Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
File:                     osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft (raw, json)
Hash identifier:          UCkWcYa44HYnF467cE6f3KFJdB0VJvtalS0CwFIsuZU=
Subject key identifier:   25:9A:32:B2:B8:4C:7B:D0:5D:A3:E8:79:CE:1F:49:9C:7F:8C:CA:9B
Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
Certificate issuer:       /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Certificate serial:       019F939219ED136DD0F769CF79256F8D6615
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
Manifest number:          19CD
Signing time:             Fri 24 Jul 2026 10:00:53 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:53 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:53 +0000
Files and hashes:         1: QdCCFy0Che3zQ-ePH2OEt46GxG8.roa (hash: uUeKh+S8JSSLHm2QW0yzdqWBVQgBt2ppseQ+0eEMG+I=)
                          2: nBuGkgnRBT8Qjm-TUyDH9_cSUdU.roa (hash: h48y87G6eR9F9kAAK7RxKWZLvvNL/xDbVjxHO1JHOG4=)
                          3: osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl (hash: hleaFRhfdG7o1Y8HTNc0OkMrQGckQvbEBSiHVzW5Zog=)
                          4: wRhyCIvuKiaEK5AlW4LAprlcyto.roa (hash: /I8FFaaDLJ/GnVybrc/DmyRULq5DViEzBfBe953Kypo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 10:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:19:ed:13:6d:d0:f7:69:cf:79:25:6f:8d:66:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
        Validity
            Not Before: Jul 24 10:00:53 2026 GMT
            Not After : Jul 25 10:00:53 2026 GMT
        Subject: CN=259a32b2b84c7bd05da3e879ce1f499c7f8cca9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8a:91:21:1b:c7:39:25:59:8d:b3:b0:07:2c:
                    f6:50:b4:52:18:cf:4d:08:8c:9a:18:60:d9:56:de:
                    23:60:01:44:79:00:1a:ea:ab:44:59:54:43:fc:65:
                    18:a7:70:5b:97:08:3e:c5:7c:40:fc:0d:6a:73:89:
                    07:db:7a:a2:7e:06:14:42:40:e7:42:7b:20:17:10:
                    80:a0:65:d4:9c:bd:80:8a:88:c1:f8:ee:ed:95:4f:
                    16:e1:c6:72:8e:dd:46:c1:f2:6b:cb:de:53:d0:97:
                    65:7a:63:4b:1a:21:be:4a:8e:00:85:2e:ac:16:3e:
                    b3:cc:03:f5:51:35:65:d6:29:19:15:ce:31:fa:dc:
                    8b:1d:5c:42:51:ed:6a:fa:27:c3:c8:66:69:7f:5c:
                    6e:87:0d:14:3d:ac:f6:7b:de:68:b6:84:5c:b4:34:
                    da:7e:e1:db:c8:2b:df:8d:34:40:9a:36:d5:3e:2a:
                    8e:4f:3b:55:1d:48:3f:34:d9:2d:d4:df:59:de:54:
                    33:4f:b6:ee:88:cb:1b:2b:ec:01:05:c0:95:92:e2:
                    93:86:ad:c8:ff:b0:82:bc:24:6e:70:a3:32:20:a3:
                    c0:ee:0c:a7:18:fc:ee:32:1d:ad:0a:c6:10:1b:6e:
                    56:e9:17:95:41:fb:7b:8d:c8:55:59:e5:fd:82:b7:
                    f7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9A:32:B2:B8:4C:7B:D0:5D:A3:E8:79:CE:1F:49:9C:7F:8C:CA:9B
            X509v3 Authority Key Identifier:
                keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:33:12:c0:7a:04:6f:dc:84:1a:36:8a:8b:6f:66:33:98:ff:
         29:07:34:c6:ac:77:81:b8:91:29:cb:a1:36:c0:a8:ad:fc:00:
         11:ff:89:7c:94:c7:28:e1:e9:ed:4f:ca:f5:30:41:30:e4:14:
         1f:50:2d:f4:4c:9c:f4:02:32:4f:1d:0a:d6:d0:1c:f0:36:dc:
         43:f5:0a:eb:8f:b6:ca:37:0b:53:46:61:87:65:dc:fb:ac:fd:
         13:8d:a0:0c:41:3c:80:68:f2:f6:12:a7:60:c4:f6:86:eb:ff:
         a8:a7:bf:97:33:e3:91:a6:72:09:0d:c1:06:92:0e:84:d4:79:
         33:0b:04:e1:6f:a4:5b:07:ad:47:3d:77:ee:b9:34:0c:bf:83:
         f0:dc:55:dd:dc:34:b6:ee:d6:39:68:e6:a2:4b:5a:3d:0d:cb:
         89:71:b8:ae:fc:97:48:57:7d:d3:d8:d2:20:cf:5b:f8:7d:5e:
         dd:b4:a9:a7:ed:3e:e8:a7:6e:56:dc:8e:d1:4d:03:01:44:9c:
         df:b7:9f:64:6e:d0:be:5c:c9:13:6f:74:b8:b9:9b:b0:62:b6:
         e7:0a:d8:2d:0b:99:0e:e5:94:b4:85:50:61:94:31:bd:7e:ec:
         10:15:b9:dc:d9:70:74:bc:c6:35:56:5f:45:f2:1d:ee:e5:20:
         65:10:d6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:54:50 2026 by rpki-client