Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
File:                     OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft (raw, json)
Hash identifier:          NHgvmG47rvYDCVmfnR4jSwGoS0eM4QgQ0PHZ8yYQdaw=
Subject key identifier:   17:6F:4A:B5:F0:FA:51:76:0F:50:EA:91:53:48:D8:E7:FF:77:D5:04
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Certificate issuer:       /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial:       019F91DB0C0EF7FDE35957333B66DDB26F86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
Manifest number:          0F5A
Signing time:             Fri 24 Jul 2026 02:01:19 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:19 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:19 +0000
Files and hashes:         1: 1AdLwVTQwnRojaJc6oKg4bE5e10.roa (hash: SmldC7KFTFrB2ovoO23QX0S7PhV2KBqhDfb2PIUZ9dY=)
                          2: OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl (hash: kSQrKz3eLtRw+xrvonr1zErX8Zg0WfSfUbP/m/jG4ks=)
                          3: RYsY-o2i4jJuo5LcGcM8XUCbb9c.roa (hash: Dw7b6pkuG5rO21BY1jXBfmGu/ri7kYZ0iuN6r4DYx0Q=)
                          4: YAzw4t4zF4HrK6DQM0Hi6OJnv_c.roa (hash: Czpsw7Ht+JmwRHsAFUGdIdcpmViWugcfHRbmpORJDMk=)
                          5: i1ce_KCZyzzJnWCLHJltrqd5osU.roa (hash: YFwwgtjx89C2fEmhpNXxjUv1MUQKaMCAp+nvJdfMp5o=)
                          6: qw0bNos2uMNz09JenRAlkTtNmd8.roa (hash: SLKj00aaETL606oUEHzZc3k3yjfYWagWu8LRBWMxnBA=)
                          7: sYth0C5gNTA4Nn0ZVlj2vFu-rcA.roa (hash: YQlDl2GO98hMqxb9t2YAM1lWkbesF46HgOB5GJrP+Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:db:0c:0e:f7:fd:e3:59:57:33:3b:66:dd:b2:6f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
        Validity
            Not Before: Jul 24 02:01:19 2026 GMT
            Not After : Jul 25 02:01:19 2026 GMT
        Subject: CN=176f4ab5f0fa51760f50ea915348d8e7ff77d504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:da:a8:0a:62:3b:26:ba:61:59:31:f3:4d:70:
                    0b:f5:63:cb:d4:43:bc:89:05:71:a6:7b:ea:cd:d8:
                    d6:9e:a3:be:23:1d:6a:b2:73:dd:14:65:b5:a5:7a:
                    fc:2f:50:c2:b6:0e:1b:ad:07:ab:fb:bb:79:fe:6f:
                    1f:e2:81:37:96:d9:6e:7d:60:4a:bb:34:b6:42:fa:
                    18:34:12:71:fa:95:98:83:74:7b:42:f6:49:f5:c0:
                    a5:35:6e:b0:f7:bf:93:8b:b2:49:66:a0:03:3f:c1:
                    8e:b6:f9:a0:d7:6b:5c:42:3d:aa:33:55:96:d3:89:
                    24:b9:58:20:23:5f:0c:7d:62:5b:c6:93:51:39:d7:
                    6c:51:98:7e:8b:6d:fc:00:c7:13:dd:db:85:e4:38:
                    a6:47:08:77:f6:61:e2:b6:c8:a5:35:37:fb:02:f1:
                    ff:a5:94:5f:d5:b7:af:07:0a:9a:88:36:cd:58:b5:
                    85:32:6e:e6:ae:ed:3a:d5:ba:53:1c:6b:28:54:86:
                    84:82:95:9b:c9:19:bd:f9:19:f8:2a:d4:7f:cd:ac:
                    34:ae:d9:77:54:62:6a:4b:17:30:e2:59:5c:fb:8e:
                    f0:0c:25:3e:3e:55:80:71:1a:c0:a6:b1:ad:d2:71:
                    77:92:1e:04:2d:b6:67:db:c8:06:19:e4:0c:49:41:
                    a2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6F:4A:B5:F0:FA:51:76:0F:50:EA:91:53:48:D8:E7:FF:77:D5:04
            X509v3 Authority Key Identifier:
                keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:db:29:54:c8:20:68:a6:8f:b2:6d:1a:2b:ec:f3:64:49:4a:
         b4:f6:5a:1f:58:76:08:8a:56:aa:17:85:67:fe:a1:f8:64:91:
         e0:19:23:7f:df:fc:e7:81:cd:51:bf:6e:25:5e:27:28:fb:36:
         13:f1:f3:27:9f:ef:c2:93:f2:e3:08:c8:8f:fb:6a:97:7e:20:
         88:92:b6:16:a5:db:60:b2:af:a5:f7:8b:97:ad:2e:ec:1f:0d:
         c2:27:3e:4d:ab:49:6a:5e:5d:3a:28:10:ad:c5:cd:1b:1b:ab:
         47:96:11:54:d3:0a:6d:9e:c1:be:82:ff:c4:c1:5e:34:6a:42:
         a4:4f:9c:ba:57:3e:d3:bc:d4:67:ef:9a:03:1b:d0:d8:db:9f:
         58:46:a3:a3:df:8c:b2:bd:54:c4:da:54:c2:d1:45:8b:a3:39:
         36:1e:13:49:56:fd:d8:46:2f:70:0e:ec:3d:04:2b:e2:b8:d2:
         13:33:f3:f8:6c:15:c1:03:c2:ce:62:ec:ee:d8:46:cc:5e:23:
         ef:ef:b1:8c:03:d3:4d:ed:93:67:f9:f3:d4:a8:f1:50:53:ae:
         aa:8a:ee:73:25:b0:d8:05:a3:0a:ca:82:c1:ca:a5:61:ed:e6:
         1f:d1:1d:bc:69:d6:5a:d8:9f:ea:a3:a5:ba:37:b4:99:07:5d:
         d3:90:bc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:17 2026 by rpki-client