Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
File:                     OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft (raw, json)
Hash identifier:          gBKRPE0I9UkLckxKzucLd0vWlngjQhgzSuskAEQup24=
Subject key identifier:   28:AF:B0:42:E2:F2:EF:65:DB:DA:68:E9:96:28:36:4D:1E:9E:2B:17
Authority key identifier: 3B:07:64:71:3E:5C:8B:1D:7D:2E:CE:04:8E:4E:BC:13:94:28:ED:C3
Certificate issuer:       /CN=3b0764713e5c8b1d7d2ece048e4ebc139428edc3
Certificate serial:       019FAC07C6FAF785581DF9FA7C4533EFFCAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
Manifest number:          01C4
Signing time:             Wed 29 Jul 2026 04:00:18 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:18 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:18 +0000
Files and hashes:         1: LcI_BXMvY5aSE3vIzLyzwrL0zuw.roa (hash: slELEFAipdts8+oeGkNV3YMhCrDdwvjfJkdcNFFBnug=)
                          2: OwdkcT5cix19Ls4Ejk68E5Qo7cM.crl (hash: V0CV6xUx+6+zjMGRHiusBT3vvqHNtTqzann6F5+fH60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:07:c6:fa:f7:85:58:1d:f9:fa:7c:45:33:ef:fc:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0764713e5c8b1d7d2ece048e4ebc139428edc3
        Validity
            Not Before: Jul 29 04:00:18 2026 GMT
            Not After : Jul 30 04:00:18 2026 GMT
        Subject: CN=28afb042e2f2ef65dbda68e99628364d1e9e2b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9d:cf:d6:7d:2a:4b:d2:81:77:d3:10:f7:48:
                    3f:c6:08:9a:17:1d:c8:31:87:53:92:03:39:50:b3:
                    02:16:18:27:60:22:30:b3:4b:02:47:52:f2:7a:db:
                    57:f7:e4:35:28:00:0e:a1:c4:da:2b:24:62:03:37:
                    4d:3a:69:94:b2:c0:50:cf:86:b8:c7:6c:a0:b4:a8:
                    e5:95:c7:ed:4f:a7:9e:e2:34:3d:79:36:b6:39:35:
                    62:54:32:66:c2:88:18:b6:2c:52:d3:91:c3:3b:ed:
                    34:ca:0b:77:98:d4:7c:c9:e7:e4:97:df:99:5e:3c:
                    6b:fc:be:63:0b:9e:c9:a0:8f:12:62:12:6d:d7:84:
                    d7:8e:1a:6a:ae:10:17:0c:4b:c6:fd:b2:ff:bf:15:
                    ae:d7:21:85:2c:f2:ba:94:cd:ca:c1:ad:01:cb:a5:
                    f6:4c:17:4c:40:22:3c:b5:68:31:cd:ff:d7:fd:24:
                    f3:7e:52:34:91:85:69:cc:33:47:aa:b5:ec:2d:fd:
                    4b:5d:bd:f5:21:b5:53:09:ba:99:0c:6d:02:c2:0b:
                    f7:49:b2:74:35:90:1e:18:e4:5b:28:ca:c4:22:9f:
                    51:96:cf:f5:c7:5b:7e:bd:be:88:df:b8:eb:8e:31:
                    00:f1:83:6c:3c:a0:86:e4:d2:5a:65:0d:64:c8:20:
                    db:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AF:B0:42:E2:F2:EF:65:DB:DA:68:E9:96:28:36:4D:1E:9E:2B:17
            X509v3 Authority Key Identifier:
                keyid:3B:07:64:71:3E:5C:8B:1D:7D:2E:CE:04:8E:4E:BC:13:94:28:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:7d:4e:4c:d7:97:44:3b:e5:37:b4:0e:3f:e7:b7:fe:34:c3:
         f7:7f:5f:aa:3f:79:38:ee:ad:51:b7:29:8f:a2:9e:49:15:6b:
         e3:d5:64:f5:89:3e:29:2a:e0:5e:47:42:32:eb:5a:1b:22:75:
         d5:24:0e:94:ce:b4:fc:bb:e3:b9:d2:05:ec:6a:09:ab:2d:50:
         fe:e9:af:32:ec:75:a0:bb:1b:cb:59:11:f2:35:8d:ff:76:bb:
         02:aa:12:4f:42:17:9a:1b:aa:c2:a2:b6:05:ee:a9:cd:ff:de:
         64:6c:52:a3:ec:49:19:a7:a5:33:77:45:b1:2b:7a:01:db:fe:
         99:aa:63:05:b9:8a:52:81:0a:1f:10:16:b5:42:38:d3:44:93:
         ee:c8:55:f4:be:09:07:4b:c6:49:6d:b9:c7:d6:81:fc:8b:31:
         75:81:9f:e8:90:7c:c7:86:e6:ce:43:7b:a3:75:9b:0c:f4:28:
         c5:67:67:01:73:5c:08:76:ba:ca:6e:8c:3a:95:23:f8:87:19:
         75:d9:d6:48:ed:ac:dc:3e:95:40:b4:91:da:6f:de:f9:ff:b4:
         bd:4e:a2:6b:da:88:2c:71:fe:d2:94:96:85:96:59:5c:b2:88:
         d4:fc:79:d2:32:08:ae:15:ad:a3:c6:d2:c3:00:51:08:af:8d:
         0d:95:e8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:46:27 2026 by rpki-client