Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
File:                     OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json)
Hash identifier:          qB0zlMIhg5hLX3ZRlvcxjTWhSfysOz5bDZHWQtvjMk0=
Subject key identifier:   77:54:3F:4F:52:9A:2C:58:2C:65:16:28:F9:11:E8:A6:E1:70:25:38
Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
Certificate issuer:       /CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Certificate serial:       019EBF5A999D07CBDCDC7409A41F2446A8EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
Manifest number:          18EA
Signing time:             Sat 13 Jun 2026 05:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:46 +0000
Files and hashes:         1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: dhiXi6Id1SZcD7+E8MqCarlz/OjnK+e+k08Pc1XEIkM=)
                          2: qOowaPdAtIoEeA8UwWKl0WeOo_E.roa (hash: qf6D/9fKMsy5vRBqrt+Mp9eken3A/z5tlK1SkhHLKO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:99:9d:07:cb:dc:dc:74:09:a4:1f:24:46:a8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb
        Validity
            Not Before: Jun 13 05:00:46 2026 GMT
            Not After : Jun 14 05:00:46 2026 GMT
        Subject: CN=77543f4f529a2c582c651628f911e8a6e1702538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6e:50:9d:f4:97:95:b4:86:0b:18:f6:c8:64:
                    b6:2b:b0:bf:9f:8a:a1:44:9d:b2:46:ac:52:4e:4d:
                    d2:57:23:ee:66:97:e4:5c:e5:42:bd:bd:c6:a8:75:
                    34:09:3a:f1:83:96:ff:6d:ae:1c:03:74:e0:a4:c5:
                    b7:74:72:15:7c:91:76:37:d5:0e:21:9b:5b:a3:d8:
                    2c:e6:ff:fa:a5:a9:68:37:ef:04:eb:59:6c:50:c0:
                    9f:11:d1:2c:33:10:0a:e4:e7:ac:82:ce:d1:c6:96:
                    1d:9c:a3:27:ca:f6:5f:04:30:02:a8:80:5e:4a:5c:
                    7f:b5:65:19:c1:95:c8:1a:c6:75:88:63:d6:31:37:
                    83:12:ee:8b:25:55:9a:10:fb:c0:db:9a:54:4b:e0:
                    67:83:85:6a:da:d1:93:ce:00:6d:62:c1:06:be:bc:
                    bc:17:27:0f:63:8c:bf:5b:f6:c6:ea:4a:47:7d:91:
                    6e:e3:cc:24:8d:06:27:3d:79:b2:cb:3d:42:08:46:
                    1f:45:b7:40:15:a1:99:26:46:79:62:a3:76:17:14:
                    18:67:10:ec:a5:eb:73:0d:b4:be:7d:7d:bc:34:ae:
                    cc:6d:21:52:f1:af:72:42:2f:8d:c2:5b:b8:82:73:
                    93:f6:ef:0d:2e:e4:e2:2e:fa:18:94:c4:e2:64:3f:
                    7f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:54:3F:4F:52:9A:2C:58:2C:65:16:28:F9:11:E8:A6:E1:70:25:38
            X509v3 Authority Key Identifier:
                keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:96:2c:88:b6:10:90:ba:ed:a5:14:a8:76:89:a8:d4:a6:d5:
         c2:94:62:7c:c3:de:07:c3:fd:c1:81:ac:b9:5c:71:ee:57:8f:
         5e:8f:a3:d6:a9:a3:02:11:2a:c8:0c:1d:f8:b3:04:35:0a:91:
         a8:b8:41:00:d8:72:50:eb:d1:9f:2f:c4:7e:4b:03:aa:3d:a2:
         76:d0:b3:a6:25:e4:f6:d1:54:76:6b:c4:d3:39:9e:e0:37:83:
         a3:80:f1:58:6d:61:af:b0:20:53:98:a0:d3:af:95:3a:36:14:
         5a:2f:7d:a9:d7:a0:f5:00:d7:33:fc:ac:a5:de:d2:1e:86:1e:
         e5:ff:77:04:d8:2e:3b:8a:ea:9e:89:c9:5a:82:c4:a3:64:e6:
         89:c0:2f:17:f1:0c:cb:b3:49:0b:1f:7d:45:6d:94:95:ef:f2:
         00:fa:f7:95:c0:38:e5:45:9a:56:e3:6b:5c:6b:d4:43:96:89:
         36:66:38:8f:20:87:dc:31:fd:75:3b:90:d5:b0:1d:c3:85:39:
         bc:24:81:3e:ad:4d:fa:a5:66:e0:81:79:66:92:e4:3b:a0:69:
         a1:6d:e9:18:17:1f:e1:b6:51:3b:55:b7:1a:d8:a9:14:5f:d2:
         e3:43:a9:c4:f5:74:11:ff:e5:41:98:05:66:f1:5a:6f:9f:ec:
         28:c8:54:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:23:23 2026 by rpki-client