Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File:                     O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier:          K1ueBXZAw6V44SfNTeFaMsMZkDIes0gR46nP0vrq47A=
Subject key identifier:   44:E0:D9:4A:9C:0B:BB:07:E0:5B:16:07:F0:A4:53:90:D4:02:0D:FD
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer:       /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial:       019F927EDB23471A7F039643515536636F07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number:          05D2
Signing time:             Fri 24 Jul 2026 05:00:14 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:14 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:14 +0000
Files and hashes:         1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: 0N1l4Q3YhM31Y+VFlB5xiLRiHMm+jnUHlI+T3+WeQiE=)
                          2: nmV4wo1OsK526xeTri2upmPsAys.roa (hash: IeXn8vSCp/SPxs1+dmemndjYyp23bbOiRhUmde7q2pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7e:db:23:47:1a:7f:03:96:43:51:55:36:63:6f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
        Validity
            Not Before: Jul 24 05:00:14 2026 GMT
            Not After : Jul 25 05:00:14 2026 GMT
        Subject: CN=44e0d94a9c0bbb07e05b1607f0a45390d4020dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a3:33:1e:7b:8a:e4:76:93:99:8c:d8:04:a5:
                    45:61:39:62:e2:57:26:d7:d8:88:98:c8:38:ab:ad:
                    77:8f:22:eb:95:f9:ca:2c:dc:3e:14:9a:ef:4b:bf:
                    54:c6:08:7b:fd:6e:01:cb:1b:87:e6:52:67:19:72:
                    4f:15:1e:4d:74:50:ea:d9:76:08:6c:8c:da:94:a5:
                    ba:b1:8f:7c:13:0d:2a:6e:4a:40:14:fe:98:17:bd:
                    c8:e3:ae:a6:b2:9c:7d:75:63:43:69:2c:93:75:05:
                    99:43:ad:eb:5c:03:6c:72:0d:3e:df:0e:80:cf:38:
                    f2:e6:63:1d:41:84:43:c3:7d:22:3a:c4:80:7e:32:
                    a7:5c:30:b9:29:80:62:66:fb:6f:9c:f9:e6:11:4e:
                    df:ae:43:fb:02:fe:43:e5:49:c6:b0:6b:c7:e2:f3:
                    b2:89:43:27:ea:98:c3:6c:0a:65:c8:d6:eb:16:1e:
                    f8:02:9b:e0:a5:9a:04:69:83:8b:68:f6:95:b1:67:
                    ac:d3:e7:65:c5:d3:be:24:45:32:7a:d9:6f:b9:8e:
                    88:a2:0d:3d:9c:7b:a8:1b:e1:69:a3:a2:01:3c:2d:
                    f8:f5:3f:58:1e:22:41:fe:b9:fe:74:d9:58:be:10:
                    2a:a9:9d:4d:aa:e7:5d:f3:0b:bd:83:49:3f:6b:a6:
                    e2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E0:D9:4A:9C:0B:BB:07:E0:5B:16:07:F0:A4:53:90:D4:02:0D:FD
            X509v3 Authority Key Identifier:
                keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:04:4e:9f:19:91:a5:88:7f:a8:6b:59:89:35:79:09:82:fe:
         75:5e:b9:db:d6:80:a1:77:a5:4b:42:ea:4b:45:ba:92:8c:1c:
         84:78:ee:03:be:89:35:bc:08:ae:fd:5c:d1:8b:37:c9:cb:ac:
         18:7d:c8:59:6d:f1:d4:de:3e:a5:53:88:8d:2d:9f:e4:55:a9:
         76:45:75:ac:f2:a2:e3:e1:9b:ab:9d:e7:f8:b9:ee:85:12:34:
         57:ca:c9:45:9a:f9:be:5c:1a:8a:39:37:c2:a2:3a:e1:01:38:
         b3:95:0a:37:78:1d:85:a7:52:33:7f:08:ee:0f:58:fb:c6:de:
         35:de:04:d1:0a:82:20:88:2c:69:db:67:00:a8:9f:69:86:82:
         06:d2:0f:03:15:12:55:98:98:e3:ee:91:1a:f7:bf:7c:3d:1b:
         88:33:46:b9:bd:c9:df:ce:1f:ff:c4:0f:98:a1:66:b8:1c:c9:
         1f:f3:cf:88:07:18:59:f2:90:ee:3b:98:7c:67:d5:59:a1:27:
         8a:83:f7:46:dc:0f:26:79:49:ae:88:e2:7c:5e:27:b8:d8:f0:
         3d:6e:01:6b:8c:e1:bb:b4:25:96:f2:65:ca:9f:ef:86:50:c1:
         ea:13:cd:99:e5:30:7e:a0:fa:13:0a:1d:f4:b2:29:37:f1:d5:
         57:77:eb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:30 2026 by rpki-client