Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File:                     oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier:          FME9VGZb5MfRbaU6eqeYe6LuEjswfgjqJq/lJm/JiCk=
Subject key identifier:   15:18:0B:15:AC:EE:A2:31:5B:DD:BF:E5:46:14:69:F3:86:C1:79:CF
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer:       /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial:       019F93C8B9451C2593A938C4D17D19F167FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number:          13A8
Signing time:             Fri 24 Jul 2026 11:00:33 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:33 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:33 +0000
Files and hashes:         1: 0an2pQXOSUa9Qv0CDLezuYXP9Rc.roa (hash: GI3HMCo+UnX0/WFi5FDffbeewol6/ny0qWi9o7/s4mw=)
                          2: 1-Xka6nhHlTAY0IkAtp7cisl4Q0o.roa (hash: cYSQflXuM4PG35Mh50PGE2nbDxv/tnzYwdWGgGNp7kU=)
                          3: 3-zjNQeLr2VYnGvtAQl3wPrAttQ.roa (hash: oZEc3kU6X6afeD3VVmtRDKKInN6hBgwdLqV0FrQL9OA=)
                          4: 3xEx3bVGfXIchqPcHOE-UCr11f0.roa (hash: y+CVyDs3ZBJgnuFTk7NR2y3nV9NJmzoB4Ik1Ns4joJs=)
                          5: U8YrDUVn3egAnNyXxX_1fs7ypak.roa (hash: 0J1ye72rXLmhonZZf0ebjERiurn0AgXIl7ABqMnbTn0=)
                          6: gr24W9hYxDP-t_iDnbRQ3OZdbjk.roa (hash: 3hVp+1R1qAZlY2bc8T6diQXm1af3Uw7Bq4eqKsz2fRA=)
                          7: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: tn/zi+bkg1Q7i3UVIpjYa8LbeTQhtJfyuo9oojYhEl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:b9:45:1c:25:93:a9:38:c4:d1:7d:19:f1:67:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
        Validity
            Not Before: Jul 24 11:00:33 2026 GMT
            Not After : Jul 25 11:00:33 2026 GMT
        Subject: CN=15180b15aceea2315bddbfe5461469f386c179cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fa:07:bd:03:fd:19:b5:4b:81:04:e2:4d:9f:
                    1b:88:9d:2c:3e:0e:e5:ea:a6:f2:b6:e1:c5:13:21:
                    1f:bc:49:76:9d:11:37:a6:f7:b7:b3:93:87:06:8b:
                    c1:17:4e:50:ab:e0:38:7a:d0:76:a5:e4:37:75:62:
                    5c:65:f3:b1:f8:ef:30:55:c9:97:bf:0b:55:31:cc:
                    90:c3:11:f8:82:e9:f1:52:43:7b:3c:d6:31:1d:56:
                    18:ef:0e:63:5b:4f:b3:59:cf:6c:93:4b:2d:15:10:
                    3b:c6:ee:15:ee:4d:4f:09:86:9f:7f:7e:db:90:af:
                    a2:f1:9a:f3:29:75:77:f7:a7:74:90:ae:f3:b0:c6:
                    8e:59:5f:88:d7:a1:f6:b8:64:47:1e:af:76:2f:af:
                    70:60:94:5e:0f:2e:a1:85:24:7f:92:d3:32:e0:e4:
                    d3:54:a0:a8:f6:17:a3:de:a1:ef:ae:93:30:fe:ba:
                    73:a9:7c:f7:f1:f0:b5:e2:ad:d0:53:75:d3:2e:bd:
                    01:e9:5f:19:60:e3:d1:30:b5:98:0a:b5:58:f6:b7:
                    e2:cd:6e:7b:2c:84:b7:b8:96:dc:a2:9d:12:49:18:
                    b4:fe:c8:9b:95:cf:0a:0c:28:da:f2:f1:3f:24:71:
                    39:c8:5e:80:79:5f:46:a7:43:23:ba:a3:c3:c7:8c:
                    1a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:18:0B:15:AC:EE:A2:31:5B:DD:BF:E5:46:14:69:F3:86:C1:79:CF
            X509v3 Authority Key Identifier:
                keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c7:e2:98:01:06:be:2b:08:4b:c3:7a:a0:29:f0:74:d4:4b:
         b3:02:f9:97:5d:bf:f4:73:2c:e2:62:cb:35:33:2f:e8:0e:e9:
         c0:32:6e:0d:27:04:09:36:1f:6f:20:7e:b0:ad:46:6a:5b:1b:
         a2:d1:79:e3:83:d6:14:32:dc:2e:69:d5:53:e5:32:ad:55:5f:
         07:3d:be:d3:a2:91:71:f7:11:98:e3:43:bb:cf:cc:05:97:a7:
         d4:86:4d:f4:dc:a6:d0:9c:4b:c0:4b:c7:2a:78:a4:53:38:a2:
         9f:c3:08:64:27:44:91:d2:d7:c7:d7:18:0e:c2:6d:4f:e9:71:
         f0:27:c8:c4:30:98:5c:ca:6a:45:a6:0a:eb:6d:a8:dd:cd:39:
         96:d3:74:1b:6b:a9:16:65:e3:6f:67:10:59:31:f2:3c:77:a8:
         8d:de:28:1a:4e:fd:f4:ca:f3:47:c8:4a:05:d4:c6:a0:9e:a3:
         13:32:b8:f8:a4:7a:0e:8b:6a:0a:b9:3d:ec:25:b4:2d:ad:2b:
         93:ca:9e:b8:da:04:fc:bb:98:93:cb:33:ce:5b:a0:6b:8a:2e:
         52:95:08:3b:86:fe:b1:2e:49:64:fb:d5:5e:a5:10:26:16:c3:
         d6:79:2b:09:32:41:62:ca:1a:91:58:ba:32:2b:5f:9e:3a:c4:
         42:c8:8f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:18:41 2026 by rpki-client