Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
File:                     oODFkETIfj4t-hPL-ZAjruAS76A.mft (raw, json)
Hash identifier:          r+n1hq5QVpVGepiKby5dQ9f4EWyZAyVPdtGpESgZC/8=
Subject key identifier:   EE:8C:2F:66:44:DE:C0:A5:32:4B:7F:0A:47:CA:50:94:54:66:74:13
Authority key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
Certificate issuer:       /CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Certificate serial:       019F935C07DD7CCA6FEBF1871A17D145B93A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 09:01:49 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:49 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:49 +0000
Files and hashes:         1: dz15OcBGpk_cfrn8xhk6BurTsy8.roa (hash: xEr9Xe5b8oihGpA9oK+zCpOpKPeDuBptibdAWRYh0iU=)
                          2: oODFkETIfj4t-hPL-ZAjruAS76A.crl (hash: dAQ2e7BthzXm1pZf0AB1bZbxIySxTi0kj7RROvi/K18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5c:07:dd:7c:ca:6f:eb:f1:87:1a:17:d1:45:b9:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
        Validity
            Not Before: Jul 24 09:01:49 2026 GMT
            Not After : Jul 25 09:01:49 2026 GMT
        Subject: CN=ee8c2f6644dec0a5324b7f0a47ca509454667413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:12:96:27:6d:06:92:dd:a2:be:47:46:69:db:
                    7e:5f:a8:d3:b0:53:cc:a7:e9:25:cc:85:35:72:e1:
                    eb:bc:b2:04:16:8d:54:94:7a:be:1b:bd:73:b8:e4:
                    0f:65:60:42:bb:fc:2c:6d:6e:8a:75:d2:1f:a1:6e:
                    47:25:e8:da:0b:47:e7:59:82:57:67:86:68:7d:ec:
                    b2:37:6a:1e:2e:68:8e:37:d0:46:6b:a4:a6:91:00:
                    cd:53:b3:94:48:93:09:e8:d8:66:e7:6b:18:01:d8:
                    f7:c5:c4:fb:37:b4:6a:bb:6f:12:2a:c3:2f:e1:f6:
                    80:49:a7:34:0e:95:2c:72:71:57:03:c4:13:8b:4d:
                    f8:19:35:88:4f:c0:41:a2:29:8a:49:5a:9a:97:91:
                    91:09:3a:2a:65:65:8f:26:60:9e:b9:84:84:d9:9d:
                    0e:df:30:67:14:f5:62:29:7a:04:be:64:36:83:7e:
                    2f:de:e7:07:cb:4d:ff:1b:56:e5:56:cc:7d:56:0a:
                    a3:67:35:6d:1d:0c:22:cb:23:df:18:c2:d8:12:f6:
                    f3:68:d2:ff:22:09:ba:b8:b0:ef:4a:7f:56:fc:16:
                    6a:ba:e9:79:91:34:dc:24:c9:fe:14:fc:c3:b2:d7:
                    c4:49:ae:ad:0e:4f:ab:2a:5b:b2:ba:02:f6:f4:ee:
                    d9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8C:2F:66:44:DE:C0:A5:32:4B:7F:0A:47:CA:50:94:54:66:74:13
            X509v3 Authority Key Identifier:
                keyid:A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:c1:e1:f0:03:50:8f:23:cf:97:0b:79:2f:55:85:60:8d:90:
         f2:67:d4:8f:c9:ed:7a:be:7b:91:d2:71:5a:88:13:21:e5:43:
         c3:4c:3b:06:5b:53:9e:61:12:c1:38:b4:5b:f2:9d:a8:17:4c:
         fb:ea:2a:22:25:1d:94:54:08:b9:61:c4:0a:ab:e1:b4:57:31:
         51:8a:72:33:8b:42:1c:5c:69:dc:73:90:4c:7a:fd:b6:11:ba:
         f9:f0:f9:97:f8:d4:b7:55:85:30:31:7f:97:d7:53:1f:a3:92:
         69:59:3e:13:9c:65:10:46:b9:ac:fd:81:7f:2f:ce:54:a1:db:
         27:b3:3b:34:99:26:f4:5a:f3:a6:ec:05:e8:86:5d:5a:85:3e:
         ed:bd:a0:dc:65:ca:e1:ed:ac:34:db:1f:4a:1c:36:2c:d9:1f:
         af:b7:d1:52:68:89:79:4f:f9:6f:60:7a:91:51:f6:f8:94:64:
         95:1b:66:51:5c:6f:01:44:11:c4:f1:9f:18:31:4c:c9:e2:ff:
         58:b3:a0:0e:9b:63:6a:7d:56:91:98:1f:28:02:db:2d:88:d6:
         11:e7:20:a2:d5:62:9a:98:62:a0:90:1f:11:bf:45:8c:24:c1:
         b1:a4:34:80:8a:6d:60:f6:26:d9:e9:27:8e:ed:52:c6:68:49:
         05:12:70:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:39:05 2026 by rpki-client