Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
File:                     OBbhmySn6M_xifq6wohSzYdIo4A.mft (raw, json)
Hash identifier:          825GoTfdmf7zmfwhfp6+GZy7PsTqSPqNlywIyH0TR3A=
Subject key identifier:   38:A5:17:D9:B2:9D:09:46:1E:E0:BC:9A:8E:DB:69:9E:9B:C2:E1:C9
Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
Certificate issuer:       /CN=3816e19b24a7e8cff189fabac28852cd8748a380
Certificate serial:       019F90909E33074BA1CC7D20DE640632D8B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 20:00:24 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:24 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:24 +0000
Files and hashes:         1: 10zU5k5ICxgrM5-Ip5yncI3GNGs.roa (hash: LEG/jSgiyt7BovVPDQkdWrVInvTbnRp5DG6v8hbqY1s=)
                          2: OBbhmySn6M_xifq6wohSzYdIo4A.crl (hash: d3TqHq2LpXa41/ICJayIqynAzLkiGsoB/PHkFSfEfJs=)
                          3: QmWmoP1KHfrR9eTOqZ6x9ezRXSY.roa (hash: xqu4qFo0DMMx0+rjC1DPBvqtwUrbm4PocY0IAf7sGdo=)
                          4: pm2S8QCe4l9WpfwvU_iLSL0zIlI.roa (hash: siFYWGu9y7ejpY470okiO/aX4nO9BjP28kUxghwfExg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:9e:33:07:4b:a1:cc:7d:20:de:64:06:32:d8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380
        Validity
            Not Before: Jul 23 20:00:24 2026 GMT
            Not After : Jul 24 20:00:24 2026 GMT
        Subject: CN=38a517d9b29d09461ee0bc9a8edb699e9bc2e1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bc:7f:9a:a9:c0:62:74:3b:2c:99:6a:81:73:
                    84:19:39:36:16:c8:4e:6b:c8:64:3b:67:cf:a4:16:
                    cf:eb:9f:eb:48:e0:ba:37:d7:b9:3b:7e:d6:ca:0e:
                    18:c3:20:9b:76:f6:3d:9c:d5:be:25:4a:70:cd:da:
                    af:9f:1a:19:5b:32:c3:a8:9a:56:71:a9:be:81:d9:
                    94:b1:f0:a6:73:98:19:29:2c:24:60:a5:6d:c9:bd:
                    3c:bf:60:a4:47:80:90:10:92:c0:c7:1f:0b:10:9d:
                    30:93:f0:bd:a9:d7:57:4f:11:ad:fb:c0:96:14:4c:
                    34:ad:73:bb:66:f7:85:99:0b:7d:20:09:a6:42:f9:
                    20:2a:57:29:dd:34:77:88:63:23:38:89:c3:bd:ae:
                    2e:6b:0a:db:ad:12:f0:ce:57:40:91:61:c2:69:b2:
                    4b:8a:7e:02:08:d1:f4:55:77:65:b9:31:c5:9b:d4:
                    16:82:bd:89:40:9f:d6:80:b2:15:a4:05:d9:4d:7e:
                    85:da:3c:39:df:17:e7:17:88:0f:e0:9e:d3:30:cc:
                    f7:9d:f3:ac:19:b3:97:7a:c3:05:5b:6a:aa:ce:9b:
                    99:ca:5c:50:ae:a0:09:0c:16:66:77:f4:a4:9b:ea:
                    ae:67:f1:b2:e1:99:98:e2:36:08:3a:0f:5c:16:fc:
                    9d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A5:17:D9:B2:9D:09:46:1E:E0:BC:9A:8E:DB:69:9E:9B:C2:E1:C9
            X509v3 Authority Key Identifier:
                keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:9b:b5:d0:6c:0a:21:cf:45:48:6f:e0:80:9c:8e:ce:61:51:
         bc:ac:87:8d:d7:68:1e:02:31:35:34:9c:74:4f:8a:db:d0:08:
         9c:5b:80:2f:ba:83:4a:e7:a5:a6:74:f1:c3:eb:37:ce:75:2b:
         7b:9d:cf:93:92:a8:a8:b1:09:47:02:37:e8:74:a3:50:58:ab:
         f4:bb:28:ca:df:f9:5e:b5:fa:28:38:d0:a7:69:39:b2:bf:02:
         90:43:6c:24:e6:c5:a4:c5:c3:f9:78:39:77:15:3e:6f:21:d5:
         e9:01:e8:59:0b:44:d5:e9:00:c6:60:93:5b:7d:76:ab:69:3a:
         09:c3:3d:d7:cb:12:51:c2:43:26:c0:45:af:65:e1:49:71:ff:
         01:c0:60:a7:d2:57:54:c6:2d:4b:a1:05:b3:87:19:30:33:00:
         d9:a8:f4:40:c7:c7:45:f3:91:02:80:e1:7e:e7:18:8e:17:26:
         b7:a3:3f:50:de:74:b8:6d:25:b8:53:1a:85:b0:4a:cd:b3:ea:
         b2:9b:2c:ac:52:a7:3e:cb:66:8c:e5:99:a9:f3:70:7f:8a:84:
         ed:07:69:be:ab:a4:ab:58:f7:70:bd:00:86:2a:dc:04:0c:51:
         fa:22:39:6a:dd:8f:d4:3d:a5:7a:bc:d6:65:5a:90:99:65:cc:
         da:24:69:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:56:28 2026 by rpki-client