Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File:                     ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier:          FB0XbGdRKoaLgTncWU7d+Zi3/W6y5txX0LFECvt/S0g=
Subject key identifier:   AF:8B:8F:7A:0E:C3:FD:19:0F:56:4D:DD:EF:98:DA:D6:2B:37:8B:59
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer:       /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial:       019EC2C95C0E3D98B10588014F728E3162DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number:          18FE
Signing time:             Sat 13 Jun 2026 21:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:36 +0000
Files and hashes:         1: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: BHQz1A7Ke9VZnBbVs0rhsz1WG95e+vLikeJg6FmBNd8=)
                          2: s7RCJecrkvhO4O8n4hnHhMn63mI.roa (hash: RMUboypqGxzOTuEkOaIhesKwecXYlREEbxutxlq+fCs=)
                          3: yhoQSW5m0HxnhBThODAYvKmDatA.roa (hash: Zj3xva8IbUjYyCWlM9IRCPCWul21ZtyOBPZl0zgZK3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:5c:0e:3d:98:b1:05:88:01:4f:72:8e:31:62:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
        Validity
            Not Before: Jun 13 21:00:36 2026 GMT
            Not After : Jun 14 21:00:36 2026 GMT
        Subject: CN=af8b8f7a0ec3fd190f564dddef98dad62b378b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0b:4c:f1:2b:fd:4a:17:23:99:0d:2d:15:c7:
                    d0:5a:f5:31:42:72:df:94:af:1f:4a:dc:93:ec:8a:
                    97:e3:c4:39:86:30:07:6b:8c:4a:4f:93:59:04:a7:
                    c8:6c:70:22:8f:a4:7a:82:4d:a0:11:4d:2a:75:a8:
                    ee:ae:3d:cf:8b:1e:4a:2e:0a:8d:6a:3e:9c:96:fc:
                    e4:e6:0a:10:b1:14:9f:ca:fc:4b:1e:94:d8:36:d6:
                    41:0b:3e:a5:ad:7f:ec:27:7f:d4:81:5a:a6:9b:eb:
                    b1:60:c6:12:ac:c0:53:ba:a0:dd:cd:b3:bc:06:de:
                    93:76:e7:c2:d7:b1:c3:c1:46:1c:76:07:06:73:62:
                    f5:9e:6b:b9:5f:33:20:d3:51:ed:67:c7:10:64:b4:
                    77:ae:b1:21:a7:83:f7:95:22:99:53:30:7c:a9:6d:
                    4c:ce:80:42:49:96:21:09:64:bb:f7:71:76:46:e6:
                    6e:8a:60:ef:3f:e2:74:51:72:84:57:7b:ef:a9:b9:
                    bc:86:30:34:9d:83:63:5b:2c:10:4f:a3:6d:d1:b0:
                    9e:f8:2e:91:4b:87:87:75:36:31:d3:b0:ee:9d:c0:
                    f1:4a:10:52:28:0b:54:62:fd:cb:d0:d2:c4:4d:cf:
                    12:13:34:4a:69:4b:3d:34:b3:04:5c:16:2e:d4:4f:
                    0a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8B:8F:7A:0E:C3:FD:19:0F:56:4D:DD:EF:98:DA:D6:2B:37:8B:59
            X509v3 Authority Key Identifier:
                keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:7d:9b:8d:b7:d7:0a:1e:64:62:28:c2:b1:1c:65:28:23:0f:
         53:b0:49:5c:55:57:03:98:9f:2e:c8:52:78:4c:4b:37:5d:5e:
         b2:15:00:ea:dc:1d:b8:ac:40:0e:73:5b:9f:bb:38:b6:64:aa:
         55:1f:6f:9e:99:dd:dd:9b:f2:e4:29:7e:e5:de:27:0f:af:48:
         f5:5b:1d:8f:dd:33:8b:dd:25:93:89:4d:01:51:a7:13:ad:bc:
         0c:cf:2f:98:95:5a:6e:d0:23:fe:1a:46:11:76:61:1e:f0:e4:
         bc:d1:75:ec:ce:a5:3b:e7:06:e0:74:f7:f7:8a:06:f5:0a:bc:
         02:2b:01:53:a0:05:69:3a:a1:94:8d:fd:9d:c3:51:82:25:3c:
         cf:7d:f5:b9:e1:d4:d6:d5:4a:db:96:bd:6c:f6:06:47:51:9c:
         62:07:60:91:ac:33:f0:9f:69:37:54:32:f4:91:17:5f:30:2e:
         0f:d9:5c:b9:57:65:8b:d8:7e:f0:22:e9:36:f1:bc:82:7c:9f:
         20:29:07:ca:61:ee:b4:73:5b:2a:56:5e:a6:1c:0b:cd:34:38:
         d6:1f:0e:9e:d3:5b:eb:f8:82:1e:4b:a8:8f:7c:94:a9:70:fb:
         e7:d5:18:87:35:f2:e4:d4:55:ae:10:4b:42:e1:14:76:47:50:
         46:80:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:44:02 2026 by rpki-client