Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
File:                     OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft (raw, json)
Hash identifier:          PsSoUiQDXD5eZKac6azmTBRwd0Gr30FOe1LVPJdL3aA=
Subject key identifier:   9C:E4:17:4C:69:11:D5:DB:C4:F7:70:3F:67:E3:4E:E2:BD:14:5C:7C
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Certificate issuer:       /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial:       019E3072FC8F7B864D14C74F6F4258C3F188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
Manifest number:          0EA3
Signing time:             Sat 16 May 2026 11:01:42 +0000
Manifest this update:     Sat 16 May 2026 11:01:42 +0000
Manifest next update:     Sun 17 May 2026 11:01:42 +0000
Files and hashes:         1: 1AdLwVTQwnRojaJc6oKg4bE5e10.roa (hash: SmldC7KFTFrB2ovoO23QX0S7PhV2KBqhDfb2PIUZ9dY=)
                          2: OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl (hash: fXHLgjeH9SRfC3+aM3qPMjL/Mq3BN0UeTZHVM3QR5tY=)
                          3: RYsY-o2i4jJuo5LcGcM8XUCbb9c.roa (hash: Dw7b6pkuG5rO21BY1jXBfmGu/ri7kYZ0iuN6r4DYx0Q=)
                          4: YAzw4t4zF4HrK6DQM0Hi6OJnv_c.roa (hash: Czpsw7Ht+JmwRHsAFUGdIdcpmViWugcfHRbmpORJDMk=)
                          5: i1ce_KCZyzzJnWCLHJltrqd5osU.roa (hash: YFwwgtjx89C2fEmhpNXxjUv1MUQKaMCAp+nvJdfMp5o=)
                          6: qw0bNos2uMNz09JenRAlkTtNmd8.roa (hash: SLKj00aaETL606oUEHzZc3k3yjfYWagWu8LRBWMxnBA=)
                          7: sYth0C5gNTA4Nn0ZVlj2vFu-rcA.roa (hash: YQlDl2GO98hMqxb9t2YAM1lWkbesF46HgOB5GJrP+Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:fc:8f:7b:86:4d:14:c7:4f:6f:42:58:c3:f1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
        Validity
            Not Before: May 16 11:01:42 2026 GMT
            Not After : May 17 11:01:42 2026 GMT
        Subject: CN=9ce4174c6911d5dbc4f7703f67e34ee2bd145c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f4:3f:03:7d:e3:22:17:a4:6d:5b:ad:3a:ff:
                    ac:a5:34:d6:11:ae:cc:b4:2f:61:d2:ca:27:fc:6b:
                    4f:36:48:bf:d1:09:30:9f:a4:dd:08:7d:6f:1d:1a:
                    6b:5f:66:2f:1a:bf:2a:43:38:83:19:e2:05:2d:c9:
                    7f:a9:45:a1:87:97:9d:69:e6:86:80:5d:71:2a:85:
                    00:f6:4c:75:67:5f:7f:2f:4c:bd:0d:1d:77:79:0f:
                    b9:95:a2:26:39:a7:39:63:3d:b3:02:d9:e0:48:2e:
                    11:61:ea:20:72:b3:37:bd:26:e2:d6:9b:2a:16:ed:
                    54:ff:68:f3:82:a9:92:96:ac:12:30:35:9d:bf:06:
                    f1:ec:82:c5:ad:69:ba:70:3a:61:88:23:18:61:84:
                    4d:76:ef:bd:7e:b9:78:4f:25:1e:06:4c:a7:4e:0c:
                    a5:c8:b5:34:36:aa:37:17:1e:d6:1a:64:11:ca:73:
                    fc:cb:e1:c2:6a:17:6f:be:83:51:47:dd:69:27:f3:
                    dd:c6:52:51:c0:cb:ad:28:3a:06:66:55:d1:bc:21:
                    ff:72:f8:c1:68:c8:54:c0:f0:fe:d0:b1:78:85:55:
                    6d:26:93:a8:76:db:f3:f7:53:35:c3:a0:cb:a2:28:
                    8c:23:b7:7c:9b:ad:13:aa:25:db:9a:82:ac:e5:0f:
                    c8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E4:17:4C:69:11:D5:DB:C4:F7:70:3F:67:E3:4E:E2:BD:14:5C:7C
            X509v3 Authority Key Identifier:
                keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:e3:ff:c6:50:5d:8b:3b:67:b4:cf:a1:21:74:60:3e:66:54:
         8a:df:33:67:30:63:66:4e:8c:0c:d9:db:93:bb:01:07:6a:f3:
         89:26:0f:d5:77:23:19:2a:ff:f0:ce:cd:cf:88:05:32:2f:02:
         03:33:32:2d:d4:43:e7:3e:37:62:29:3f:42:f2:89:e5:3c:75:
         22:25:39:e8:6d:64:ab:ab:d2:6c:45:20:75:08:91:e9:2f:37:
         b5:06:da:06:66:26:ca:68:48:4a:74:71:36:27:f9:a5:5f:4b:
         1a:c9:69:5c:50:49:8c:d6:d6:f1:6d:fd:ae:b7:df:fb:28:5c:
         93:c9:b3:d6:80:f0:2d:e6:7c:64:de:f0:d8:c6:d4:ac:21:c8:
         ae:f6:66:37:4b:1b:46:19:be:e0:a9:1f:99:3a:6f:9b:74:8c:
         92:3e:da:48:ac:38:3a:b5:52:66:be:8c:0d:3a:12:0d:bb:de:
         3d:f3:be:bd:fb:95:3c:71:ed:84:01:45:d8:b2:db:5e:fe:96:
         69:3f:b1:eb:3e:83:88:fd:9c:82:c0:cd:b8:d8:c7:87:e9:92:
         e5:be:2e:59:93:c6:9f:41:32:21:cf:32:34:b8:90:8c:6b:7b:
         d8:80:43:12:e0:e4:b7:ab:94:3e:9c:b5:2c:c2:1d:1c:e5:9f:
         ae:c0:5a:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcvyPe4ZNFMdPb0JYw/GIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzI0NWQwNDkyZWVkZTU5YjA0NWI1YmUxZmQ0ZWI5MTYx
YmM0MTcwHhcNMjYwNTE2MTEwMTQyWhcNMjYwNTE3MTEwMTQyWjAzMTEwLwYDVQQD
Eyg5Y2U0MTc0YzY5MTFkNWRiYzRmNzcwM2Y2N2UzNGVlMmJkMTQ1YzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/Q/A33jIhekbVutOv+spTTWEa7M
tC9h0son/GtPNki/0Qkwn6TdCH1vHRprX2YvGr8qQziDGeIFLcl/qUWhh5edaeaG
gF1xKoUA9kx1Z19/L0y9DR13eQ+5laImOac5Yz2zAtngSC4RYeogcrM3vSbi1psq
Fu1U/2jzgqmSlqwSMDWdvwbx7ILFrWm6cDphiCMYYYRNdu+9frl4TyUeBkynTgyl
yLU0Nqo3Fx7WGmQRynP8y+HCahdvvoNRR91pJ/PdxlJRwMutKDoGZlXRvCH/cvjB
aMhUwPD+0LF4hVVtJpOodtvz91M1w6DLoiiMI7d8m60TqiXbmoKs5Q/IhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzkF0xpEdXbxPdwP2fjTuK9FFx8MB8GA1UdIwQY
MBaAFDlyRdBJLu3lmwRbW+H9TrkWG8QXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEt
YzQ0MmExOGYxZWZjLzEvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEtYzQ0MmExOGYxZWZj
LzEvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUeP/xlBd
iztntM+hIXRgPmZUit8zZzBjZk6MDNnbk7sBB2rziSYP1XcjGSr/8M7Nz4gFMi8C
AzMyLdRD5z43Yik/QvKJ5Tx1IiU56G1kq6vSbEUgdQiR6S83tQbaBmYmymhISnRx
Nif5pV9LGslpXFBJjNbW8W39rrff+yhck8mz1oDwLeZ8ZN7w2MbUrCHIrvZmN0sb
Rhm+4KkfmTpvm3SMkj7aSKw4OrVSZr6MDToSDbvePfO+vfuVPHHthAFF2LLbXv6W
aT+x6z6DiP2cgsDNuNjHh+mS5b4uWZPGn0EyIc8yNLiQjGt72IBDEuDkt6uUPpy1
LMIdHOWfrsBabw==
-----END CERTIFICATE-----
Generated at Sat May 16 19:30:39 2026 by rpki-client