Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
File:                     o875PLessPtJuiiKeg-_JtMAT6U.mft (raw, json)
Hash identifier:          cLpDQNuZ1hTEHwIDXkwWvt098fva2VCGE6T+0Gv0/L0=
Subject key identifier:   2D:8D:E7:AF:DC:6A:23:C1:AC:DE:1A:50:6C:4C:0B:FF:27:9F:B4:63
Authority key identifier: A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
Certificate issuer:       /CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
Certificate serial:       019F95B7B5F4375C4B70D9A97940D585ECF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
Manifest number:          0B32
Signing time:             Fri 24 Jul 2026 20:01:12 +0000
Manifest this update:     Fri 24 Jul 2026 20:01:12 +0000
Manifest next update:     Sat 25 Jul 2026 20:01:12 +0000
Files and hashes:         1: 5t3r-e7tyLlW84cUDqRXL5ROFSo.roa (hash: LjPlWorNn2ybzLX8+yX/V0IpzdHIQY94ZXTGvGnunJ4=)
                          2: o875PLessPtJuiiKeg-_JtMAT6U.crl (hash: k8KoU0gkJ9w1eURYSQrBrf2nmsvPRHgbKeHHAdZdb2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b7:b5:f4:37:5c:4b:70:d9:a9:79:40:d5:85:ec:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
        Validity
            Not Before: Jul 24 20:01:12 2026 GMT
            Not After : Jul 25 20:01:12 2026 GMT
        Subject: CN=2d8de7afdc6a23c1acde1a506c4c0bff279fb463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3a:45:3d:b3:c2:2d:1e:61:39:20:a8:8e:93:
                    3e:14:c2:93:a9:91:99:50:fd:b3:1a:3d:d7:b4:7f:
                    95:26:2c:4f:d1:ca:47:d0:03:4d:23:6e:dc:8e:df:
                    75:f9:3b:f7:9c:65:5d:98:58:11:cc:00:32:3e:44:
                    91:a5:93:51:e3:f2:90:08:94:2d:86:cd:64:c5:6c:
                    33:c0:8b:7d:3a:f6:a7:00:4a:29:b0:5c:d8:75:f7:
                    cd:12:3d:c4:09:19:7c:54:13:79:e2:7b:bc:48:c8:
                    84:00:aa:14:16:db:d9:0e:e7:88:d4:a7:51:00:2a:
                    db:1f:77:e2:65:8e:ca:22:38:1b:da:2a:a4:45:06:
                    83:fe:55:8d:92:55:3b:e2:a6:ea:46:9a:82:b0:85:
                    cb:8c:68:0a:89:b0:00:9e:6d:dc:78:8c:f5:8f:99:
                    92:ea:bc:3d:44:72:75:f9:a4:66:9b:5d:7c:99:bc:
                    86:47:a0:8c:d5:48:15:39:78:1a:7d:c7:1b:d8:7b:
                    15:fe:bb:de:ad:b0:48:9e:ba:9a:48:94:64:36:d3:
                    7d:86:aa:49:89:62:13:5b:ff:70:5a:f3:4a:89:79:
                    fc:dd:da:c1:71:a5:69:a3:be:e1:df:d6:0d:66:9c:
                    9a:e9:f9:46:e6:ec:53:92:a5:32:08:b7:97:bd:97:
                    8b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8D:E7:AF:DC:6A:23:C1:AC:DE:1A:50:6C:4C:0B:FF:27:9F:B4:63
            X509v3 Authority Key Identifier:
                keyid:A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d4:07:f0:88:0a:f7:b9:af:f3:1c:bf:6b:6b:52:a1:ed:2e:
         15:04:19:09:22:10:ce:f8:fb:0c:e5:c4:bd:1a:80:7c:9e:3e:
         18:12:67:27:d3:fe:12:1d:b6:ce:ef:7a:20:83:67:1a:07:b1:
         3a:b4:0f:b0:77:45:59:ff:fa:72:80:0b:62:1f:a9:b2:79:44:
         31:c2:1a:85:b5:94:d3:00:3e:47:29:11:17:80:13:ff:19:f5:
         ff:c6:5b:82:09:72:e3:c1:94:31:0c:3a:98:35:33:1e:a9:3a:
         7b:55:86:e7:43:cf:a6:fb:29:73:0d:c5:a7:ab:3e:59:53:6f:
         16:4a:99:85:e0:87:f5:2f:66:fc:b1:fa:3a:ef:e2:98:53:28:
         6e:cc:8a:7b:b1:0f:4d:ac:27:c5:da:92:37:27:4f:41:9b:ee:
         21:5f:f6:d0:1c:e4:db:fd:d0:58:d6:47:09:8c:e0:9c:99:e2:
         06:b0:04:37:38:1a:fe:f8:d6:74:5b:0b:e4:72:d3:6d:5e:7d:
         3d:09:14:27:e7:ab:43:a6:50:ea:ae:29:df:59:5d:fc:53:fa:
         cf:20:ad:5b:2b:24:cd:99:59:f3:30:ba:ec:3e:9b:8a:07:fd:
         85:03:3a:f9:42:1b:df:87:0b:83:d5:74:0a:1c:1c:6d:90:13:
         d1:84:76:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:13 2026 by rpki-client