Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
File:                     O4WG4n5FNo05EB_i_PU0rtHEalA.mft (raw, json)
Hash identifier:          R1ntAjmqEw34J+sGqvHps3+HW0qjyb9zmFhTi/+XqK0=
Subject key identifier:   3C:06:DC:85:A9:1E:F4:75:9B:B6:28:94:AD:92:05:BB:A6:7F:13:84
Authority key identifier: 3B:85:86:E2:7E:45:36:8D:39:10:1F:E2:FC:F5:34:AE:D1:C4:6A:50
Certificate issuer:       /CN=3b8586e27e45368d39101fe2fcf534aed1c46a50
Certificate serial:       019F93242DD7D16779A004D9A51C5F313367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
Manifest number:          010D
Signing time:             Fri 24 Jul 2026 08:00:49 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:49 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:49 +0000
Files and hashes:         1: O4WG4n5FNo05EB_i_PU0rtHEalA.crl (hash: 9P4ZHCqAMgvlxrOvCnC+Jvk/NsAosSaJ2nU3Qt10Ygo=)
                          2: kaLgu1ajbWbRTIp64nkveQ0sPI0.roa (hash: QLfMEkLnzmR9asmQ0kW7bwtEoo2GEXf4te2IsruVAL4=)
                          3: rZsOxkLzrWkNoLU39zK5NWcPBZ4.roa (hash: gmXylVZppIFvB02SB5eduGVSfGJU8u2Cj+PDV9pwk1s=)
                          4: rnWVqX9eqFovrfevk0O-IB3LWLk.roa (hash: ivGFQd6C7WoMv4mXwi+meW326o68B9VxwgqnEk1HlCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:2d:d7:d1:67:79:a0:04:d9:a5:1c:5f:31:33:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b8586e27e45368d39101fe2fcf534aed1c46a50
        Validity
            Not Before: Jul 24 08:00:49 2026 GMT
            Not After : Jul 25 08:00:49 2026 GMT
        Subject: CN=3c06dc85a91ef4759bb62894ad9205bba67f1384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cf:6f:11:a1:28:97:ea:88:86:5f:0a:7d:28:
                    a6:4e:04:7f:9e:04:86:5c:b3:e8:fa:f0:85:fd:3e:
                    5e:3a:a0:9e:8d:df:e1:62:8d:35:40:be:73:b9:30:
                    87:3c:35:1e:31:92:50:c3:a7:c6:04:fe:21:47:07:
                    b4:cb:39:0c:a5:85:3b:69:1f:b6:1e:72:80:09:01:
                    5d:ba:ff:7f:77:76:bd:01:35:9f:c4:80:f8:52:cd:
                    41:96:5b:02:1e:09:39:ac:65:cd:af:c3:fe:48:00:
                    e9:39:02:89:22:70:41:5e:90:85:c0:8f:00:68:bd:
                    e6:8c:69:c5:fa:29:ec:e5:ed:19:00:23:92:59:cf:
                    2c:b2:47:fc:47:c7:01:7d:76:2a:33:da:86:f3:27:
                    ee:39:dd:e2:e0:e9:dd:e2:94:a7:a7:56:91:85:aa:
                    33:4c:bb:fc:fa:0b:44:94:67:4b:72:b4:6d:9b:c0:
                    d4:9c:3a:94:89:72:0d:40:b2:6f:ec:11:3b:35:46:
                    c5:0d:ff:88:fb:3c:10:40:24:89:1d:2d:6c:ef:c2:
                    ba:d0:67:18:8c:c8:32:21:3d:d3:73:5a:05:71:8b:
                    49:62:c6:eb:99:60:57:9c:f6:88:7b:bf:65:b8:98:
                    ea:12:7c:7e:b0:6a:84:85:3f:5e:2b:10:83:03:01:
                    5d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:06:DC:85:A9:1E:F4:75:9B:B6:28:94:AD:92:05:BB:A6:7F:13:84
            X509v3 Authority Key Identifier:
                keyid:3B:85:86:E2:7E:45:36:8D:39:10:1F:E2:FC:F5:34:AE:D1:C4:6A:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:dd:8e:e7:d9:e1:a4:56:2a:b6:17:13:2f:df:18:e5:78:f2:
         18:30:61:cc:90:0b:e3:e9:5c:22:e5:ac:7a:60:0b:03:0a:16:
         9d:57:3c:bc:8d:99:e2:20:36:64:6a:5c:9f:85:9d:5c:06:32:
         b6:5d:a7:cb:a7:72:fb:43:1b:15:d7:4a:fa:11:f7:ab:00:fc:
         b1:60:fb:d1:9d:59:0c:e8:24:4e:66:10:21:4c:4e:17:c7:c8:
         a6:98:e8:ad:93:b3:68:24:ee:38:e8:bc:c1:00:99:45:39:79:
         29:3c:ec:4c:d1:33:82:92:8e:96:73:41:23:8a:a9:53:23:f6:
         37:a6:ff:9e:8d:38:46:eb:b8:c3:9d:bd:7d:d1:05:68:d8:b4:
         f0:89:8d:f4:76:66:45:39:ea:91:1c:79:e0:7b:73:ac:10:d7:
         ed:61:4a:f0:39:0e:41:f3:4a:c0:a9:fd:69:49:3a:9a:f7:c0:
         aa:42:71:6d:92:64:17:07:a2:52:65:8a:90:e7:36:79:ee:5e:
         73:9f:a0:fa:f9:2e:43:2d:6e:56:5d:cd:8e:e6:f2:b3:61:fd:
         a1:7e:cc:28:d1:ed:48:17:82:24:2f:57:61:a2:f9:b8:24:3c:
         1b:18:43:e6:f8:81:40:74:4f:fa:16:f5:05:c9:c0:17:00:89:
         a5:1a:f4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:20 2026 by rpki-client