Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
File:                     O_-2BdzjBg37ZtzMqI632grHSvE.mft (raw, json)
Hash identifier:          clBfb75mQaF4OiJCH87cjb9RsgWvoUxyBTZbg+dt/hw=
Subject key identifier:   08:14:E7:10:5D:50:1E:6A:6C:A9:54:A1:27:45:1E:1C:56:A0:2A:E0
Authority key identifier: 3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
Certificate issuer:       /CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Certificate serial:       019EC1497A4793C6EF230F5429767AABA5C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
Manifest number:          0D5A
Signing time:             Sat 13 Jun 2026 14:01:18 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:18 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:18 +0000
Files and hashes:         1: 8qvgkfD_thQ4z_WLXGgGH3lh3Jo.roa (hash: lpIuAWveKCKeQMUzXLJXzixQ82Be/vxjOdAft2Y84BY=)
                          2: O_-2BdzjBg37ZtzMqI632grHSvE.crl (hash: 3AXB9kiwKNB8x9/t+pMkGuKbn5nj05Lul/EhUrY0fT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:7a:47:93:c6:ef:23:0f:54:29:76:7a:ab:a5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
        Validity
            Not Before: Jun 13 14:01:18 2026 GMT
            Not After : Jun 14 14:01:18 2026 GMT
        Subject: CN=0814e7105d501e6a6ca954a127451e1c56a02ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:c2:9f:9e:2e:03:ce:1e:2c:94:2d:bf:b7:
                    bc:cd:72:41:03:9c:3e:d5:cc:81:df:66:cc:e0:6a:
                    b5:14:64:f5:55:b3:fe:36:51:07:db:85:a8:cb:ea:
                    f1:80:9a:f2:ff:86:a2:ec:25:4a:69:d8:e7:e8:59:
                    7f:75:cc:eb:d9:99:01:0c:24:c6:40:96:9b:ab:01:
                    31:03:00:c5:0d:e6:31:f1:dc:03:ba:ac:2a:0b:5b:
                    1a:32:33:ad:2d:df:6a:7f:57:e0:8d:23:2f:9c:0a:
                    f4:32:b4:a1:b4:43:9d:2e:17:48:28:8c:89:dc:d9:
                    02:22:56:16:46:b6:bf:44:34:30:bc:47:07:c3:05:
                    c0:d1:ab:6f:c1:68:b3:f7:da:bb:8e:30:69:3c:b0:
                    53:ed:07:a6:7e:06:21:6a:96:a7:cf:29:c5:ee:c8:
                    8e:75:c0:2b:9d:9b:9e:80:61:82:f3:ec:34:03:3f:
                    ba:3d:4a:d8:06:eb:a3:72:b2:8e:4e:c6:09:c2:1f:
                    01:ea:37:dd:aa:12:15:b7:a5:fd:ce:c0:82:1e:99:
                    38:a8:46:33:02:34:de:18:96:93:a3:57:8c:c3:06:
                    62:30:11:67:d8:5b:31:0f:f0:3d:d2:3f:4b:25:eb:
                    f8:60:6d:af:5c:08:e3:3a:1e:52:53:39:79:8a:0a:
                    af:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:14:E7:10:5D:50:1E:6A:6C:A9:54:A1:27:45:1E:1C:56:A0:2A:E0
            X509v3 Authority Key Identifier:
                keyid:3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ee:c7:c8:36:51:e8:3d:b6:52:21:41:9e:46:b8:2e:8f:8a:
         bc:87:d6:5f:6f:af:70:e7:53:f3:2b:ee:bd:6a:f3:8d:81:38:
         95:ae:78:5b:c4:5f:d8:87:65:47:61:d6:38:a7:3d:b0:87:e7:
         bb:d2:c3:a4:ad:8c:68:0c:5d:81:95:8d:4e:28:69:70:ba:d2:
         ea:ad:15:f4:69:16:cc:92:32:96:31:3f:b4:a2:65:ab:35:3d:
         f5:54:ad:f7:99:e4:e4:94:fb:6a:d1:2b:e9:d7:17:ba:20:7e:
         86:f7:73:b5:cc:61:ff:37:77:7a:f2:54:79:78:ee:fe:b4:80:
         fa:15:e8:1c:99:0f:c0:38:2e:d5:2a:e0:53:a4:d1:ae:0f:fd:
         6a:be:18:93:9f:e0:49:46:b7:52:97:1d:52:31:e3:7f:d2:8c:
         69:9f:a2:f4:8f:3e:26:cb:fb:0b:45:62:d8:95:3c:5a:85:85:
         f2:43:11:44:4f:0f:5a:65:92:8f:7b:0c:9d:57:e5:f5:59:66:
         03:af:07:a1:80:b8:1e:c8:7e:93:60:4a:f6:5e:96:33:6b:62:
         53:9f:d3:cb:1d:f9:e4:ed:a8:ee:d8:d6:b2:bb:52:53:a1:36:
         79:f0:96:ad:d9:88:70:f6:9c:b5:a2:7b:f5:f3:17:56:ee:82:
         61:4c:d5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:59:15 2026 by rpki-client