Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
File:                     oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json)
Hash identifier:          jfYwKKB/la8/xyS5xyZvtgJ1Pxo/iunie+IXDLEjk3A=
Subject key identifier:   4A:83:B6:46:FB:C2:DF:17:4F:8E:31:ED:E9:5A:E7:02:9F:5B:2E:0D
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Certificate issuer:       /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial:       019EC0DAEE793C623BBD32B1C27A4E230066
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
Manifest number:          1138
Signing time:             Sat 13 Jun 2026 12:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:33 +0000
Files and hashes:         1: DWNbWLKsKUbayknrkxZPm_ru1rE.roa (hash: 0OEC7qPtd3MHFAia/7IsrfByY6Mlpa/bnminYQcTx14=)
                          2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: iXMnoxKWgE6fqpeWA63qAk+hR1LjikzDi7vOPZdGqcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:ee:79:3c:62:3b:bd:32:b1:c2:7a:4e:23:00:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
        Validity
            Not Before: Jun 13 12:00:33 2026 GMT
            Not After : Jun 14 12:00:33 2026 GMT
        Subject: CN=4a83b646fbc2df174f8e31ede95ae7029f5b2e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:43:09:92:17:50:ef:2b:55:48:b7:b8:c4:a6:
                    3e:3e:2f:c0:f8:d5:f6:5c:19:b9:5c:07:83:0c:28:
                    cb:67:bf:b2:b5:bc:6b:44:70:ed:88:ca:9e:42:1f:
                    1a:95:09:54:a3:ea:77:7e:81:f5:ee:76:15:76:ca:
                    5a:d4:95:9b:9d:0f:c5:2a:ee:7f:1c:a0:c2:44:be:
                    c6:57:dc:77:d9:ac:9a:71:e7:73:c5:dc:82:1f:a7:
                    29:ba:15:d0:a0:c1:bf:0f:1a:87:28:13:10:8c:9d:
                    c9:d0:bb:a8:bc:e6:e9:d3:44:eb:50:5b:5e:fa:6a:
                    3a:2d:30:9d:cb:4c:cc:9d:b5:26:97:72:30:e1:7b:
                    f5:03:d8:ea:38:02:26:a3:dd:62:5d:fd:cd:13:49:
                    ed:49:b3:f5:85:bd:03:57:ac:bb:69:2d:92:ce:bd:
                    68:60:ad:50:bb:65:c9:a7:c3:22:7f:ba:93:f0:0e:
                    46:00:93:d1:e9:80:7d:2d:c5:da:fb:ce:61:9e:78:
                    7c:1b:38:61:61:9c:25:e2:d7:1e:26:ed:db:92:c6:
                    ab:2b:dc:82:f9:48:66:db:90:0e:19:17:09:f8:13:
                    80:01:1d:c4:36:75:e2:bd:41:d1:6a:25:62:c4:9e:
                    d3:b7:7e:17:9f:51:d7:f9:f1:b2:93:b5:ec:db:1c:
                    78:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:83:B6:46:FB:C2:DF:17:4F:8E:31:ED:E9:5A:E7:02:9F:5B:2E:0D
            X509v3 Authority Key Identifier:
                keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a9:0b:f1:93:83:99:e6:64:79:6c:50:81:a8:5f:62:7f:e7:
         ac:f0:1d:de:b8:7e:f0:7d:7f:8e:9a:19:14:37:7f:e0:a0:e2:
         fe:19:9e:90:ad:9b:ae:41:ab:3f:b5:f6:be:65:f4:c7:54:81:
         45:d3:52:36:e3:59:61:f1:2e:be:6a:03:b5:70:fb:26:83:27:
         c3:0a:b6:13:25:00:49:46:d6:e6:c2:98:20:5f:44:58:98:c2:
         b8:33:0b:a9:92:0c:50:2e:02:1b:5e:9f:3e:0a:ef:1b:b9:95:
         f6:9f:5c:ed:07:d1:1e:b8:8e:75:df:fa:6d:fd:21:82:35:01:
         a2:c8:81:0b:ee:f6:3e:58:da:e5:12:56:5f:7c:67:fe:b3:7c:
         e4:f7:f4:f8:ea:3d:18:9a:f8:bc:a0:31:2c:a9:0d:95:76:4c:
         81:23:f9:9b:0f:1a:66:bc:a5:15:b1:d7:95:00:83:b6:6d:02:
         e3:29:56:71:46:ed:33:14:cb:41:2c:1e:35:01:93:58:f0:50:
         99:e3:20:14:f3:3d:7a:d7:c4:4a:69:db:9c:4b:c0:83:40:7a:
         ee:82:ee:5e:b7:7f:9f:3d:4f:0d:bd:76:f3:63:8f:bb:cc:87:
         07:ce:29:40:52:58:d2:b2:3e:d0:f9:50:c4:9f:38:e0:4d:ba:
         10:23:c1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:04:36 2026 by rpki-client