Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
File:                     O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json)
Hash identifier:          S0XUsTOSbUKlII09JX5al0UHW8w32VW5jz+xdbN+DTI=
Subject key identifier:   C6:11:0E:13:29:66:6B:ED:3E:4C:81:82:85:13:EF:33:FA:03:C7:10
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Certificate issuer:       /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial:       019EBF5AF2256F34CF6C0BF8705B467C9C5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
Manifest number:          0C4B
Signing time:             Sat 13 Jun 2026 05:01:08 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:08 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:08 +0000
Files and hashes:         1: 0-CfXr5FSJ7QMjoY8mIHPZBgI3Q.roa (hash: MoCJmm/n6jdFT/Ij8oC3QyzUQTVWWjSnQl4LbZiISEk=)
                          2: IynmjmR1yvEbVrkfJa9cZIwyE10.roa (hash: RK1dN6BbvQCv2h0gP86hx6Y2IphNnsgKhjETxDJJmvI=)
                          3: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: j3Z13KaT2B2nJnhBZoxtUJNCSoNxx/cLrvf+nq+SNHY=)
                          4: X7Fe-9JMuA6Ug7TiaGHAjUILYmE.roa (hash: PQTMyN3Zy2xwNXQnsr/aq1k71EK2wul/fPqvqcPXDIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:f2:25:6f:34:cf:6c:0b:f8:70:5b:46:7c:9c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
        Validity
            Not Before: Jun 13 05:01:08 2026 GMT
            Not After : Jun 14 05:01:08 2026 GMT
        Subject: CN=c6110e1329666bed3e4c81828513ef33fa03c710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ce:98:7d:28:ce:06:73:73:00:7c:61:af:3f:
                    fb:2d:42:44:3f:84:64:13:8f:77:6a:ad:51:4a:67:
                    7e:a8:17:be:d6:57:94:c4:57:1d:26:b0:79:03:ba:
                    c9:d4:89:33:14:ee:aa:95:02:3d:04:31:45:92:4d:
                    29:02:ee:89:2d:ba:e0:55:8d:9c:74:c2:2f:55:46:
                    50:5f:e1:19:fb:07:93:08:a8:bf:0d:a0:13:8d:f9:
                    8c:c2:f9:84:02:31:c1:ee:66:62:59:ea:d0:4d:a9:
                    a5:dd:0b:25:d9:d0:50:35:bd:1c:8d:78:d3:26:07:
                    f3:a9:45:98:a1:2a:6c:c5:72:c2:2e:27:78:bf:fb:
                    9b:c5:1c:1c:22:e9:fb:ed:dd:63:30:91:5b:17:9b:
                    45:db:c1:84:aa:c1:b6:ae:bd:6f:ed:d7:0c:5f:8b:
                    90:b7:b0:38:36:2c:a5:b5:f9:08:06:11:c9:91:dc:
                    af:a0:8d:62:73:35:d0:ea:97:09:6f:0a:00:59:49:
                    31:bd:6d:fc:03:e2:7b:f3:a5:04:ae:f1:7f:09:31:
                    f3:10:72:bc:cd:ce:31:bd:fc:97:e8:82:c0:aa:f9:
                    c7:19:02:87:51:5f:ff:58:de:18:f0:79:ea:60:f1:
                    f3:cf:a7:c3:03:5d:49:49:b4:fd:24:43:a8:f7:7f:
                    12:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:11:0E:13:29:66:6B:ED:3E:4C:81:82:85:13:EF:33:FA:03:C7:10
            X509v3 Authority Key Identifier:
                keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:70:bf:61:01:4a:f3:46:31:e9:ae:a5:3e:10:99:9c:3e:b8:
         a2:55:be:28:ac:7f:17:4c:9e:24:24:e0:40:e3:9b:04:84:31:
         f1:63:a8:b2:9f:47:1f:fb:3d:9a:ba:ab:2a:16:d6:c9:fa:a6:
         b7:fe:a5:f2:d5:43:6e:65:5b:ba:3f:a4:32:f6:a7:c9:98:39:
         14:2a:65:97:d7:59:3f:78:1a:79:71:6a:66:17:dd:36:74:4c:
         80:e0:9f:24:ae:00:6b:50:f1:7c:ed:4a:27:4f:64:65:53:eb:
         a8:49:35:ad:7d:84:3b:5a:93:a2:7d:ce:92:57:8e:c0:1b:d7:
         29:35:14:f6:9a:94:bd:f2:82:d1:e3:13:80:88:ac:8f:18:81:
         b7:4e:8e:85:20:66:a8:25:00:a2:cb:bf:af:77:67:e3:35:e1:
         c3:77:3c:8e:fa:4f:30:ef:7a:5f:fa:26:bf:0a:4f:e1:66:67:
         66:7c:e7:30:a2:cc:8d:4f:a2:70:40:f1:f8:a9:e9:8a:ba:ff:
         f6:07:0a:89:b9:3e:ee:f3:85:0a:a0:bb:53:e2:86:f1:e8:4e:
         b0:ed:dc:cf:39:ca:7f:52:b4:6e:09:d0:9c:81:0c:8f:84:ab:
         ef:9f:5a:25:96:c7:1e:3d:0e:b7:f6:1a:5d:ed:bd:ca:5f:a6:
         8a:92:35:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:42:25 2026 by rpki-client