Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
File:                     oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft (raw, json)
Hash identifier:          Ssv+BVnKChXqk6olkStluLQcgpvAb+u53ENuyGV3eX0=
Subject key identifier:   1F:E4:A3:15:1A:EB:12:4C:7A:D3:BD:31:21:81:3A:93:6E:72:A7:EB
Authority key identifier: A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
Certificate issuer:       /CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Certificate serial:       019F9436778BBA4DF260CC016D83C2EA63E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
Manifest number:          0B9B
Signing time:             Fri 24 Jul 2026 13:00:25 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:25 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:25 +0000
Files and hashes:         1: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl (hash: vFoAMYCLXjN4KbKGfNKYnhuKKDOoOtfBA0B2UHEyO1Y=)
                          2: rTTUeShcOXNB_38gPBfANBYb9Rg.roa (hash: SNHTIMM1yFWrTxfEjv177J1xrcwVvQjJHLgNi04rw5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:77:8b:ba:4d:f2:60:cc:01:6d:83:c2:ea:63:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
        Validity
            Not Before: Jul 24 13:00:25 2026 GMT
            Not After : Jul 25 13:00:25 2026 GMT
        Subject: CN=1fe4a3151aeb124c7ad3bd3121813a936e72a7eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:82:1b:d0:35:bb:12:5d:82:2e:ab:e6:81:55:
                    29:3f:e6:5c:41:5c:4b:51:7e:c9:b8:9d:80:fa:b4:
                    03:e2:05:b7:5c:bc:97:de:69:05:fc:7e:29:73:9a:
                    67:81:25:6e:45:88:16:a3:8b:11:95:ac:c6:0c:80:
                    af:cf:f3:e1:4c:fb:8a:20:7c:33:7f:f4:2c:f0:45:
                    5e:77:83:4a:d7:8a:06:c4:40:93:47:d3:ea:82:74:
                    88:2a:ca:0a:cf:36:e2:44:6e:d2:1e:e0:ea:36:23:
                    27:00:ec:8a:1b:94:ac:ce:de:55:ed:81:57:91:b8:
                    34:5e:da:e9:f2:62:96:4b:be:51:39:89:88:9d:19:
                    f0:8f:6e:5f:a8:61:b3:12:df:41:d8:7c:2d:7f:62:
                    5e:6a:5a:7b:22:84:02:eb:04:30:45:91:ad:fc:e9:
                    f9:7f:66:b2:68:95:32:0f:93:c0:58:4d:a8:ff:bf:
                    58:d0:99:d2:73:bb:db:b9:71:b1:3d:d1:26:f1:b0:
                    67:fa:b0:96:cc:04:9b:bb:6a:8d:3d:f4:de:45:8d:
                    93:22:8a:75:99:ed:85:60:01:60:71:09:e2:60:21:
                    66:33:1b:8f:a9:b0:c3:98:5c:de:2c:40:b8:19:2b:
                    59:95:e5:55:7f:ff:63:3d:61:b1:70:0e:f4:c5:27:
                    f1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E4:A3:15:1A:EB:12:4C:7A:D3:BD:31:21:81:3A:93:6E:72:A7:EB
            X509v3 Authority Key Identifier:
                keyid:A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:4c:f1:81:9e:71:00:2e:ca:66:87:69:fb:75:5a:71:47:0b:
         be:4a:d3:52:45:7e:9f:66:53:c5:dc:40:e5:80:9f:20:92:66:
         af:a8:65:c9:e2:81:da:9d:dd:f5:ba:dc:12:2c:1a:dd:0e:35:
         39:6e:90:fc:46:92:8a:6d:1d:19:c1:64:77:2d:ca:88:be:43:
         c3:3f:19:70:0a:14:c2:43:7c:d2:ca:d3:2a:12:2d:fb:92:1f:
         db:a2:a7:6e:43:14:e2:ed:b2:91:b2:8d:eb:f1:0d:c6:f7:79:
         4b:1a:15:b9:15:92:bd:f5:f5:52:82:08:58:08:d5:34:2a:5b:
         ec:da:af:c5:5a:4e:09:17:60:50:78:52:a3:82:57:72:ec:39:
         a6:09:e3:05:8d:9e:e4:1d:9b:6d:a8:c9:fa:43:5b:a5:67:2f:
         64:04:92:f7:39:4d:a9:e4:8e:64:98:21:2b:a5:ea:95:4e:fc:
         1d:97:2e:88:f5:b3:be:2c:18:56:6b:35:a0:d3:97:b2:33:91:
         82:d7:9b:8a:db:50:f8:e6:ef:08:4f:1b:3f:b0:10:fd:6d:5e:
         0c:d5:44:b2:8c:a0:f1:d9:58:3f:4b:84:eb:00:d2:5b:db:24:
         d7:09:b5:3f:1c:6d:ff:ed:1f:59:ae:b0:d9:93:b8:6d:02:1e:
         fa:22:38:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:10:43 2026 by rpki-client