Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
File:                     OuFF_jt5sr9oqtvgB9721yrvKsM.mft (raw, json)
Hash identifier:          ATuIWCYu7aU5vmhEZEqkLEacRtEbvwHtvf5E36YmdeY=
Subject key identifier:   A8:E4:F3:A4:2F:13:FB:60:52:AE:38:38:F2:EE:90:1D:6F:F6:5F:27
Authority key identifier: 3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
Certificate issuer:       /CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Certificate serial:       019F90C7A465D8563DBCF5AB445A9D367514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
Manifest number:          12D7
Signing time:             Thu 23 Jul 2026 21:00:30 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:30 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:30 +0000
Files and hashes:         1: 9dlwjsoeaynXvLD6hU--GhYSrqM.roa (hash: mUWy20UuJGJ5BznEAMczwLkiJHHJsFmSVmANdbalu+k=)
                          2: OuFF_jt5sr9oqtvgB9721yrvKsM.crl (hash: 6AsLTBlqXzl8WEBUu2A5FParnz5lkU+ZlRm1pd0PRzY=)
                          3: rM_jdXy84vXGo0-WUXb97B2X5Vc.roa (hash: GjuFk6jemR6ii4hI/oxG1vqpEf4r+3pyDc+nTJsViK0=)
                          4: sEmorA-ZRll0p0UMYOTfT8auHu8.roa (hash: NXJluQHm5Ujqo8vGjkexvbDRO7wfW2RmWXBToETA0t4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:a4:65:d8:56:3d:bc:f5:ab:44:5a:9d:36:75:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
        Validity
            Not Before: Jul 23 21:00:30 2026 GMT
            Not After : Jul 24 21:00:30 2026 GMT
        Subject: CN=a8e4f3a42f13fb6052ae3838f2ee901d6ff65f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d8:3c:70:41:05:82:73:48:f1:1f:4b:2b:2d:
                    6d:06:97:88:f1:27:32:ac:d6:43:00:5f:1c:a5:e9:
                    21:fc:5c:38:76:46:73:11:75:b0:b5:60:64:8d:5f:
                    19:8c:26:07:e6:e0:6d:0b:ee:2b:24:10:88:42:07:
                    62:05:43:2e:98:4f:48:1e:15:3c:c4:cf:ef:0d:76:
                    90:d5:a5:16:ea:80:fd:52:72:2f:7c:70:5a:5a:91:
                    44:69:13:09:ef:cc:ae:5c:17:4b:a4:73:b2:2a:4b:
                    69:6e:0b:31:6e:ac:df:32:dd:df:bc:0b:3d:5b:f9:
                    40:d5:9d:93:8f:84:fc:4e:88:21:89:30:28:31:53:
                    d8:86:89:8f:77:0e:d5:60:58:54:ba:3a:78:60:a7:
                    b2:9d:7d:3b:0e:86:89:a9:79:b3:f0:51:90:ab:a6:
                    17:de:c4:a9:bf:fe:a0:1d:12:70:9f:f2:71:42:99:
                    2a:ae:3d:3e:de:31:27:db:23:d0:9f:69:79:65:9c:
                    5d:72:33:cb:70:72:37:58:18:76:7d:8b:17:92:62:
                    87:4c:4f:cd:80:81:01:e2:fe:84:3b:6b:3e:e9:01:
                    f2:92:34:25:d8:04:ec:57:91:e7:2f:c0:83:27:ec:
                    b9:dc:e3:70:0e:b8:fe:af:45:0e:d4:d7:a8:f8:b2:
                    db:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E4:F3:A4:2F:13:FB:60:52:AE:38:38:F2:EE:90:1D:6F:F6:5F:27
            X509v3 Authority Key Identifier:
                keyid:3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:5b:46:33:d7:00:d4:ba:a2:72:a9:6a:c1:ed:5b:79:bd:91:
         41:1a:0a:75:e0:d9:ea:e3:87:39:58:92:e6:d1:a3:43:a7:f4:
         0a:40:22:98:ef:00:83:26:4c:71:6a:f6:16:ef:9c:4a:f9:7a:
         be:2b:f5:2d:b0:4e:25:ac:0b:32:20:0f:89:d6:ee:17:92:b9:
         27:94:7c:a4:42:db:88:29:4b:36:22:2c:c4:46:28:4f:fb:41:
         58:9a:7d:a9:e8:56:29:7c:92:96:8d:2a:1a:ec:65:88:a7:81:
         08:90:8f:06:d7:b6:d6:0c:44:8f:40:1a:ea:65:0c:c9:86:24:
         38:4d:f1:1c:ec:e9:dd:fd:13:fb:94:8f:17:41:39:21:0e:bc:
         48:d5:e3:28:95:75:35:7e:fd:62:f0:0b:3a:12:42:c7:6f:3e:
         11:2a:af:07:7e:f2:e1:79:e8:ed:04:3f:aa:85:8a:d2:8c:4d:
         62:46:18:d6:34:c4:90:00:20:a9:ab:a2:e1:28:4c:d8:ea:5a:
         60:e4:d5:d5:0b:48:48:dd:43:91:42:a0:e1:fd:90:42:60:4b:
         64:1b:13:40:57:fe:89:33:4a:67:40:f4:35:b8:14:06:d3:b8:
         b0:b2:f7:9b:4c:7a:34:c4:63:68:1a:60:5d:5f:0f:6e:fd:a0:
         c9:d4:1d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:38:21 2026 by rpki-client