Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File:                     OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier:          bFayS7xpeb5ff+Un0OQJ7Zl870fQjYfT8WXEQBQVhmE=
Subject key identifier:   CC:96:71:61:3A:C0:67:D0:D4:FA:28:83:66:5E:A1:79:D7:B0:81:DE
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer:       /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial:       019F9247F93A777DA227D9E5990826D53BCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number:          165A
Signing time:             Fri 24 Jul 2026 04:00:18 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:18 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:18 +0000
Files and hashes:         1: 5HgfHalD9LWYJGG7XKJSoxARVl0.roa (hash: swKgBTrDTDtZaOuFjLNTyyxaRwCSohp8AB3ouBvQWOI=)
                          2: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: BX0gJoAeVhKVZQ7LkewcOwrB3R/n4Cf+iJ8rGiKhNpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:47:f9:3a:77:7d:a2:27:d9:e5:99:08:26:d5:3b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
        Validity
            Not Before: Jul 24 04:00:18 2026 GMT
            Not After : Jul 25 04:00:18 2026 GMT
        Subject: CN=cc9671613ac067d0d4fa2883665ea179d7b081de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b1:46:db:1c:fb:c2:a5:91:26:50:1e:b7:b1:
                    0d:7f:36:e0:d7:16:68:88:45:18:ca:e6:34:5d:44:
                    6c:ce:93:83:92:d8:c6:69:82:49:f5:a5:88:dd:42:
                    93:3c:db:62:ba:50:b9:6a:ce:f7:f7:0c:60:2f:f8:
                    e2:63:55:4a:72:05:e7:68:bd:30:a4:db:e3:54:a4:
                    dd:1d:f6:05:50:da:f7:9d:4e:88:7a:68:65:94:e3:
                    08:6b:58:59:a4:32:5f:72:a1:44:9b:cd:6c:88:db:
                    6e:8a:7a:d5:a4:b9:15:a0:c7:ef:82:01:84:ec:2b:
                    7a:79:2a:a8:31:ee:9d:ab:41:23:86:5d:b0:8a:e6:
                    7c:b7:f1:0f:7e:87:24:12:c8:2e:62:d9:7a:7e:cd:
                    01:f1:18:33:98:a7:63:45:a6:e2:1c:56:c8:fe:62:
                    27:a3:5c:78:76:b8:60:10:5a:da:51:bd:77:68:de:
                    46:58:c1:6c:61:07:93:46:99:c8:c2:b6:e6:45:e1:
                    14:86:3c:d0:7d:43:f5:49:21:66:13:a6:1f:21:52:
                    54:9a:30:be:bf:6d:78:ea:8a:fe:2e:41:f5:07:a0:
                    62:56:d6:96:0d:ce:6d:4b:17:e3:bd:6d:b4:fd:fc:
                    54:3c:87:20:dc:33:b0:02:2a:1a:81:52:05:ba:37:
                    42:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:96:71:61:3A:C0:67:D0:D4:FA:28:83:66:5E:A1:79:D7:B0:81:DE
            X509v3 Authority Key Identifier:
                keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:3c:8c:1a:50:79:f2:63:21:e7:5c:89:d7:96:52:fa:8a:80:
         6e:6d:d8:db:e7:99:df:37:f4:a0:43:99:ad:3f:1e:de:25:1a:
         ba:03:bd:ad:29:f2:01:6b:d9:b1:d2:5f:cd:07:51:52:63:fc:
         d6:d6:79:ba:4b:97:7d:10:96:8b:5e:fe:4f:a1:64:46:83:91:
         ea:16:89:76:4e:4d:03:78:5b:d2:18:ea:cb:ae:c4:31:ae:56:
         41:d0:c1:ae:f3:68:62:aa:45:7e:91:33:a0:80:d5:a8:75:8f:
         db:92:9e:60:40:b5:15:e4:68:f7:eb:87:bf:eb:c1:ff:8e:77:
         a5:3d:c3:2e:53:79:e1:1b:4a:56:d1:03:8c:9a:fe:86:8b:ce:
         fc:f8:1c:6c:03:31:22:47:58:d9:09:ae:81:5e:c5:d8:46:8d:
         93:0c:8b:b4:66:43:76:d3:cc:8a:cb:05:98:b6:fa:b0:02:cb:
         81:be:26:ad:88:c0:db:8e:85:7f:d4:d2:66:63:1e:4f:db:46:
         96:f7:e8:41:97:c0:a6:2d:59:17:a6:f2:7d:1e:a0:ce:88:ae:
         5e:24:05:d3:ec:f1:2b:37:58:bc:5b:2f:17:a5:ce:87:f5:cb:
         ef:08:09:1f:20:ef:a9:7e:ff:88:2e:0a:4f:fd:7a:ed:8a:79:
         0a:fe:69:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:28:50 2026 by rpki-client