Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
File:                     oSCGrcccvsWuoqH4lU36ZCtTDDs.mft (raw, json)
Hash identifier:          q4BOZmOC0YiDTBTASoeOgkId8s+AvgQSb+plyOxg+E8=
Subject key identifier:   F1:2B:E8:1B:54:C2:2F:19:D9:68:7D:43:D5:D9:D0:23:BB:2E:80:7B
Authority key identifier: A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B
Certificate issuer:       /CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
Certificate serial:       019FAC08B6F8711D9ABD765AE2010F1B84D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
Manifest number:          19D6
Signing time:             Wed 29 Jul 2026 04:01:19 +0000
Manifest this update:     Wed 29 Jul 2026 04:01:19 +0000
Manifest next update:     Thu 30 Jul 2026 04:01:19 +0000
Files and hashes:         1: 0xOSlFF4qEJ0-V611FUixhfdX0Q.roa (hash: 2cl0zm8Cn1RFnkSxPtYibLq9wI+6x0kOdV+BL5DuDG4=)
                          2: oSCGrcccvsWuoqH4lU36ZCtTDDs.crl (hash: A7Pc1c39TcZyLYYKY/B7wojIKmZtJeCfG/dwjYRIGWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:b6:f8:71:1d:9a:bd:76:5a:e2:01:0f:1b:84:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
        Validity
            Not Before: Jul 29 04:01:19 2026 GMT
            Not After : Jul 30 04:01:19 2026 GMT
        Subject: CN=f12be81b54c22f19d9687d43d5d9d023bb2e807b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cf:37:4d:33:19:76:f4:ff:30:63:32:00:11:
                    0a:4d:27:65:f7:0f:45:85:60:75:a4:b9:22:37:40:
                    2f:ff:a6:9b:8a:c5:d0:ca:ff:6b:7e:e4:9a:15:2d:
                    5e:6f:ad:ac:78:cf:70:8e:37:f6:15:c9:0d:de:21:
                    0b:ce:39:83:fb:68:67:92:79:f7:d5:7f:19:ed:fc:
                    66:c6:3b:65:c6:69:92:4a:ec:a1:00:50:45:58:d6:
                    f4:94:dd:3f:c9:2e:ec:e8:9f:6c:0e:ad:2c:f6:9d:
                    c2:3a:8d:7e:de:6b:57:e8:b5:fd:f6:a7:08:bd:be:
                    41:25:84:e2:70:e6:42:ae:56:60:f6:d5:e2:dc:a3:
                    79:ee:b7:bf:50:1e:c6:9a:45:4a:c4:ee:9e:8d:75:
                    a3:b6:41:c7:63:4a:22:60:35:08:17:a2:06:1b:c9:
                    02:ef:fd:68:8f:fe:66:79:4e:d3:4c:c7:af:94:09:
                    b6:6b:e4:b6:77:e7:89:f8:63:33:20:06:54:88:8e:
                    20:97:d5:70:34:f6:79:04:41:a5:c1:4d:1c:a2:b5:
                    bb:d8:a5:1a:cd:0c:14:94:21:8e:11:0d:4b:c5:1d:
                    92:f3:e9:54:1a:3f:c0:41:01:78:82:ae:fe:f6:45:
                    e6:7d:87:a8:67:69:29:4c:74:a8:21:41:c4:8b:e6:
                    90:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2B:E8:1B:54:C2:2F:19:D9:68:7D:43:D5:D9:D0:23:BB:2E:80:7B
            X509v3 Authority Key Identifier:
                keyid:A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:52:48:93:fd:7e:fc:32:09:b6:8f:ca:2c:78:8e:ca:80:9d:
         ea:d6:9f:5d:c8:a1:06:fe:a7:71:d4:c6:15:bd:f5:2d:3a:5a:
         b7:76:ab:57:7c:14:80:7e:c1:d8:7b:2a:39:26:ec:71:e2:0b:
         9a:be:17:4e:b8:e9:54:6b:f5:a7:2d:4d:60:a5:ab:c1:34:00:
         3f:59:43:bd:7e:4d:8d:e1:cd:1e:5e:28:e2:4a:d9:fd:22:23:
         97:6a:86:b8:53:74:2f:f9:eb:5f:76:9b:36:df:cf:4c:c0:7c:
         6c:6b:24:47:c9:52:c2:14:43:da:ea:31:75:cc:a2:c4:27:a6:
         33:49:ae:fd:79:4b:1f:b1:18:03:58:91:36:b0:f2:ab:80:39:
         db:2d:a7:b4:27:c2:cb:aa:fd:62:b1:8f:43:f5:e9:25:95:89:
         9f:2f:a4:fd:3f:13:e1:c4:a4:e5:df:c4:fd:0f:57:e6:1a:03:
         49:89:12:40:c7:e5:ea:19:b7:f0:a7:b0:e6:7f:b3:c9:c2:f4:
         e6:f8:81:39:bb:34:1f:71:85:0d:74:59:bf:ea:7a:41:2d:38:
         40:72:05:63:22:1e:b9:ae:2d:d2:38:74:f3:dc:0c:81:2f:23:
         fb:95:0b:2b:93:77:5d:71:9a:28:19:c7:01:f6:9c:f8:79:74:
         c3:55:b7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:02:42 2026 by rpki-client