Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
File:                     ogdDObsha4W9yD1hd4ghrfkUnVY.mft (raw, json)
Hash identifier:          l5E7GdQfke/nb3snDsdoFNXpQY+S7kLxi6mv5mWd/r4=
Subject key identifier:   77:37:F2:A1:47:E6:D9:7F:0A:E0:3B:43:22:94:70:34:01:4A:99:DB
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Certificate issuer:       /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial:       019F93C9944AF45219EC47A511E6F9B9833F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
Manifest number:          19CD
Signing time:             Fri 24 Jul 2026 11:01:29 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:29 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:29 +0000
Files and hashes:         1: XxqdXwfdHXwacmQUBkB48LAafQo.roa (hash: ZuRSpQX2hi5+fIRKonJqY5V9h3SmTLF+D/bw+pkuvSg=)
                          2: bna6CHFMIo7f8yi-DMdUZeUsUi0.roa (hash: uTwTFwCJBTlpzjQB1pP4qMFw0WCnmCygitKNn3pQPiI=)
                          3: ogdDObsha4W9yD1hd4ghrfkUnVY.crl (hash: X27yUN86Q0JxF59vpBKT4Iy+nUs7P7Ri5vIHvizfFt8=)
                          4: yTdPsA6SZnQ3XMtoWGLKiUggrEU.roa (hash: 7cY171OXfBay1ll+5KA/jkMADHlu2pzKeacz4BTqUqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:94:4a:f4:52:19:ec:47:a5:11:e6:f9:b9:83:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
        Validity
            Not Before: Jul 24 11:01:29 2026 GMT
            Not After : Jul 25 11:01:29 2026 GMT
        Subject: CN=7737f2a147e6d97f0ae03b4322947034014a99db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:10:70:fc:df:83:ee:4e:f9:4e:ef:93:79:
                    f8:66:8b:20:5a:7e:b4:15:1d:b4:2e:3a:c4:9c:07:
                    94:18:f8:30:20:49:13:bb:01:ef:cf:3a:7b:be:77:
                    9e:44:1e:9f:7f:83:75:03:f4:6d:9c:b0:ef:d1:3d:
                    b3:24:a1:c3:e3:63:94:44:c8:47:86:59:7f:b6:ec:
                    f3:b9:f3:97:50:55:f4:df:0d:a4:55:b8:69:34:62:
                    b5:0f:5f:ae:2c:03:35:96:e6:c4:dc:8f:44:21:7b:
                    ca:2e:04:a0:99:28:96:92:55:96:51:0c:69:87:2b:
                    3f:27:e6:14:c5:30:4e:a5:98:38:6f:d5:78:28:d2:
                    5e:f9:b3:38:c5:a1:21:34:54:e2:03:b9:5e:23:96:
                    89:91:50:47:52:74:3b:8a:dd:c2:93:c0:05:92:f8:
                    03:b8:34:41:bf:fc:5e:28:48:f0:c0:a3:c1:c3:65:
                    7c:5d:f2:1b:f6:62:b9:66:51:c8:6d:64:a5:b6:9e:
                    68:16:79:04:66:36:e2:83:00:db:30:65:db:1a:a7:
                    2a:b2:d3:5e:fb:9f:58:80:57:f2:f4:e3:44:06:b6:
                    89:b8:7e:5d:cb:c8:f5:4b:7b:b5:ef:f8:02:bb:13:
                    7e:39:19:2a:79:c6:8b:0a:22:df:4b:f3:b5:60:1a:
                    06:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:37:F2:A1:47:E6:D9:7F:0A:E0:3B:43:22:94:70:34:01:4A:99:DB
            X509v3 Authority Key Identifier:
                keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f1:17:57:23:af:ec:f7:ec:66:32:db:3e:aa:2e:45:ff:ce:
         41:05:69:99:2e:62:54:20:39:94:71:af:29:d9:15:23:f5:80:
         44:1c:67:2d:82:3a:5d:e7:c8:ea:a5:7a:44:b6:d1:63:2c:33:
         3a:d2:34:6e:cc:f9:1f:11:9e:f4:ae:e5:ea:4c:e6:8d:e7:43:
         ac:39:ab:75:70:a9:64:27:f5:6e:ae:b3:77:71:92:8c:6b:c8:
         11:12:a0:50:4d:ab:9a:42:f8:ba:20:7c:c1:34:bb:d0:3c:d2:
         76:b5:f9:3b:33:2a:67:60:76:9b:6c:de:80:a9:4b:ba:f7:fa:
         e8:58:ef:db:fa:5f:c0:2b:cb:1f:38:e6:06:e4:3e:c0:d9:0d:
         95:69:3d:f1:93:ae:e3:ac:6f:25:59:41:1d:47:19:24:73:7a:
         05:8b:d3:6a:91:5c:c9:c6:df:b3:99:8d:80:d0:38:8f:1b:4e:
         4c:87:6a:52:ee:0f:b1:d3:09:1a:49:ac:3e:94:d6:8f:68:3b:
         46:ee:62:6d:cc:a1:55:03:ec:3b:50:d3:3b:01:a0:bc:a2:7e:
         2a:22:64:f1:76:f3:e9:cf:bc:98:12:ac:08:e7:f0:0e:85:fc:
         00:b2:5b:fd:f2:e8:de:69:0a:99:d4:c4:dd:e7:cb:5a:f9:df:
         46:e2:bc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:03:14 2026 by rpki-client