Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
File:                     oet7cZVO3_yjWEyF-gj7EiQv7NU.mft (raw, json)
Hash identifier:          U747jDaEu/7udyBNtNcgTwOmFjQfogU9l5XHa49jsWI=
Subject key identifier:   B0:3C:F8:D6:5F:AD:69:A9:58:98:43:DB:04:28:CA:1A:FF:D2:1D:81
Authority key identifier: A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5
Certificate issuer:       /CN=a1eb7b71954edffca3584c85fa08fb12242fecd5
Certificate serial:       019F946D9E53EBA021DD6D20C71A2B1622DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
Manifest number:          0299
Signing time:             Fri 24 Jul 2026 14:00:39 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:39 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:39 +0000
Files and hashes:         1: lE1Kxf9PJiSztZNrzwwBPAVYUcU.roa (hash: jNZxU5D1EKLny/wqaNa70XGzWgiNnFCUNtLqg86RKFE=)
                          2: oet7cZVO3_yjWEyF-gj7EiQv7NU.crl (hash: P1mL+E7BvOwAJc5D0f3ZxSUdo8wBlDnvSO9Mq45ug14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:9e:53:eb:a0:21:dd:6d:20:c7:1a:2b:16:22:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1eb7b71954edffca3584c85fa08fb12242fecd5
        Validity
            Not Before: Jul 24 14:00:39 2026 GMT
            Not After : Jul 25 14:00:39 2026 GMT
        Subject: CN=b03cf8d65fad69a9589843db0428ca1affd21d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:38:2a:18:c7:ad:f7:f3:e2:db:cb:1d:55:aa:
                    09:ec:6f:85:93:da:ec:b0:2a:c7:a1:fb:31:01:c8:
                    6d:40:01:b0:59:f9:69:d8:97:a9:5d:e4:5a:d7:eb:
                    ee:59:b2:10:72:10:4f:92:62:46:eb:b7:75:29:f2:
                    97:33:2e:61:84:a5:f6:03:fe:7b:14:64:be:f5:48:
                    9b:fb:e4:98:6b:88:d5:55:02:40:23:80:13:8a:4b:
                    75:4f:25:fe:0c:fc:31:28:06:82:ce:37:fa:b7:a9:
                    6f:fe:c5:a4:4d:db:f5:8b:1c:09:8f:66:c7:30:e4:
                    21:f6:dd:25:ac:8c:3c:67:a9:07:26:e9:82:4a:4b:
                    cd:c9:e9:f3:37:83:86:50:37:a1:83:b3:08:3a:15:
                    95:24:f4:20:c4:87:e1:18:0c:36:51:28:f3:c3:a6:
                    a5:5c:90:b8:35:cb:91:1b:77:f5:4a:74:ce:98:2c:
                    0b:75:f2:55:d1:56:a0:bd:bb:a4:85:37:45:41:a2:
                    bb:b6:d4:85:07:90:62:07:dd:2c:43:ae:d9:94:91:
                    bb:2b:69:29:54:fa:f2:66:2e:19:02:63:02:c7:cc:
                    dc:2e:bb:9c:50:93:c3:0f:be:f2:06:2d:f3:8c:29:
                    97:43:1e:c5:71:b9:5a:02:e1:35:84:26:45:f0:ee:
                    35:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3C:F8:D6:5F:AD:69:A9:58:98:43:DB:04:28:CA:1A:FF:D2:1D:81
            X509v3 Authority Key Identifier:
                keyid:A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ec:d0:bb:84:7c:22:fd:83:c4:91:66:8d:6d:89:b3:01:d3:
         ff:c4:19:be:c6:3c:4c:f6:b8:f8:22:39:47:87:29:59:b0:64:
         cf:7c:37:cd:57:fc:8e:c3:14:80:df:c2:33:19:4d:05:1b:25:
         8d:1d:d8:df:e4:b5:be:9d:e3:e1:ea:b2:2b:07:51:8e:a4:0c:
         89:74:ca:f2:c0:6f:38:e7:23:e3:29:d2:d6:73:d9:55:7d:14:
         00:01:3c:7c:87:39:64:f8:b1:94:f7:25:e7:21:af:70:cf:41:
         e0:e6:5f:03:b5:5c:43:89:33:52:6f:f6:fb:7e:c1:ab:04:63:
         d5:5a:ea:e9:5e:74:d5:2a:65:c4:e2:30:c5:fb:26:76:0b:85:
         d9:df:c5:cc:d4:4e:f0:08:1c:12:6a:c9:06:c8:84:82:b2:c8:
         70:bf:a6:3f:c3:22:a7:19:31:0b:02:a2:ac:d9:9a:40:80:6c:
         88:9a:52:a5:65:d7:8f:88:4f:64:a1:94:d0:8d:16:1b:b1:79:
         e9:ec:80:59:0d:fd:8b:90:88:f0:d9:a5:ee:83:67:90:3a:c4:
         78:bd:88:77:68:ce:a8:b7:1a:36:c5:bb:4c:40:cf:65:d0:53:
         a2:e7:a8:77:03:00:48:67:83:63:29:41:ff:a8:7a:ba:fc:68:
         f9:50:db:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:42:18 2026 by rpki-client