:f9:34:07:ea:
                    3f:dc:e3:5a:19:95:6a:f0:81:52:dd:11:2d:9b:9e:
                    e8:30:d9:26:fb:9f:50:03:10:f3:16:db:94:44:23:
                    f1:27:bb:9e:20:e6:57:71:c2:0c:f6:57:04:22:3f:
                    92:4f:47:c6:1a:5c:fc:89:1c:24:24:62:50:37:a6:
                    1b:10:1d:95:4e:4e:8a:cc:0e:21:8e:f7:c3:73:98:
                    44:9c:0a:2d:ed:9b:cd:dd:10:a7:88:0f:cf:04:fd:
                    76:0d:3f:ff:16:bf:e7:86:75:b0:7b:4f:bf:e2:31:
                    3b:1d:4e:cd:63:6b:ee:d6:ec:31:7d:7f:e4:f3:16:
                    ad:03:7f:d5:28:ca:68:93:44:c9:a3:ce:66:85:a0:
                    5f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:23:96:EE:07:23:DF:BA:B4:32:0C:82:6C:DE:8E:AD:95:AD:3C:6F
            X509v3 Authority Key Identifier:
                keyid:A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ea:bb:b7:d9:58:e6:8b:bc:d6:67:f9:d8:10:21:42:a2:4d:
         96:9c:3f:d5:fd:df:6d:26:4b:a6:d2:46:db:3c:54:c2:5f:05:
         dc:a4:f0:3b:83:7f:da:48:db:87:18:85:cd:f7:f5:45:51:52:
         99:16:00:8f:4a:10:85:a6:23:b1:f1:bc:c6:0a:a7:81:bc:ce:
         5e:0e:57:42:3d:b4:f2:0f:1e:d7:a0:e3:56:31:ea:41:ec:d7:
         a4:c2:03:36:aa:26:de:64:d4:62:a1:08:24:c4:7e:12:e6:67:
         d0:90:b4:f0:65:7d:c3:ec:a6:68:7a:cc:06:72:47:99:f0:49:
         c1:fb:18:4b:b5:9b:2b:fc:c9:1c:48:d1:f4:7e:34:7b:03:69:
         0b:d2:ce:70:3a:fe:1b:fd:9a:d8:27:4e:30:0c:16:bc:07:eb:
         02:44:78:9e:a9:65:f1:9e:aa:9b:d8:46:12:58:9a:e5:eb:f6:
         d6:29:55:c5:c8:f2:a0:70:c9:23:04:6e:af:6b:bc:b0:8c:c8:
         27:cd:3f:17:56:af:b6:7a:bc:53:c8:48:28:9c:c2:3d:46:08:
         d3:00:e4:b1:e0:14:d0:b2:8e:eb:b7:6d:4f:4e:0e:41:6e:54:
         4e:b6:55:64:dc:2d:81:45:6c:dc:52:06:6e:16:13:b2:a1:31:
         cf:67:33:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:37:07 2026 by rpki-client