Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
File:                     OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json)
Hash identifier:          Y3PZz+fO2MsVrts0TxJ+rBTIOPVK5cT/Fs6W0y2Re/k=
Subject key identifier:   53:AD:73:33:F2:4C:97:DF:D8:60:95:53:D6:2E:3F:89:81:21:19:BB
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Certificate issuer:       /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial:       019F90FF4590A3BF63571150AB6D18FD8A6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
Manifest number:          0A44
Signing time:             Thu 23 Jul 2026 22:01:16 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:16 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:16 +0000
Files and hashes:         1: 6QjQA0_fqdIryNhtjxIfR8HzBm8.roa (hash: BdP8cS5Jr2HaqgKC6lWTWfU5V8jliQKRlVrIRV0QG54=)
                          2: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: kT6a+buNi4s2D8mMaZEdgEvcfBXwZqsbZgPN5vu+JMM=)
                          3: egvTStfdqsgaJQHUlI4Gx-druNs.roa (hash: 4U3wHEEQUhulNGL0yqru9oCFOlljnEnQXHB+fB5oMsg=)
                          4: tvvhjcNPTzu8EJ_egoIMXRYZBJ8.roa (hash: mDC6nKfTSpQ8MtQgVXXdC9nwrvajhFovh0zIQBw5Eko=)
                          5: y2R7XAH-3-kA5U74hXHHO_c11dI.roa (hash: gWO/uuYDyiGKuAWY4EaQAg3d79DNvwcV+IkMjIH1jbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:45:90:a3:bf:63:57:11:50:ab:6d:18:fd:8a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
        Validity
            Not Before: Jul 23 22:01:16 2026 GMT
            Not After : Jul 24 22:01:16 2026 GMT
        Subject: CN=53ad7333f24c97dfd8609553d62e3f89812119bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2c:d1:62:4a:89:74:fa:bb:3c:d1:b2:48:0d:
                    62:c9:ed:40:a0:9e:da:f7:8a:02:db:0c:50:ac:b3:
                    aa:28:22:9a:35:73:29:ff:88:ab:9d:6a:fb:d0:87:
                    d1:73:3d:6c:6f:90:5b:91:b6:27:3e:ac:67:34:fa:
                    56:64:2e:77:3b:96:43:c5:e6:76:c9:02:e0:fe:69:
                    af:7d:68:08:f9:c7:39:46:76:9b:c2:b9:44:45:df:
                    47:58:2f:27:33:e3:bc:64:44:d8:4f:24:cd:e6:ba:
                    07:d1:6d:72:4d:03:ea:ec:fb:bd:af:2a:cd:70:09:
                    ab:d2:60:f8:f0:23:47:40:e0:fa:e9:9d:21:57:27:
                    7f:03:21:8f:34:e7:48:76:f1:9f:8c:37:dc:d3:5f:
                    19:4d:6e:0c:17:64:d1:44:b3:83:f9:a2:fa:dc:05:
                    bd:57:69:7a:32:a0:bf:7c:2d:83:40:d1:4c:88:3e:
                    6b:ed:ab:1b:38:32:c3:d0:0b:9e:cb:e4:95:cb:9a:
                    50:2b:44:2e:46:38:6b:20:f5:d5:6b:cb:61:ce:db:
                    56:95:a0:63:ff:bf:52:62:56:13:85:50:85:b0:b2:
                    46:d0:ec:7f:e9:d0:2f:72:8b:fd:56:12:ed:05:35:
                    bf:0a:46:ad:98:2d:5d:a4:d6:e4:08:bc:b2:5d:59:
                    35:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AD:73:33:F2:4C:97:DF:D8:60:95:53:D6:2E:3F:89:81:21:19:BB
            X509v3 Authority Key Identifier:
                keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a9:24:f0:f4:8a:c6:7a:95:d9:31:2c:16:97:98:58:ae:58:
         5c:06:7b:50:c6:a2:80:b5:46:6b:9f:b8:29:21:3b:f1:d9:73:
         12:21:8e:c7:8d:48:be:05:1d:7a:7d:de:9d:76:b1:01:f2:ab:
         bb:bb:3f:57:dd:58:d4:70:dd:0d:4c:8a:be:38:f1:4d:b5:dc:
         81:36:c6:5f:42:89:c4:ba:0b:0a:66:05:6f:b3:56:21:9b:09:
         ac:1b:1d:93:db:a9:c3:d1:8c:57:9e:aa:2c:15:e1:28:b6:85:
         c4:05:0d:5b:1f:0e:f0:be:e4:51:a3:20:48:f8:22:e5:57:8b:
         7b:16:d1:2e:12:26:08:d0:11:21:e0:5c:9e:2e:ad:bb:c8:2e:
         59:db:4f:75:41:00:e9:fd:ec:55:b1:ad:1e:a6:a0:db:a5:11:
         9e:a6:cd:64:50:7b:49:b3:03:c7:a0:42:f4:8c:23:4c:4e:20:
         7d:84:29:87:5e:09:fe:63:f7:1b:58:e4:af:fd:dc:9e:2e:3f:
         91:68:76:1b:26:59:81:b9:7f:a3:f4:bc:f6:30:0a:47:80:34:
         13:51:4e:a0:d7:4f:54:e8:e2:ef:f7:e8:90:d4:a9:cd:ef:3d:
         b6:b1:10:b1:1a:72:61:56:c0:a2:8e:13:df:dc:47:d1:e4:2b:
         ad:e1:3f:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/0WQo79jVxFQq20Y/YpvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MjQ3Zjc3YTNhZTBhZjcxZWFjMDMyNTY0NDlmNWQyOTJj
ZmZkNzQwHhcNMjYwNzIzMjIwMTE2WhcNMjYwNzI0MjIwMTE2WjAzMTEwLwYDVQQD
Eyg1M2FkNzMzM2YyNGM5N2RmZDg2MDk1NTNkNjJlM2Y4OTgxMjExOWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtizRYkqJdPq7PNGySA1iye1AoJ7a
94oC2wxQrLOqKCKaNXMp/4irnWr70IfRcz1sb5BbkbYnPqxnNPpWZC53O5ZDxeZ2
yQLg/mmvfWgI+cc5RnabwrlERd9HWC8nM+O8ZETYTyTN5roH0W1yTQPq7Pu9ryrN
cAmr0mD48CNHQOD66Z0hVyd/AyGPNOdIdvGfjDfc018ZTW4MF2TRRLOD+aL63AW9
V2l6MqC/fC2DQNFMiD5r7asbODLD0Auey+SVy5pQK0QuRjhrIPXVa8thzttWlaBj
/79SYlYThVCFsLJG0Ox/6dAvcov9VhLtBTW/CkatmC1dpNbkCLyyXVk1JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOtczPyTJff2GCVU9YuP4mBIRm7MB8GA1UdIwQY
MBaAFDkkf3ejrgr3HqwDJWRJ9dKSz/10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1NSX2Q2T3VDdmNlckFNbFpFbjEwcExQX1hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmVkOWMtN2MxMy00OGI5LWE4ODYt
Y2Q2NmFkNTM0ODEyLzEvT1NSX2Q2T3VDdmNlckFNbFpFbjEwcExQX1hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmVkOWMtN2MxMy00OGI5LWE4ODYtY2Q2NmFkNTM0ODEy
LzEvT1NSX2Q2T3VDdmNlckFNbFpFbjEwcExQX1hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKkk8PSK
xnqV2TEsFpeYWK5YXAZ7UMaigLVGa5+4KSE78dlzEiGOx41IvgUden3enXaxAfKr
u7s/V91Y1HDdDUyKvjjxTbXcgTbGX0KJxLoLCmYFb7NWIZsJrBsdk9upw9GMV56q
LBXhKLaFxAUNWx8O8L7kUaMgSPgi5VeLexbRLhImCNARIeBcni6tu8guWdtPdUEA
6f3sVbGtHqag26URnqbNZFB7SbMDx6BC9IwjTE4gfYQph14J/mP3G1jkr/3cni4/
kWh2GyZZgbl/o/S89jAKR4A0E1FOoNdPVOji7/fokNSpze89trEQsRpyYVbAoo4T
39xH0eQrreE/wg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:46 2026 by rpki-client