Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
File:                     _OJaykNP7rb1c6pGOhLGlAvE0Zg.mft (raw, json)
Hash identifier:          bqzatKGEmehL+9fpiEuy8zTqHiCpKrek3oBbmyL2HAg=
Subject key identifier:   90:BB:DA:F8:E1:81:0F:93:AE:7E:58:6F:AB:CC:70:D7:E0:F1:72:FF
Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
Certificate issuer:       /CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Certificate serial:       019EC25C8626010D5DBE46990CB1C0C6FAD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
Manifest number:          195F
Signing time:             Sat 13 Jun 2026 19:01:43 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:43 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:43 +0000
Files and hashes:         1: IkpqFJlNa2437VP_tcxeJyVAPMM.roa (hash: mlTIEBNdJZbIbhX3NLDEQ4pnepBeofaptKU6NdPs/uI=)
                          2: _OJaykNP7rb1c6pGOhLGlAvE0Zg.crl (hash: 1n9uxagV1/WJDB94jphzEUaPJNAjCvu15ACGRHZlwzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:86:26:01:0d:5d:be:46:99:0c:b1:c0:c6:fa:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198
        Validity
            Not Before: Jun 13 19:01:43 2026 GMT
            Not After : Jun 14 19:01:43 2026 GMT
        Subject: CN=90bbdaf8e1810f93ae7e586fabcc70d7e0f172ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f6:d1:bd:a2:7d:eb:a9:a9:f9:af:16:79:66:
                    9e:d2:8e:f9:00:28:26:c8:de:32:f1:5d:28:2f:09:
                    eb:0c:04:52:e1:69:a9:1a:54:fd:f8:d6:96:05:82:
                    4e:2c:bb:a6:c5:a1:6b:70:5d:bc:59:48:40:bb:9d:
                    a3:94:46:96:93:bf:81:6a:7c:fd:54:f7:17:be:94:
                    9f:98:d6:e5:6a:75:7d:56:cf:80:de:82:40:57:b0:
                    8a:1c:04:2e:5f:31:aa:fa:bd:76:49:0a:b2:9e:41:
                    a7:51:99:c0:e1:42:bb:fc:74:6d:af:35:7d:ae:d9:
                    93:ff:0d:7b:cd:6c:51:ca:15:ba:8d:3f:26:8e:f5:
                    33:37:fb:47:53:58:c9:e5:3a:f7:c1:58:b8:94:92:
                    77:f3:c2:37:aa:0c:ef:52:2b:30:54:74:2a:79:a0:
                    e4:5a:bb:39:55:6b:50:1a:fa:11:3f:8a:15:20:cf:
                    b6:dd:36:40:31:ce:9c:be:19:40:f7:04:67:76:82:
                    42:d3:8d:84:a8:40:54:c4:db:b2:2a:09:8a:f6:13:
                    7a:a1:ea:ee:73:d0:b4:11:44:63:a1:43:93:f9:c0:
                    f0:99:01:1e:15:60:e7:a3:fa:1d:7b:cd:c6:3b:54:
                    e7:1e:17:f5:b0:f2:7a:84:74:5c:19:b8:60:80:3f:
                    79:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BB:DA:F8:E1:81:0F:93:AE:7E:58:6F:AB:CC:70:D7:E0:F1:72:FF
            X509v3 Authority Key Identifier:
                keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0d:0e:b4:7a:ce:6b:2b:25:18:3a:b0:9a:b5:c7:67:27:dc:
         95:28:fc:c2:58:ba:16:d4:82:51:8e:8b:05:75:41:04:7d:fd:
         94:3b:24:19:e8:04:a9:ad:48:c4:a4:d2:6e:53:3a:75:ec:b5:
         ad:2a:32:e5:4d:23:22:94:e6:0a:34:58:35:92:c7:38:ea:0d:
         2d:a8:79:5c:a5:36:9a:38:3f:13:49:52:3f:17:14:c3:4d:64:
         73:74:dc:15:93:eb:73:61:7f:c9:35:9f:81:41:63:78:dd:21:
         71:d2:44:f0:38:aa:df:18:5a:de:c3:8f:9c:2a:15:c7:d0:c3:
         19:e3:45:25:7a:4b:f8:b6:f7:4a:10:19:8a:c7:2d:5c:40:a8:
         0d:85:13:cd:2d:6f:af:37:48:69:56:ec:c2:7f:4c:3a:62:a6:
         c9:c3:b1:48:d2:f8:62:b5:23:f0:bf:86:6b:f3:f1:57:76:df:
         47:e2:7e:00:95:5d:7f:23:a5:ca:1e:db:e5:71:29:7c:3c:23:
         97:8e:54:48:d9:6d:ad:3f:9a:84:9d:78:3c:40:f7:4d:66:37:
         a1:12:09:34:ef:41:30:73:9a:14:86:30:f3:5a:c5:2a:f8:fe:
         14:ed:19:64:bf:99:2f:14:65:f6:39:b2:46:70:18:24:54:49:
         f4:98:ca:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:16:41 2026 by rpki-client