Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
File:                     o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft (raw, json)
Hash identifier:          SzjJcbI0VP/MyHrPOu/j0ZdSIqfO7+euOnKGdR7fhhw=
Subject key identifier:   81:D2:24:B5:EE:D3:15:35:24:50:DD:7D:9A:C0:51:EF:7E:7B:5C:EF
Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
Certificate issuer:       /CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Certificate serial:       019EC1EE5802242DFA0591E46010EF649DF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
Manifest number:          145B
Signing time:             Sat 13 Jun 2026 17:01:23 +0000
Manifest this update:     Sat 13 Jun 2026 17:01:23 +0000
Manifest next update:     Sun 14 Jun 2026 17:01:23 +0000
Files and hashes:         1: TzZ8DBm3Hp04BY0B397tAwAsJ1A.roa (hash: 8hOHuxX3j27ZIrYwIouhG6F7KAUYojmRWpf6OzaimAU=)
                          2: o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl (hash: L4W61gQYEA6ijmRxUVE3GJrHjmKCBJO8O0oK02Sjk/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ee:58:02:24:2d:fa:05:91:e4:60:10:ef:64:9d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675
        Validity
            Not Before: Jun 13 17:01:23 2026 GMT
            Not After : Jun 14 17:01:23 2026 GMT
        Subject: CN=81d224b5eed315352450dd7d9ac051ef7e7b5cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:70:4c:2c:e7:fe:d0:11:bf:de:74:23:89:65:
                    77:d0:af:01:5a:7f:69:ea:ff:6b:19:b1:33:9f:6b:
                    cf:b8:d3:19:02:d5:cf:af:f8:dd:15:fb:55:27:7e:
                    b5:52:1a:98:3a:5e:02:2b:20:e9:6c:4e:57:0a:dc:
                    49:09:9d:ca:42:5f:bc:ae:4c:31:3a:db:f9:7c:e4:
                    42:46:6f:cf:03:4c:13:c1:80:6f:96:d5:70:90:7b:
                    ad:62:cf:35:98:65:e4:e5:c4:7e:97:ef:ee:49:fd:
                    9b:62:74:86:60:fe:a8:7c:d6:ce:4f:37:96:cb:46:
                    ba:94:57:af:09:0f:d7:dc:bb:9f:34:42:ff:c7:6b:
                    2e:16:ed:e4:7a:89:c4:4b:9f:b4:90:c1:0c:c7:58:
                    c6:ee:15:db:78:94:a1:5e:e5:0a:d6:a4:af:53:a1:
                    f3:eb:2f:66:e9:fa:9c:47:9f:8d:e9:4b:77:f5:2d:
                    36:02:a6:f0:cd:46:68:01:34:e6:d8:ea:38:09:06:
                    f7:ed:2f:f5:c9:56:de:47:31:8f:be:71:17:66:3b:
                    eb:12:ec:9c:72:27:86:58:9d:18:34:b8:8d:1c:ed:
                    af:49:61:94:82:58:8c:93:7b:47:fe:f2:a8:ce:b2:
                    87:26:f9:8d:24:a7:4e:59:13:17:7b:5d:b5:2c:51:
                    c5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D2:24:B5:EE:D3:15:35:24:50:DD:7D:9A:C0:51:EF:7E:7B:5C:EF
            X509v3 Authority Key Identifier:
                keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:58:d3:f4:71:4f:02:b7:ce:97:8b:de:93:5f:1a:7e:84:78:
         9e:e1:35:9a:b3:c8:c5:ab:91:9b:f2:0a:81:f3:80:33:ef:cd:
         22:a8:c0:cc:5d:9b:6d:94:c3:a3:a8:03:f3:c1:09:84:74:38:
         8c:b6:15:0b:b8:8f:86:fc:3e:ac:92:3d:9f:41:2a:77:7e:5a:
         68:b9:a6:cb:1a:79:bf:9e:32:a8:5c:e9:40:9c:a4:d8:b8:ed:
         8e:5e:cd:5d:1c:bb:ed:61:2a:ad:e3:df:08:d8:49:84:c4:b0:
         c9:9c:e6:11:e9:27:c3:7c:de:7f:25:00:bc:c4:d0:c1:7a:c3:
         97:10:89:c6:51:ce:3e:62:23:ba:9f:60:4d:2e:dc:69:b8:e0:
         ff:e7:7b:1e:c0:26:d2:5f:3c:b6:cb:3c:64:33:2e:e5:50:ec:
         99:80:f4:5e:00:18:1d:a6:2e:42:fe:3b:88:01:3e:32:56:8b:
         e3:9f:01:37:45:a5:d7:5d:76:37:34:36:24:19:a8:e0:d0:de:
         fb:d4:4d:12:3d:3a:1c:98:85:31:d6:ab:94:7d:59:b0:0e:dd:
         1e:b8:0c:ff:b1:a9:0d:ca:1a:68:bd:cd:89:80:f6:b4:be:3e:
         d7:17:0a:bd:78:ef:87:1e:e4:83:de:af:e9:4c:3c:e6:d7:bc:
         e0:ff:82:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:11:45 2026 by rpki-client