Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File:                     OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier:          2t6f2XHgCxNk++gTIvul/LIuWEcgav3iwkXm2huWLFQ=
Subject key identifier:   B9:96:17:C4:50:C4:6A:D5:76:F4:82:C7:DB:2C:81:E2:49:14:DF:26
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer:       /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial:       019EC224CBC4B23B5CDB0BAE4E6F12B027C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number:          071F
Signing time:             Sat 13 Jun 2026 18:00:51 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:51 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:51 +0000
Files and hashes:         1: 1pw_z4ALbNcIneHL4Ij33SpACpI.roa (hash: twH8uqFHcds859fXJknbVUO58IQvg3qbZxRTaJIyMwY=)
                          2: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: kUYU7obWb15h/EKmAHQtyS18W3p3pTra0/lBGUwVFJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 18:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:cb:c4:b2:3b:5c:db:0b:ae:4e:6f:12:b0:27:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
        Validity
            Not Before: Jun 13 18:00:51 2026 GMT
            Not After : Jun 14 18:00:51 2026 GMT
        Subject: CN=b99617c450c46ad576f482c7db2c81e24914df26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a9:3f:f5:59:8d:bc:e9:1a:0b:23:1b:98:12:
                    fe:ad:67:8d:f0:25:be:20:cd:f1:b9:a6:d9:1e:4f:
                    1b:9f:91:9e:e8:68:dc:51:74:c2:85:00:e2:52:cc:
                    df:82:a8:bd:18:9f:88:67:c4:0c:b7:97:79:d4:c7:
                    19:c6:2d:26:7a:4c:42:b2:5f:58:3f:b7:ee:91:b8:
                    b5:78:65:52:df:0e:af:0e:43:1c:3d:7e:4b:60:0e:
                    6d:e7:61:98:1d:c7:78:76:cb:4d:66:04:5f:8a:cb:
                    02:b3:80:3d:a1:dc:60:c3:77:c3:c9:93:cd:b3:79:
                    0c:5d:e2:43:b5:81:2e:21:b8:a4:9d:d7:36:82:07:
                    be:f8:df:5e:e9:55:74:5e:40:65:b0:61:c7:ee:7c:
                    41:af:05:44:a6:14:cb:c9:28:c8:d4:9d:fd:b8:3a:
                    8b:18:ae:66:b1:cc:80:68:2e:29:7f:dc:26:69:7c:
                    ac:69:a5:0a:d8:1a:f2:0d:a4:50:20:cf:3b:11:e7:
                    21:bd:ea:49:2b:e9:4b:04:cc:5e:ed:f2:b1:12:d4:
                    fc:51:80:c1:a4:94:96:91:e6:43:39:72:fb:68:af:
                    ab:61:bd:85:de:56:1c:5e:5a:cb:5d:64:4c:37:7c:
                    6c:c8:99:72:6c:cf:27:b9:ab:87:ba:bb:15:ef:97:
                    eb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:96:17:C4:50:C4:6A:D5:76:F4:82:C7:DB:2C:81:E2:49:14:DF:26
            X509v3 Authority Key Identifier:
                keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:94:4b:9b:51:3f:97:43:65:bf:a4:6f:92:98:ef:84:5c:df:
         85:f6:5a:ab:bd:a0:c8:67:78:b7:34:04:24:64:f2:1b:f5:bf:
         83:d8:7e:08:77:6f:04:3d:1c:e1:f7:b8:b0:23:07:de:f6:a6:
         1a:50:5e:db:d6:20:94:58:d4:b2:f3:9a:fa:cd:31:53:5b:6e:
         a6:69:4f:7d:cc:94:e4:c2:ba:55:c3:14:4b:54:56:f3:de:6c:
         ad:22:2f:ab:db:2e:9c:4c:46:f9:e1:de:51:85:48:37:96:c3:
         76:ec:f7:0f:d0:7f:40:57:00:12:46:28:65:27:9a:8c:bb:1c:
         ff:3d:9e:b4:45:01:e6:ce:1a:ea:05:9e:cc:e9:93:eb:b6:b2:
         45:d8:29:19:52:75:2e:c9:d8:9c:61:5e:ff:25:b0:d6:b9:01:
         f6:80:c6:26:06:ec:3f:18:a6:2b:1d:42:34:08:b4:05:2f:82:
         1a:ca:c3:2e:a8:40:95:c2:35:b9:9d:f0:bf:24:b2:6d:00:4b:
         4e:07:97:1c:02:5e:91:b3:a2:1f:f8:16:3a:8d:d7:32:f7:12:
         8f:e7:89:83:7c:eb:86:27:0d:30:21:7b:7e:5c:d3:41:22:ba:
         69:52:8a:67:5d:ae:c7:6a:95:62:f4:23:fc:1d:8d:a5:da:8b:
         31:6b:e1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:45:05 2026 by rpki-client