Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
File:                     oyLyKe3C8xSi-l7w168d3bSZ6jE.mft (raw, json)
Hash identifier:          rIHz1C1gsroAakzIKLsXTTW2jwWGoYMIXKpWT3xImhw=
Subject key identifier:   65:13:BF:9E:02:4D:09:CE:56:52:CB:75:16:4B:36:D2:51:8A:26:F8
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Certificate issuer:       /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial:       019F8EA2F9E96F814300447E20163DB5D8E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
Manifest number:          19CD
Signing time:             Thu 23 Jul 2026 11:01:13 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:13 +0000
Manifest next update:     Fri 24 Jul 2026 11:01:13 +0000
Files and hashes:         1: 99rTPUxETvNMqfh_u46spNvm14U.asa (hash: OYr40XHPvFduVqWreF0V2gPqIbJQNJPu2B4CaD9kosk=)
                          2: aKOg2Qlf1jhwBI08TxCbNxaldGM.asa (hash: +qzCT97QYuXyotwiBxnGvPknSk4Zw2ZUn8hoKsEK4QU=)
                          3: dwHayRti3Ys4pq1ozK8UcyYIioU.asa (hash: 9Z8ALTCAqIwV9lOKKuBND/h8fH+AfR9RVsAndv07/ls=)
                          4: hmi29bDH7pvd0FedsYNLU_RmrhA.asa (hash: uNJiYqOqB5CD4fkOxxcK5N87GxluuemI20dLeQMwHGw=)
                          5: j9ww1jAwapmyeB5Mda6akaTrn0o.roa (hash: UwM+UovIswrmaEoszqiNrb1qkN6U8QlTDAf/jDU0nmE=)
                          6: k45hDQDW5QvPS-wSqExMPGV9b9E.roa (hash: rZfIBJAHm9qJyp7jxnj7VeKyOR2YVXy0cyWacYrYiYI=)
                          7: oyLyKe3C8xSi-l7w168d3bSZ6jE.crl (hash: SJxO7qS3dtZSHUbXRTA8qK7eexSLcsDFfLCg8IxbBCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:f9:e9:6f:81:43:00:44:7e:20:16:3d:b5:d8:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
        Validity
            Not Before: Jul 23 11:01:13 2026 GMT
            Not After : Jul 24 11:01:13 2026 GMT
        Subject: CN=6513bf9e024d09ce5652cb75164b36d2518a26f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:08:fb:57:8f:7e:07:90:d4:7f:16:d6:37:09:
                    78:40:8b:33:3a:6f:03:cf:48:d5:bc:b7:5c:29:60:
                    e2:64:d0:b2:5b:9a:a0:19:b0:2b:ce:70:09:ab:59:
                    47:f1:5b:6f:dc:b3:99:9b:91:cc:b1:7a:80:1a:58:
                    a2:1c:42:48:45:19:f3:10:1d:47:0d:b2:89:a8:5a:
                    f3:7e:92:93:f5:f6:3a:62:d0:f6:66:a7:f7:2e:ed:
                    2b:52:f0:cc:8f:77:15:26:51:99:58:85:6a:cf:37:
                    d9:4e:44:7f:64:64:c2:50:7f:19:5c:c3:d9:b4:4f:
                    99:10:7a:fd:6d:fa:b7:b0:5c:4a:55:a8:6d:ab:87:
                    14:09:fa:31:20:a4:b4:c9:dd:af:29:14:66:5c:3b:
                    07:da:ad:0b:f1:aa:04:be:18:a2:b8:8e:92:df:4b:
                    32:66:f2:20:07:9b:1f:1f:e5:99:f8:46:51:f2:35:
                    ba:5b:92:e7:c0:44:6f:93:d3:87:a2:6c:b4:77:9a:
                    9b:a1:33:63:b0:1b:18:e3:0d:11:e8:1b:ec:c5:be:
                    73:36:29:8c:7b:f2:20:8a:6c:c2:43:ed:65:69:22:
                    ba:3d:44:b8:4d:50:c8:53:4c:42:2b:08:98:f9:10:
                    05:fe:69:ad:d3:93:64:89:fc:5d:9c:87:77:70:05:
                    88:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:13:BF:9E:02:4D:09:CE:56:52:CB:75:16:4B:36:D2:51:8A:26:F8
            X509v3 Authority Key Identifier:
                keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:6a:cb:a0:b3:d0:0e:04:49:ec:c6:f6:53:a9:b5:d6:b2:13:
         ae:de:c0:6f:ab:38:61:c3:38:ad:f3:55:c3:1f:4b:ec:cb:e3:
         3e:c0:f0:34:b7:2e:a7:ad:df:d0:e8:71:2a:4c:10:8c:8e:b7:
         74:2d:81:4a:fc:ef:20:6a:d1:8a:1e:23:be:80:95:ab:86:70:
         b8:4b:22:4b:47:31:3b:5e:69:ff:14:05:7b:d9:cc:5c:3b:ce:
         f4:d1:5e:b9:c5:a8:35:a9:71:20:e6:f0:0b:04:ec:03:90:20:
         b5:c3:39:d7:fd:2f:f8:f0:71:d5:7d:e2:4d:4f:cc:dc:c8:95:
         d7:3d:c4:42:4f:ec:79:61:be:7f:49:95:58:74:a5:c0:f2:62:
         58:9d:0f:a5:67:ee:07:e1:e6:d4:26:b3:e0:2c:d2:85:35:22:
         af:74:ae:da:7d:97:78:33:c0:d1:89:e1:04:c4:7b:f9:58:19:
         8e:d7:ae:19:54:7f:df:95:b3:5f:36:06:d1:94:7f:7a:17:e9:
         5b:c8:68:25:ff:ec:48:79:79:8a:fa:27:9a:1c:db:2c:17:df:
         34:40:14:7a:e2:f5:71:6b:8f:2c:1b:f8:a4:e2:e9:cd:07:94:
         0f:e6:02:92:80:fc:3c:c4:18:91:02:45:39:e5:53:6b:b5:b3:
         a5:93:0f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:12 2026 by rpki-client