Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
File:                     OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json)
Hash identifier:          V9qWpwTXITqOjwK3JSJUjuR/qbGR8KcEAtahFxsUpkg=
Subject key identifier:   D9:2B:B5:31:C8:0F:E8:46:04:DB:72:17:82:50:AA:F8:C5:4A:B4:38
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Certificate issuer:       /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial:       019FAA19624D1109C88837729EF5CDCD3282
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
Manifest number:          0A53
Signing time:             Tue 28 Jul 2026 19:00:18 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:18 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:18 +0000
Files and hashes:         1: 6QjQA0_fqdIryNhtjxIfR8HzBm8.roa (hash: BdP8cS5Jr2HaqgKC6lWTWfU5V8jliQKRlVrIRV0QG54=)
                          2: J1bJb5PR-6WCKXzaxKwF8b7G6KM.roa (hash: aPn06S/csR4hGjZC+O1jL0hLLbq1h25Fd+BEJPi6jnM=)
                          3: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: NcTh6Znx2juEOvU32QCSiR8CclIYCopURqrsp3/oJhs=)
                          4: egvTStfdqsgaJQHUlI4Gx-druNs.roa (hash: 4U3wHEEQUhulNGL0yqru9oCFOlljnEnQXHB+fB5oMsg=)
                          5: tvvhjcNPTzu8EJ_egoIMXRYZBJ8.roa (hash: mDC6nKfTSpQ8MtQgVXXdC9nwrvajhFovh0zIQBw5Eko=)
                          6: y2R7XAH-3-kA5U74hXHHO_c11dI.roa (hash: gWO/uuYDyiGKuAWY4EaQAg3d79DNvwcV+IkMjIH1jbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:62:4d:11:09:c8:88:37:72:9e:f5:cd:cd:32:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
        Validity
            Not Before: Jul 28 19:00:18 2026 GMT
            Not After : Jul 29 19:00:18 2026 GMT
        Subject: CN=d92bb531c80fe84604db72178250aaf8c54ab438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:61:66:a5:5c:79:3c:0e:16:28:2c:4d:1c:b1:
                    ec:37:d9:a9:38:46:c0:7c:ae:06:55:b7:7a:4d:8b:
                    22:e2:65:95:e1:7c:2d:d9:66:e0:e2:6e:7f:cd:f5:
                    4e:9e:39:05:d8:01:d6:d4:dc:e6:b5:7d:1f:c5:98:
                    f2:00:54:ef:6c:7f:56:86:c2:22:b4:9b:c1:8d:6b:
                    2f:52:f5:09:28:d1:52:68:98:ff:5a:72:ba:7d:64:
                    85:e3:41:09:dc:40:d0:7e:64:75:62:45:5a:b6:74:
                    53:5b:c7:a1:74:0c:bf:c3:01:9e:02:98:98:44:83:
                    bd:9a:c3:95:4b:ec:36:99:64:dd:d1:57:9f:44:cb:
                    70:a4:f4:b9:49:6a:ed:92:e6:84:ab:fb:f4:60:31:
                    30:87:48:86:87:59:2a:4a:27:33:b9:c2:9b:43:3d:
                    5f:41:58:f2:70:db:90:8b:13:b2:f9:b4:a5:b5:61:
                    bc:e9:62:ba:71:e8:16:1e:70:05:98:10:39:ae:ea:
                    a5:a2:ea:9b:22:98:d1:55:fe:5c:c5:0c:77:1b:8e:
                    13:c4:47:07:cd:46:56:34:fe:85:13:b7:67:76:4a:
                    a0:79:5c:2f:73:29:18:32:49:d9:b7:28:47:51:14:
                    d8:5c:65:d4:64:2f:bd:8e:46:f8:63:31:aa:87:4e:
                    4e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2B:B5:31:C8:0F:E8:46:04:DB:72:17:82:50:AA:F8:C5:4A:B4:38
            X509v3 Authority Key Identifier:
                keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b1:3a:00:a4:1d:53:d3:2e:ec:e3:ac:c5:0f:aa:4e:71:14:
         dc:db:40:10:0a:ab:92:1f:4b:5d:6a:2b:7a:4a:d7:8a:f4:9e:
         0a:7b:87:d4:ac:43:8e:3c:30:bc:44:6b:98:85:8f:7f:36:ed:
         0c:f2:cd:f4:d5:44:2f:d9:d8:ca:1b:e8:e2:b0:58:1f:b5:84:
         af:0a:06:28:de:10:02:d8:5b:45:17:c8:c0:f5:76:82:40:15:
         fe:85:22:28:81:78:73:c9:0c:63:88:3c:2d:27:96:5d:52:6b:
         0f:b2:c9:ed:79:29:cc:3e:40:43:a8:e0:75:b9:ae:5c:69:d2:
         ac:5a:d7:ef:b7:52:bf:50:1e:51:bb:a9:61:f4:61:fc:c6:19:
         93:3f:f3:db:5e:0b:9c:fc:df:7e:dc:60:14:5d:43:e0:37:2c:
         0b:ce:66:79:b5:3a:2f:62:c2:bd:5b:86:c6:fc:9d:3e:a0:46:
         19:0e:a1:c0:b2:c0:83:5a:66:da:37:7c:77:f1:22:c1:75:ab:
         8c:5f:12:31:d0:5c:08:54:fd:fa:4d:4f:af:c3:1c:41:f5:05:
         7c:ec:53:81:11:8e:2d:58:70:35:86:61:33:60:74:4d:93:db:
         d6:8d:1e:cd:a0:32:f4:6f:77:6c:33:4f:bd:26:91:1d:1e:8b:
         56:18:40:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:51:05 2026 by rpki-client