Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
File:                     OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft (raw, json)
Hash identifier:          6Sa4ulf71T+ofND1WdYVJKxflaWO4X2tFACPxnmrOR8=
Subject key identifier:   7B:BE:D4:BB:C8:6A:A9:5E:35:E5:B0:AF:C7:71:68:F2:38:89:41:14
Authority key identifier: 3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
Certificate issuer:       /CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Certificate serial:       019EC36E304F0708141911E9C47803CE5B9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
Manifest number:          0212
Signing time:             Sun 14 Jun 2026 00:00:38 +0000
Manifest this update:     Sun 14 Jun 2026 00:00:38 +0000
Manifest next update:     Mon 15 Jun 2026 00:00:38 +0000
Files and hashes:         1: OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl (hash: /EGUaaQNf4cwmFHDdQD76FlPIB1ho/S4h20WWwWghT4=)
                          2: ncoQIgVQq-l4i3o7afgIeOVITh8.roa (hash: UCj0b7zz0t4ZSAiuxt+hcxtD38EhmlG90E6jbVZ4rNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6e:30:4f:07:08:14:19:11:e9:c4:78:03:ce:5b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
        Validity
            Not Before: Jun 14 00:00:38 2026 GMT
            Not After : Jun 15 00:00:38 2026 GMT
        Subject: CN=7bbed4bbc86aa95e35e5b0afc77168f238894114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dc:e5:fa:91:9d:53:b4:6a:a1:2d:21:63:94:
                    be:28:5a:5b:25:8c:c4:32:90:22:5a:78:e5:39:ba:
                    82:d3:0c:33:32:77:fc:cd:95:10:89:5a:37:6a:6e:
                    c9:c5:54:a6:36:67:ec:6d:d9:1d:bb:3c:f2:db:4f:
                    64:e3:c8:48:f8:9b:bb:23:06:b8:fa:eb:b5:d5:ea:
                    b8:cf:0e:3f:6d:6e:e4:22:a5:97:d6:e8:8c:97:6e:
                    96:83:7b:e5:4b:8b:ca:0b:61:57:89:75:00:cb:0d:
                    f2:59:ec:31:fb:39:93:0c:72:69:50:10:da:9f:fe:
                    d9:11:c8:20:90:d3:0f:88:24:72:45:f6:5d:67:09:
                    34:96:16:3d:79:d0:4b:67:93:f7:6f:37:6e:19:78:
                    d5:97:8a:c7:8f:e8:ae:94:08:87:f4:8d:d2:38:6d:
                    e1:98:6a:ab:2b:e6:7f:cd:01:6d:3a:92:14:b8:6d:
                    67:81:9c:b0:29:bf:0d:04:84:c5:9f:a6:2b:d0:fe:
                    45:25:9c:f6:f5:35:52:c5:fc:b1:ea:d8:76:2d:28:
                    c5:56:4b:90:88:3d:88:a4:d8:f2:c6:ec:6e:e5:a9:
                    da:b0:b9:1e:ac:1f:45:35:7c:36:df:c4:29:9f:6e:
                    8b:1c:74:a7:e7:3d:f4:6f:e1:aa:b2:fe:e0:20:cc:
                    2a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BE:D4:BB:C8:6A:A9:5E:35:E5:B0:AF:C7:71:68:F2:38:89:41:14
            X509v3 Authority Key Identifier:
                keyid:3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:74:71:92:99:7a:3d:1a:13:50:8f:68:e6:78:6e:50:a5:2f:
         97:17:2c:1f:03:06:11:b3:6e:8e:7e:43:32:ba:8e:db:05:1b:
         48:a6:0f:40:74:3c:86:b9:0b:ad:32:51:bc:c2:8b:36:3d:73:
         42:79:21:03:26:26:db:53:64:89:ba:13:fe:b1:4a:22:01:b1:
         85:7f:5f:04:8c:1d:e0:48:8f:ba:d1:2c:b1:58:e0:2d:dd:ac:
         48:b9:cc:84:45:d4:79:84:81:5e:10:94:a8:4e:8a:92:38:7e:
         df:33:85:96:67:2d:ac:e9:a0:52:2a:fa:36:6d:13:8f:e4:33:
         ef:04:8b:ce:cd:e0:b1:60:0f:c9:3b:fa:bd:76:f0:22:4f:2b:
         cc:c6:1f:55:a6:44:b8:07:b4:50:0c:07:63:0f:b4:c8:a6:4d:
         b7:2b:65:21:e8:0d:be:4e:73:16:7f:0a:57:d3:15:d0:a6:d6:
         67:ce:dd:37:cf:5f:48:6b:dc:65:65:22:a9:ce:a0:f8:1d:d4:
         f4:8f:5b:96:0b:da:68:eb:c0:06:08:78:cc:fd:73:0f:fd:e7:
         fb:d9:f4:4c:bb:96:a0:f8:82:37:67:cf:28:45:8f:e5:6c:57:
         3b:d0:3f:ac:ee:f8:02:ba:f6:73:72:f2:03:8c:5f:7f:79:53:
         96:af:11:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:43:18 2026 by rpki-client