Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
File:                     O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json)
Hash identifier:          kwru5mtwvmWypsg2NbMtG686OZ+hm7AnfvzdY+qqnj4=
Subject key identifier:   EC:A8:06:1D:17:33:4B:27:70:02:D7:89:CA:99:A0:9F:3B:60:54:18
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Certificate issuer:       /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial:       019E1F115C35CB0C98131E96D131C26FF137
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
Manifest number:          0698
Signing time:             Wed 13 May 2026 02:01:31 +0000
Manifest this update:     Wed 13 May 2026 02:01:31 +0000
Manifest next update:     Thu 14 May 2026 02:01:31 +0000
Files and hashes:         1: 1UG_i4X68HiPHviRW1z0p_TSsXk.roa (hash: Rxi5VpSkCVYP7zpaawxiqgEVbztptEcbkSS6G+faZaE=)
                          2: 921A09PidqQ_DPqribEcJ4Ns9ic.roa (hash: 1p6ZvcbQbV5L2uaDpeFuyGxdzNA8guzksazYOvFT/c0=)
                          3: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: uZwj5eyC3R2/KI5xZNna1UgDX4xep0LZfK0Xjr7nzPE=)
                          4: QakAbn2qL6zC8DUBjSIVZLBbpXc.roa (hash: 6xvVEYi0a4GqVQ6WMVJR2REYvzQK/KHG+c6HRFsJwKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:5c:35:cb:0c:98:13:1e:96:d1:31:c2:6f:f1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
        Validity
            Not Before: May 13 02:01:31 2026 GMT
            Not After : May 14 02:01:31 2026 GMT
        Subject: CN=eca8061d17334b277002d789ca99a09f3b605418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:8f:81:74:b6:68:d0:cd:ed:b7:01:30:54:
                    ce:cd:a5:cf:80:92:f6:5d:73:7c:50:cb:52:1d:2a:
                    78:db:f5:56:4b:fa:d0:7c:eb:7f:7c:e2:56:85:9d:
                    f8:14:4a:a4:7d:62:2d:86:13:a9:46:ae:8d:6e:4e:
                    b0:ba:5f:6f:de:c9:4e:e3:3d:e5:2f:cc:ec:97:f9:
                    96:7f:21:ec:48:84:51:02:ee:e3:77:de:a6:9e:1d:
                    47:6d:dd:ff:8d:d8:a9:d9:f7:21:32:11:68:b9:db:
                    86:0c:e0:6a:ba:14:dd:fb:57:2b:c0:35:32:f7:0d:
                    2d:ee:25:54:20:d9:11:b2:75:23:c2:73:c9:a7:65:
                    f9:b6:92:2c:7e:8b:d7:69:0a:82:d6:fc:13:53:83:
                    3d:95:df:8f:c0:b6:66:37:cb:27:0c:7d:67:1e:2e:
                    58:7f:10:49:36:f9:4b:00:29:b8:df:a7:f6:d0:88:
                    fc:3f:04:4c:7e:c3:55:08:5d:58:02:c6:7d:d6:a8:
                    61:b9:f6:56:e0:e3:27:e2:17:16:49:31:08:36:24:
                    f9:98:00:6d:c5:d6:4a:1b:bd:f7:ef:86:93:1a:4d:
                    a1:39:51:3f:07:a7:94:18:15:49:8b:39:54:4f:db:
                    7d:ad:64:15:3d:43:e7:61:c6:48:25:22:1c:c3:f8:
                    92:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A8:06:1D:17:33:4B:27:70:02:D7:89:CA:99:A0:9F:3B:60:54:18
            X509v3 Authority Key Identifier:
                keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:8c:e8:2e:7d:2d:ac:91:2b:d5:ad:f0:5b:f1:c9:cc:32:12:
         a5:25:7a:6c:7a:f4:e3:c2:05:9f:f9:29:e6:36:96:45:ef:40:
         c2:43:e0:46:c9:2f:f0:db:5c:66:58:e3:fe:06:cb:0d:57:05:
         44:38:da:5f:5c:78:90:dc:46:e4:e4:67:ce:2e:b4:0f:7a:6b:
         b3:e5:d1:b5:bf:1a:4b:e6:ee:08:88:7a:95:28:50:bd:9d:c6:
         47:8d:8c:5c:3d:90:2d:8b:c7:74:f1:75:fb:ee:96:ca:60:38:
         f0:07:c8:e4:83:56:ac:b1:2e:97:2e:37:0e:91:83:31:0c:f8:
         e2:8f:9f:98:59:2e:66:ee:6f:2b:46:ae:ad:52:fd:cb:f7:c6:
         06:7b:12:fb:98:8b:42:70:fa:63:48:0b:c1:02:c2:53:85:ad:
         b1:4b:8d:ea:30:50:95:e7:e9:14:b8:6a:7e:8e:3c:fe:03:35:
         b9:aa:5e:90:c3:b0:5c:ad:48:ac:71:54:0e:d5:d4:4f:b7:de:
         a9:a3:03:ef:41:26:6e:da:60:de:9a:dc:54:ce:3f:12:8c:aa:
         cd:bd:5e:ce:b8:12:aa:d1:20:60:bc:23:69:0e:b5:0a:3a:fa:
         bf:64:b3:40:ed:39:96:02:f0:c1:7b:81:57:ef:08:45:f3:4a:
         f5:20:01:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:23 2026 by rpki-client