Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
File:                     O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json)
Hash identifier:          z2y769O2fvB3CrfYz1bkr48UCMsfQDlQ9IFstua7qX8=
Subject key identifier:   18:23:75:85:4A:3C:FF:8E:0A:B6:35:54:06:E4:C8:C5:26:D7:72:48
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Certificate issuer:       /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial:       019EBE484AB9D4ECF9F5C51D7443D40F6852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
Manifest number:          0FFF
Signing time:             Sat 13 Jun 2026 00:01:09 +0000
Manifest this update:     Sat 13 Jun 2026 00:01:09 +0000
Manifest next update:     Sun 14 Jun 2026 00:01:09 +0000
Files and hashes:         1: 5EPEfFcq0_CQJyJv8NvlTXW122s.roa (hash: shP8Ed/HPJC3iktLjU3AhfJDqjBPIc4NQ5VyPIH2+gA=)
                          2: HoguhPYctq53_NeJpwMiGGaEYHE.roa (hash: 2Rg4I4psfcDKa015Nd8h+FBbuNVy5CBZXEFltS4HBbg=)
                          3: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: QJUweXpqVsDtx6K3iZalNuWNbPSjj2OvAZGcgBEpxA0=)
                          4: jqg60u3udEXldRsO6lvjcjKURzE.roa (hash: kW26aKoDuoF4wJ1FRfJ1sSmndtvHSr/VmE5hX9cRIqU=)
                          5: xkVE7KUdk3_Gxthu42EOBxgV05Q.roa (hash: OLCiaU+AVFxgMEa5gMdkqLSxOFCgu1RCocNrX9T3asM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:4a:b9:d4:ec:f9:f5:c5:1d:74:43:d4:0f:68:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
        Validity
            Not Before: Jun 13 00:01:09 2026 GMT
            Not After : Jun 14 00:01:09 2026 GMT
        Subject: CN=182375854a3cff8e0ab6355406e4c8c526d77248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a1:f6:03:66:de:12:42:52:cf:03:ee:4f:5d:
                    f9:63:20:3e:f2:1f:9b:8b:d8:14:b3:b6:77:9b:f0:
                    aa:b7:15:98:1e:84:15:95:1e:65:c1:26:41:68:e0:
                    1c:f1:7c:71:43:92:bd:14:21:77:cc:a2:ee:09:09:
                    d3:5f:9a:34:50:79:e0:97:22:c2:59:3a:45:1d:0e:
                    88:d7:42:bd:ba:0c:8b:e2:83:4e:27:c0:aa:19:19:
                    6b:90:4c:8f:eb:cf:13:e0:b9:48:b8:95:a0:a1:5e:
                    01:56:60:e4:01:ab:3b:68:91:65:7b:14:a6:5d:d6:
                    84:e6:b8:70:12:58:9f:30:a4:a9:a4:16:c5:0e:9d:
                    05:7b:10:78:0b:30:d4:ca:3d:9e:75:fa:6c:c4:40:
                    a7:2d:fe:88:bb:2e:b8:1c:6f:76:b3:aa:40:7c:d3:
                    d6:48:ea:bc:25:c2:b4:bc:07:54:e6:b4:b2:81:4e:
                    47:fa:85:9a:3b:39:c5:8b:70:ce:a5:5d:75:bb:6c:
                    b2:6b:e8:a2:d4:2a:81:c6:9c:63:1e:81:c7:92:8f:
                    da:41:7d:49:f0:38:8a:dc:83:dd:22:d2:e9:4a:df:
                    ab:82:0b:35:6c:87:1b:cd:21:91:cd:db:5d:82:5c:
                    ff:74:32:11:cc:93:84:c6:20:17:39:79:00:69:01:
                    47:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:23:75:85:4A:3C:FF:8E:0A:B6:35:54:06:E4:C8:C5:26:D7:72:48
            X509v3 Authority Key Identifier:
                keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:10:d1:83:a3:dc:c1:8a:be:3e:0d:6b:ad:93:2c:c8:a6:04:
         9a:05:3c:0d:30:66:21:5f:a4:c6:72:25:f6:7d:18:f2:26:cc:
         0a:07:aa:79:5e:74:ce:5f:8c:60:96:90:e0:1c:73:74:de:b5:
         a4:6d:2f:6d:03:cd:82:8a:f7:02:5d:de:14:14:60:76:df:b5:
         32:ee:cc:5b:5d:a7:05:d0:26:34:0c:22:51:3d:8a:f4:5c:37:
         b0:10:fc:3d:31:c1:45:4d:a3:db:0a:07:34:8f:1e:b5:aa:72:
         50:c6:ad:44:fe:ec:de:2b:8e:03:57:42:80:dc:d8:4f:e6:75:
         38:d3:30:ca:86:cc:ee:10:da:c4:f8:ea:69:f0:23:7a:3d:e2:
         6c:67:ec:f8:45:14:74:5e:c7:86:1a:7d:a4:b4:b6:57:08:84:
         92:aa:e5:22:05:8d:2f:af:5e:f0:b6:17:a3:25:10:d5:d1:ef:
         66:95:a3:5a:d4:e7:f1:21:7a:a2:02:3b:fa:68:b3:7d:f0:39:
         e9:2d:59:a7:7f:5a:ea:7a:73:69:55:06:54:f0:fb:a6:11:1e:
         2d:1a:5a:52:dd:ef:b4:c9:74:c2:bc:85:15:49:b1:86:dd:d0:
         3f:fc:d6:89:31:71:b8:0e:72:51:61:ce:44:23:18:3e:aa:b9:
         38:64:44:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:53 2026 by rpki-client