Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
File:                     OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json)
Hash identifier:          QtYWro7Fwwf1efi4jS3MwdFDeo1IF4GW2X2GbYOCUOU=
Subject key identifier:   5E:79:90:93:AE:F8:3D:F5:1C:34:C3:AE:3C:EF:20:72:F0:80:9E:8B
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Certificate issuer:       /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial:       019EBE7EF76F65E2D9D5C5C5EFD34A0B396F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
Manifest number:          09D7
Signing time:             Sat 13 Jun 2026 01:00:52 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:52 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:52 +0000
Files and hashes:         1: 6QjQA0_fqdIryNhtjxIfR8HzBm8.roa (hash: BdP8cS5Jr2HaqgKC6lWTWfU5V8jliQKRlVrIRV0QG54=)
                          2: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: rCzsb7PWU4Ksd07EqJphY/3dNyQfezhT8egGz2m/e4E=)
                          3: egvTStfdqsgaJQHUlI4Gx-druNs.roa (hash: 4U3wHEEQUhulNGL0yqru9oCFOlljnEnQXHB+fB5oMsg=)
                          4: tvvhjcNPTzu8EJ_egoIMXRYZBJ8.roa (hash: mDC6nKfTSpQ8MtQgVXXdC9nwrvajhFovh0zIQBw5Eko=)
                          5: y2R7XAH-3-kA5U74hXHHO_c11dI.roa (hash: gWO/uuYDyiGKuAWY4EaQAg3d79DNvwcV+IkMjIH1jbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:f7:6f:65:e2:d9:d5:c5:c5:ef:d3:4a:0b:39:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
        Validity
            Not Before: Jun 13 01:00:52 2026 GMT
            Not After : Jun 14 01:00:52 2026 GMT
        Subject: CN=5e799093aef83df51c34c3ae3cef2072f0809e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0f:b8:d3:1f:69:35:cf:02:4c:89:bd:a7:14:
                    07:56:9b:b5:a5:ac:7c:c9:35:a6:af:48:ec:4c:16:
                    61:2b:50:c4:3e:9c:d8:e1:00:88:12:8c:5f:01:aa:
                    95:1d:f9:b2:7f:83:ed:09:2c:c5:c5:3e:1c:39:9b:
                    3e:51:37:e5:0f:84:09:52:5d:49:bc:b6:d7:74:70:
                    0d:50:aa:d4:51:be:86:d9:02:ce:47:d9:53:05:0b:
                    68:f6:3d:a2:5f:b7:50:4b:bd:a5:11:8e:dc:ba:3c:
                    c6:b8:54:02:94:40:64:3f:66:13:cb:a8:2f:ae:d3:
                    9c:51:75:aa:4e:c8:54:18:76:07:60:a7:01:3b:25:
                    1b:6d:47:5e:74:26:42:cd:84:83:d9:5c:12:92:70:
                    8f:36:dc:c2:cc:c8:d4:ff:16:0c:04:8b:c3:d9:d5:
                    40:c4:76:0e:65:8a:2c:7c:99:36:9c:85:39:0a:f0:
                    25:17:db:c1:0c:a4:07:95:d4:28:3f:22:e6:87:db:
                    91:a1:a8:d3:62:78:e2:87:74:ea:4d:12:b9:c0:a0:
                    04:8b:13:3c:e7:aa:c6:ae:c2:f9:4f:36:10:e5:d1:
                    de:8e:a7:79:a5:19:f2:e5:5c:16:ea:95:2d:5a:82:
                    b9:69:08:3b:42:19:cb:8a:d0:5b:4b:26:02:7a:97:
                    5a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:79:90:93:AE:F8:3D:F5:1C:34:C3:AE:3C:EF:20:72:F0:80:9E:8B
            X509v3 Authority Key Identifier:
                keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:19:ce:ea:73:aa:27:64:80:2a:04:5c:b5:dd:a8:38:ce:6d:
         c2:9b:13:66:f0:c6:92:55:19:ec:3d:a6:75:a0:9e:bd:1a:3d:
         9a:80:8e:81:3a:1e:02:26:11:b0:f4:81:e3:b5:c9:1f:36:ef:
         9c:b0:f7:60:3c:63:99:56:2f:f2:08:2a:86:2e:45:ca:29:35:
         0c:ee:55:02:cd:ad:16:3c:6a:a8:5e:7c:92:59:f9:8f:df:2e:
         34:c5:d7:28:1e:61:8d:b0:3a:ff:f1:f5:1c:d7:83:0a:50:35:
         dc:44:0d:2c:cd:49:7e:23:25:0d:34:af:e8:ef:15:f8:a8:71:
         67:19:c6:80:f7:c3:5e:a4:d1:9f:fc:f9:4d:c9:1b:ee:5f:a3:
         03:3c:b1:ab:38:2c:24:c7:e6:e5:f5:a5:60:b6:6a:16:86:b2:
         8c:90:ff:c6:63:ef:74:fb:cb:0e:b3:9c:21:4b:fd:31:46:d3:
         af:43:01:d4:56:44:e5:bb:2e:a1:c1:42:32:11:2e:14:d5:13:
         ae:59:f1:2d:e1:46:1e:03:f0:20:02:89:41:6d:39:d3:0c:35:
         9c:72:0c:f8:60:06:bb:72:3b:6d:79:6e:05:00:80:ad:0a:f1:
         e5:f5:07:b8:3b:4a:1f:08:11:56:44:96:3a:fc:0d:a0:9f:fa:
         c4:05:a6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:29:52 2026 by rpki-client