Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
File:                     OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft (raw, json)
Hash identifier:          R7Hu1LwwcPiCL2dz0L6Ko4nR8uYXLl+5rYbJTa4OJWQ=
Subject key identifier:   34:C3:AB:56:7A:AF:29:04:6D:82:FC:06:E7:FC:2A:4F:03:0D:6E:2A
Authority key identifier: 3B:07:64:71:3E:5C:8B:1D:7D:2E:CE:04:8E:4E:BC:13:94:28:ED:C3
Certificate issuer:       /CN=3b0764713e5c8b1d7d2ece048e4ebc139428edc3
Certificate serial:       019EC06E17880C90D443ECD01577829D51F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
Manifest number:          014A
Signing time:             Sat 13 Jun 2026 10:01:40 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:40 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:40 +0000
Files and hashes:         1: LcI_BXMvY5aSE3vIzLyzwrL0zuw.roa (hash: slELEFAipdts8+oeGkNV3YMhCrDdwvjfJkdcNFFBnug=)
                          2: OwdkcT5cix19Ls4Ejk68E5Qo7cM.crl (hash: cSHijVDYHmzA3wF0BZWFqKOQ6+0B73VhxTwQGZ9JLpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6e:17:88:0c:90:d4:43:ec:d0:15:77:82:9d:51:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0764713e5c8b1d7d2ece048e4ebc139428edc3
        Validity
            Not Before: Jun 13 10:01:40 2026 GMT
            Not After : Jun 14 10:01:40 2026 GMT
        Subject: CN=34c3ab567aaf29046d82fc06e7fc2a4f030d6e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:65:9b:42:36:ae:e8:e7:48:7f:b2:34:45:bc:
                    d9:67:bb:9a:f0:77:ef:07:a2:cd:ad:88:1b:9e:75:
                    f9:f9:8f:ce:3b:00:f2:25:0d:1a:00:e3:fe:e0:0e:
                    7f:a5:e4:40:9d:54:b9:de:a7:80:75:17:89:a9:0a:
                    1c:be:9e:98:36:22:d6:10:14:4e:2c:a0:a8:3c:c0:
                    32:78:00:90:f1:8b:7b:70:05:49:8b:d1:75:bc:43:
                    f7:83:ae:80:1d:78:81:b9:b1:07:10:da:e6:0b:2a:
                    ec:af:23:6f:6c:3c:b5:83:ca:2c:0d:86:a7:a8:63:
                    72:1f:24:66:3c:16:27:1e:fa:37:f1:13:59:04:34:
                    96:40:0b:64:66:08:d9:ca:3d:92:cb:c8:93:8c:ae:
                    46:32:cf:64:52:f7:db:97:76:cd:73:86:4e:35:f4:
                    37:4d:05:83:ab:91:29:a2:3a:a1:08:69:b3:bb:2a:
                    8c:18:4d:4e:b8:e5:11:51:8e:af:19:ea:24:64:c0:
                    12:9f:9e:3f:88:14:6f:68:5e:d9:1e:cd:d3:77:54:
                    eb:d7:20:82:72:b2:50:87:56:d8:2f:99:0b:96:59:
                    99:13:ed:ce:19:3d:33:da:d2:4b:a1:80:c7:b6:93:
                    da:b9:a3:65:6a:a6:2d:e7:bf:38:1a:96:22:dc:c3:
                    5a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C3:AB:56:7A:AF:29:04:6D:82:FC:06:E7:FC:2A:4F:03:0D:6E:2A
            X509v3 Authority Key Identifier:
                keyid:3B:07:64:71:3E:5C:8B:1D:7D:2E:CE:04:8E:4E:BC:13:94:28:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f8:b3:28:8a:00:6f:6c:bc:49:b1:a2:cb:16:ea:6e:13:65:
         ae:20:cb:8f:1a:65:06:12:40:07:9c:c1:92:ea:35:f9:b6:18:
         dd:47:ce:82:02:61:0c:2f:6f:77:86:8f:b1:1d:b0:9b:46:6d:
         63:a1:ca:55:af:d7:b8:05:5f:99:91:7d:05:2c:04:7e:6e:3b:
         b8:94:68:bf:7c:ab:ad:64:94:99:3f:2d:a1:35:e6:8e:85:19:
         d4:43:3c:4b:3d:6c:9c:df:76:8b:ca:26:9a:df:78:76:bb:f1:
         a7:ac:ff:f2:9c:9f:b7:a7:f7:05:5d:c2:bc:45:12:3f:44:c5:
         bf:cf:22:01:cc:da:2b:9e:38:bb:7b:2d:1b:71:6d:03:0b:5e:
         94:cd:45:5b:b3:d8:d8:32:f0:38:fe:22:fb:14:b0:b1:1a:ab:
         f8:4e:1a:78:17:a9:b1:f9:ec:f4:1e:30:0e:de:6e:38:ba:5b:
         37:76:33:58:a2:b2:32:41:a8:8d:e6:41:8b:fe:4b:ea:ad:df:
         11:72:47:c5:e5:a9:d1:ca:74:74:9a:95:9a:69:d6:cb:3a:ff:
         01:ed:67:61:15:80:06:51:82:bb:c6:9b:ae:64:dc:cd:5a:0c:
         b8:a8:c5:6d:95:a6:56:e8:43:64:38:e7:97:c3:6b:2f:4a:30:
         92:eb:0d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:48:18 2026 by rpki-client