Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
File:                     oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json)
Hash identifier:          ZaeywG37VocIEAhYME0ImHXLPtHNjyrrw6rOtJA6VWQ=
Subject key identifier:   CF:94:E9:B0:A4:7A:9F:EE:79:E3:26:18:27:92:6B:1D:3E:D6:B1:D1
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Certificate issuer:       /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial:       019F92B5D8D39A373108D5F25794A87C81BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
Manifest number:          19CE
Signing time:             Fri 24 Jul 2026 06:00:18 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:18 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:18 +0000
Files and hashes:         1: 1qCi6Sq-_dCneR6GoHYrYL634Nc.roa (hash: si5wfQgczxPexpvI3zOZcdBSWeRL01fGRYVbjNQoh5k=)
                          2: Ey6_U3MNqlk5sSbuI2Okie2De-M.roa (hash: EHs4rxI+XpWq2Dq6A1mosS3qkiasZu2Py2spZNfHGZc=)
                          3: ZVmzCRGm6Ac5itIuDxSJvmt1oKM.roa (hash: vz5MSkdppxEecAJ47gQzG2qHkIp9VneH0S1nTYp4M1Y=)
                          4: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: rLuPkZ0WPOWjUvUpUiPK/eWUKNZ6kslur/4teGcbPVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b5:d8:d3:9a:37:31:08:d5:f2:57:94:a8:7c:81:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
        Validity
            Not Before: Jul 24 06:00:18 2026 GMT
            Not After : Jul 25 06:00:18 2026 GMT
        Subject: CN=cf94e9b0a47a9fee79e3261827926b1d3ed6b1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:0a:aa:a6:d6:05:2b:ac:44:d8:c6:29:ab:76:
                    86:2b:40:ee:a5:b5:c5:d8:e5:1f:bf:0e:41:0b:f9:
                    f1:cd:56:64:49:12:00:d8:dc:4a:32:ab:41:55:d3:
                    db:c6:a2:0a:2d:bd:45:4d:00:41:9b:b3:e0:12:4b:
                    b1:2b:f6:2a:73:4d:e8:fc:50:f3:18:9f:30:2c:23:
                    4f:08:b5:dd:1c:8d:ec:2c:80:b1:9f:5e:7e:f8:69:
                    1a:5c:0e:63:31:9c:69:e4:d1:35:cc:e5:16:e7:25:
                    7b:d5:90:17:fd:aa:c9:8f:7d:1d:aa:e4:2d:53:b7:
                    9d:54:52:72:16:9c:57:10:71:07:72:44:91:1f:42:
                    da:b4:cc:8c:16:29:8f:8c:8d:55:6a:9e:12:38:cb:
                    84:b4:1e:16:f2:38:28:7b:fd:60:ef:be:31:c5:88:
                    81:7f:ae:04:29:71:e1:52:ae:42:d9:45:e1:87:9c:
                    fc:9d:d7:bb:52:4d:ba:3e:08:3c:6d:ee:0f:a3:d3:
                    1c:f8:ce:d7:66:bc:e9:2d:2e:52:af:cf:bf:04:d6:
                    c4:41:e7:d4:c4:1b:03:22:71:65:64:b5:68:98:ed:
                    41:4f:6c:28:ce:74:25:68:1e:26:f3:d3:64:7c:73:
                    cc:5f:24:bb:3a:be:1e:57:1c:66:90:3c:84:67:1c:
                    5b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:94:E9:B0:A4:7A:9F:EE:79:E3:26:18:27:92:6B:1D:3E:D6:B1:D1
            X509v3 Authority Key Identifier:
                keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d6:66:82:7f:28:7e:0f:85:5a:8a:ad:5c:27:08:02:53:82:
         38:b1:0b:2c:9e:52:fe:a3:5b:45:d8:77:43:29:67:4a:0c:2a:
         cd:6c:75:5f:1a:e6:eb:cf:83:06:f7:b5:86:e1:9f:67:65:73:
         09:36:7a:bc:6b:b2:b9:4f:39:38:a3:9b:7e:f8:a1:3e:e8:9b:
         59:76:2c:02:a3:f2:f6:22:85:43:90:a0:82:55:80:d8:d6:a3:
         e6:d7:1b:04:86:f9:8a:7e:3e:76:72:8d:5a:ea:08:3d:1d:c7:
         e9:24:a1:be:ff:6d:76:3f:98:20:d9:9a:6e:61:5e:83:38:18:
         aa:ef:ca:66:77:8f:36:af:0d:a5:c5:ad:c5:e9:2b:a8:b8:2a:
         95:14:bd:42:78:76:ba:84:5c:d2:6d:58:c1:5b:34:85:aa:cf:
         ec:88:5b:eb:fb:a5:5c:fd:bf:f8:c2:ec:6e:92:6f:01:6f:06:
         a2:10:43:0f:d8:2c:54:42:60:34:dc:74:18:2a:7d:78:76:a6:
         c2:8c:1f:8f:7f:9c:45:4d:49:3a:65:3a:0f:b9:24:bc:3f:5f:
         73:b7:2f:b4:88:27:cd:aa:58:18:75:c2:d6:67:68:7a:41:11:
         0a:73:b2:a4:67:aa:e3:7e:18:10:d0:50:2e:4e:7e:81:86:14:
         80:26:c0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:16:44 2026 by rpki-client