Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
File:                     OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json)
Hash identifier:          iYz7G/Mzz+FejDsKUqRTQUb4yS8BXY/TxTYqGi2VEro=
Subject key identifier:   72:BA:49:6F:21:0E:52:16:6B:9E:5C:47:0A:76:3E:66:64:A9:25:72
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Certificate issuer:       /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial:       019FAB9A2AA6CCB6B7530FA7C1FA8690C3E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
Manifest number:          19DE
Signing time:             Wed 29 Jul 2026 02:00:35 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:35 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:35 +0000
Files and hashes:         1: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: cl1T1Gbde50NJBfSiXzIxvPMqOTQi86DZUXpXEVjDVE=)
                          2: WDi0x8_2l-5Bh0Kx0kgLvxWni0g.roa (hash: ZvSkcDxGhvi+aJsfbms5jhxFpHcmll85L+dtrGm8zwg=)
                          3: csloCIt3CTSVgebL58dJpxOdtC0.roa (hash: esH7P1ArdXIQnwu6qXLQUiXFhHbcU/4jPuyvpFcE9cc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:2a:a6:cc:b6:b7:53:0f:a7:c1:fa:86:90:c3:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
        Validity
            Not Before: Jul 29 02:00:35 2026 GMT
            Not After : Jul 30 02:00:35 2026 GMT
        Subject: CN=72ba496f210e52166b9e5c470a763e6664a92572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9c:71:4d:c2:de:98:9c:5d:48:61:3d:92:34:
                    d5:ad:09:dd:7c:08:01:65:0d:28:63:da:55:d7:56:
                    52:a5:85:e5:c2:37:0a:5d:b5:55:8b:c1:e0:31:5a:
                    8f:fb:e4:04:ad:67:44:08:fe:28:9e:94:58:c2:30:
                    2d:9c:84:ea:de:53:a0:bd:cd:65:d6:8b:b0:6f:6b:
                    d4:bd:14:e7:5d:22:b3:53:0b:e2:f7:12:b5:f5:1c:
                    ca:a8:3f:aa:5e:d5:e5:32:1f:3e:c1:5d:b0:19:18:
                    27:db:9a:be:07:6d:65:f9:00:f6:4a:25:22:79:f2:
                    d6:ef:62:d3:fd:dd:69:63:4f:2e:94:a1:da:e3:a2:
                    f1:98:b0:7b:9c:2a:00:f0:12:29:48:b8:2c:d2:d2:
                    9f:39:50:9a:cc:41:ce:e4:d5:83:21:45:38:fd:3d:
                    70:47:d1:29:ef:85:4e:e7:6e:e1:1f:26:41:58:f1:
                    3b:65:91:a5:ad:67:1d:ae:38:72:80:66:67:c6:3f:
                    d0:03:85:31:04:68:b9:d1:d0:f7:1b:2c:44:26:3d:
                    88:e4:89:91:14:4a:8c:dc:3c:f6:f8:57:d5:bd:27:
                    63:63:68:7e:a8:9e:cf:0b:3b:40:30:5d:fd:e5:4a:
                    75:3e:36:b8:98:d6:9e:a3:8b:5f:f0:40:4b:7a:34:
                    ac:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BA:49:6F:21:0E:52:16:6B:9E:5C:47:0A:76:3E:66:64:A9:25:72
            X509v3 Authority Key Identifier:
                keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:29:fa:6e:da:a0:62:f9:d0:05:84:34:70:56:5a:c9:5e:a8:
         aa:cb:54:7c:23:0d:57:c5:53:cc:de:e4:c1:db:4e:0c:2d:97:
         85:24:8f:c9:e8:0f:70:db:2b:67:0c:7f:ae:7b:ce:8e:e4:40:
         aa:53:5a:d6:16:e6:21:12:d9:47:05:11:ba:19:34:6f:79:a3:
         1c:c4:9c:9a:9c:24:fb:33:9e:84:ad:99:33:f5:33:a6:7e:da:
         a6:a3:de:90:d7:de:1e:d5:dd:55:d7:e3:a6:14:63:e6:bf:80:
         bc:2a:ac:e4:40:c8:1d:cd:64:bc:60:66:f7:a7:e8:fa:52:6f:
         cc:05:75:ed:2c:99:b4:22:97:b9:fe:5c:c2:e2:8d:9d:61:d1:
         4e:67:a4:dc:22:33:be:c0:9e:04:bf:15:c0:b8:8c:dd:e1:55:
         22:1a:11:38:bd:75:20:df:e7:d0:c0:9e:06:cd:27:f1:6a:d4:
         e6:4e:f4:b2:d5:4b:de:08:cb:cb:7b:d7:4a:7c:c4:6d:b3:4e:
         d5:63:5b:60:27:af:f3:7e:93:28:6b:77:02:f4:b3:1a:cb:fe:
         ef:48:a3:c2:5d:90:a3:35:0d:2f:02:16:a8:bb:97:e6:a4:26:
         cf:9d:58:77:15:f5:84:e9:92:e4:d6:18:d3:95:88:80:3c:ba:
         f1:25:38:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:52 2026 by rpki-client