Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
File:                     Oexx3D1ozej5B3069mdRwp_O6kw.mft (raw, json)
Hash identifier:          L020cCxB8zY8ma7xLLAN8VKnRCP9BBnHO6hSJEP0b0s=
Subject key identifier:   63:0A:09:04:8B:87:2F:B6:6E:54:9B:A6:AF:3E:36:41:29:6F:8F:CE
Authority key identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
Certificate issuer:       /CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Certificate serial:       019E1E3587D81516F7F4952443AF5EFE4963
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
Manifest number:          0C61
Signing time:             Tue 12 May 2026 22:01:24 +0000
Manifest this update:     Tue 12 May 2026 22:01:24 +0000
Manifest next update:     Wed 13 May 2026 22:01:24 +0000
Files and hashes:         1: GWIPuzYrr1ZkVb6zUh724dGRI1w.roa (hash: 8ZDylGUDk0rJ7fPM3ZJJKDsoUpKFNi+95rGt5nvLIKg=)
                          2: Oexx3D1ozej5B3069mdRwp_O6kw.crl (hash: /3gOIawVN2OrTDKS46zp2ho5NuxqBq+RS/II9bCJil0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:87:d8:15:16:f7:f4:95:24:43:af:5e:fe:49:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
        Validity
            Not Before: May 12 22:01:24 2026 GMT
            Not After : May 13 22:01:24 2026 GMT
        Subject: CN=630a09048b872fb66e549ba6af3e3641296f8fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:20:e8:18:ed:41:75:62:f6:70:23:5a:a4:18:
                    0a:30:16:54:3b:4a:4a:c4:e7:fb:83:8d:64:89:4e:
                    77:f4:47:45:ca:6c:22:b5:c5:5b:2c:32:6f:98:bc:
                    2b:67:44:a1:96:0e:db:d7:d6:0c:11:f7:d3:77:8a:
                    09:a1:11:a1:af:0c:bf:c9:33:64:fb:c0:3a:c3:78:
                    70:61:b9:dd:6c:2a:91:22:16:a9:f8:a4:f2:66:10:
                    ff:0d:c2:f7:bf:70:a8:79:e9:7f:88:ab:aa:64:22:
                    ff:dc:dd:fd:72:12:ae:ec:22:33:fd:e3:66:1e:10:
                    95:0f:7c:70:90:54:d7:87:d5:55:87:92:3a:36:27:
                    dc:0e:30:61:cf:5f:a9:2c:a3:4b:51:70:6e:c8:a8:
                    78:bc:60:5a:5d:aa:ff:c0:44:9e:d7:6c:39:35:c2:
                    a3:74:23:41:e5:53:1f:67:11:11:08:71:03:4d:05:
                    46:3b:f3:ee:d7:70:34:0f:2a:d2:ff:62:fc:32:39:
                    04:5b:c8:47:23:2d:ec:3a:8f:13:6a:92:e8:5a:2b:
                    a6:75:64:97:ee:6a:05:3d:ce:bf:5e:16:ac:15:15:
                    60:4a:20:7d:a2:9b:99:10:a4:99:b6:d1:d8:cf:ec:
                    cf:63:6b:56:c2:79:07:ba:85:13:80:7f:a0:65:c7:
                    9c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0A:09:04:8B:87:2F:B6:6E:54:9B:A6:AF:3E:36:41:29:6F:8F:CE
            X509v3 Authority Key Identifier:
                keyid:39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ad:1f:1d:5b:85:35:10:de:d5:84:ef:63:8c:57:28:cf:14:
         5a:48:c6:bc:2b:1b:d1:29:45:69:ba:fe:02:0e:e9:6c:36:5e:
         a5:ec:cd:a0:78:6e:39:24:b6:cf:86:f9:ba:98:54:8a:08:a5:
         00:de:7b:41:aa:3c:8b:13:15:f6:80:59:4c:9c:c4:37:56:7c:
         46:a7:25:79:c4:29:9b:eb:41:fe:af:9b:31:30:66:63:bf:9f:
         07:b0:6e:aa:51:b9:a6:ac:99:2f:e9:3b:cf:80:90:ec:8c:f5:
         ad:9e:69:9e:ef:1c:2f:d1:4c:75:c1:89:30:69:e3:f6:43:a5:
         be:9a:72:f8:2e:8c:2f:84:cd:da:2c:fa:ef:0b:f6:cc:a2:8b:
         c4:e0:f4:4a:81:05:08:c4:7d:fb:10:f8:0b:67:09:43:ef:31:
         3d:f0:ac:bf:db:04:6c:88:64:60:a0:23:e5:a1:8c:0e:2c:69:
         7e:e6:87:76:0a:30:35:e8:fb:49:c0:80:93:22:b8:a5:e8:0a:
         c7:fb:0e:d5:b5:3c:05:58:34:10:6e:8d:da:d7:d1:2f:8d:0f:
         fa:9b:96:d5:1b:81:58:03:3e:93:96:8a:ca:a4:c1:79:c4:b4:
         af:fd:a0:06:45:1b:25:38:47:eb:d5:92:55:d9:2a:0e:49:ad:
         f3:83:a6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:12 2026 by rpki-client