Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
File:                     o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft (raw, json)
Hash identifier:          Kw6cavpxd+yLdORh3TMY+BCF2eVlfDLQMcW1sj8eB1M=
Subject key identifier:   2D:BB:3A:A6:24:9C:50:F4:EA:07:B0:EC:69:81:4B:F1:1D:E4:A7:D1
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Certificate issuer:       /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial:       019EBE4799526CC1D3A9860500452B392C18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
Manifest number:          188B
Signing time:             Sat 13 Jun 2026 00:00:23 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:23 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:23 +0000
Files and hashes:         1: 2zvlLx0eZAbOYhxgIyqrlDoVC1g.roa (hash: KQYOWqTXbXwvtekOLsVc2rxud/hR8A87QDGRubzzTXw=)
                          2: 4Ry_mlzBaUQ6UP1sVtEjuUsTD1M.roa (hash: Cbb+P8Z0r4y6AjDJgLqHTENuD/Go8wmcnnMVwTktU/4=)
                          3: D757pdeWdoida8GHOUdKTXVzQLA.roa (hash: 9oAemx2TPMquAep4lORrFPAoBV6BakfDEYxe+lt7IJE=)
                          4: o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl (hash: a5b0G+bXyjF5OfYJXxhYkapcOQHZBU+vxJW1YcE8YHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:99:52:6c:c1:d3:a9:86:05:00:45:2b:39:2c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
        Validity
            Not Before: Jun 13 00:00:23 2026 GMT
            Not After : Jun 14 00:00:23 2026 GMT
        Subject: CN=2dbb3aa6249c50f4ea07b0ec69814bf11de4a7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f2:13:e9:f7:60:f9:90:95:a0:90:bf:4a:75:
                    e7:a1:20:a8:63:78:c2:88:13:bd:22:bf:f0:b6:63:
                    04:91:de:61:05:88:1c:90:c4:11:3f:e4:64:9d:ce:
                    7e:79:56:c0:a0:3b:66:0b:c0:61:d7:38:9a:bc:64:
                    cb:61:9e:27:fd:48:c1:11:98:2f:73:dd:61:18:e4:
                    eb:3a:65:60:4e:eb:c6:0c:79:f8:3f:82:92:ef:15:
                    26:19:91:5a:5c:da:d5:f6:20:96:e4:44:94:71:d4:
                    60:a2:bf:01:4b:3f:57:45:a4:76:26:e8:53:04:c0:
                    47:5a:0a:23:4f:18:2d:74:e2:19:14:ec:05:f9:e7:
                    c2:67:ab:bd:1d:e8:ce:93:50:3f:ec:c0:5b:5c:e4:
                    8d:a5:b5:ec:ad:89:c2:1d:ce:78:74:2c:e8:37:1e:
                    29:ed:b2:27:90:d4:28:da:15:d3:fd:9c:42:69:8e:
                    e8:58:8b:20:19:2e:95:9d:5f:b4:07:82:64:22:45:
                    9f:58:be:20:7b:25:1d:72:8d:5f:b4:b1:84:7e:fb:
                    d4:0a:de:3f:99:1e:23:fe:ee:a1:17:e4:cc:4c:f9:
                    5e:d3:f8:73:bc:27:30:2b:25:24:b6:23:57:32:dd:
                    e1:23:fa:14:78:a6:38:2c:23:58:5e:17:62:29:b6:
                    5d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BB:3A:A6:24:9C:50:F4:EA:07:B0:EC:69:81:4B:F1:1D:E4:A7:D1
            X509v3 Authority Key Identifier:
                keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:59:b4:a0:17:a5:e9:ef:fb:39:6a:9d:55:5f:a4:b4:e6:d1:
         18:26:d1:bb:3e:60:99:91:14:43:1e:70:45:a7:af:d4:cf:d5:
         18:3d:bb:3b:ba:da:09:2f:b6:24:c1:3c:e3:da:b3:ab:0a:e7:
         35:8b:70:ab:7b:15:6c:51:ec:91:b3:74:e4:a1:ce:87:cb:d4:
         87:66:26:71:86:17:c0:06:c7:d4:10:f5:d5:aa:1d:3d:47:e6:
         23:16:d3:8c:3f:26:7a:11:5e:0d:f5:f9:7f:d2:61:cb:69:cc:
         7a:64:f1:11:6e:a8:58:b1:0b:bb:05:07:e0:36:76:d6:6f:6d:
         0d:67:90:27:b3:3b:96:90:00:78:67:03:74:df:dd:55:e0:1e:
         68:6b:7c:3b:b3:ba:e0:87:b4:ed:e8:6a:41:cd:fb:bb:fb:bb:
         69:fb:a7:d2:bb:70:41:0c:a0:8b:24:1c:a2:fa:83:f0:73:8f:
         5b:30:a2:a9:6b:36:b7:73:62:ba:f5:8e:fd:8b:83:d2:e2:dc:
         ca:ab:48:ea:fb:5a:39:b6:d5:4a:5a:34:6c:a4:a3:17:b7:2b:
         2b:20:ec:62:a2:00:c3:96:f9:90:55:9c:ca:53:61:a7:7a:18:
         e2:79:0b:0d:1b:17:f5:38:8a:3b:cd:58:12:77:f8:a5:a9:59:
         26:fb:d9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:41:06 2026 by rpki-client