Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
File:                     OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json)
Hash identifier:          MaSz+uM3bfIO4q7EpchMUafjrJVO4tjTvsewYQht0s4=
Subject key identifier:   67:5B:3D:F1:FE:79:1E:2C:DB:B8:FE:0E:E6:A0:1B:2F:65:CE:E0:74
Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
Certificate issuer:       /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Certificate serial:       01A00394B5447EB27EB8D95690E608CF8F3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
Manifest number:          0B1E
Signing time:             Sat 15 Aug 2026 04:01:12 +0000
Manifest this update:     Sat 15 Aug 2026 04:01:12 +0000
Manifest next update:     Sun 16 Aug 2026 04:01:12 +0000
Files and hashes:         1: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: pAXXoYf3Ed/AjJteDyZ7C7RZOVDa3hK0hH/4ic2RUAg=)
                          2: futCv-J21MxYYna1NlT0XMLEUxQ.roa (hash: Nuw/WTHENdY0hVuqEP9gOdFLaQ350WDyvFQ78Xtrdks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:94:b5:44:7e:b2:7e:b8:d9:56:90:e6:08:cf:8f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
        Validity
            Not Before: Aug 15 04:01:12 2026 GMT
            Not After : Aug 16 04:01:12 2026 GMT
        Subject: CN=675b3df1fe791e2cdbb8fe0ee6a01b2f65cee074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:97:f1:5a:54:bc:99:30:40:3c:57:4a:fe:10:
                    9c:24:ac:2c:39:4b:aa:f7:8c:2a:3b:1d:7a:ac:43:
                    3f:75:66:81:c5:38:f7:6a:48:92:5d:85:53:3d:d0:
                    72:cf:e8:f4:b9:13:1d:37:a7:a0:d6:63:df:6c:92:
                    df:e4:90:44:75:2c:00:eb:e2:76:f2:08:b8:7c:a4:
                    c3:73:c3:a8:4e:87:7f:14:51:5c:b8:7a:06:70:df:
                    62:3d:2c:23:5c:c8:69:40:35:6d:b6:a6:41:d7:96:
                    aa:29:a5:64:4c:42:39:8b:26:5d:bf:71:fd:09:ce:
                    31:44:60:bd:85:fc:43:ab:b2:02:3e:f3:60:ea:c1:
                    16:30:31:82:63:cf:4f:48:59:63:7f:18:0d:a7:e5:
                    4a:87:0d:ee:55:c6:d6:c6:63:01:55:99:61:1f:83:
                    c4:ec:f0:64:af:af:42:68:d7:6c:61:e6:e7:f6:58:
                    ce:c5:4a:fc:1b:e5:51:5a:b1:20:35:36:87:36:05:
                    16:a4:9f:a6:79:96:b9:5c:bb:d5:0b:2d:fa:23:6c:
                    16:18:e5:ff:45:4a:8e:a6:75:ba:cd:ae:1f:56:f8:
                    bc:03:9e:c6:4c:85:18:36:94:c6:c2:72:be:f0:ae:
                    35:60:01:20:32:ac:62:17:91:bb:3e:bb:ff:6a:54:
                    cf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5B:3D:F1:FE:79:1E:2C:DB:B8:FE:0E:E6:A0:1B:2F:65:CE:E0:74
            X509v3 Authority Key Identifier:
                keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:fd:14:04:06:50:d8:f7:90:13:49:e8:b1:3a:00:cc:c0:d5:
         d7:25:ae:56:44:c1:87:45:64:f6:6d:ff:8d:cf:ba:ff:04:c2:
         be:71:90:94:1f:8d:16:ed:a3:5f:01:28:68:21:97:44:a1:a0:
         b6:71:f0:fb:be:57:02:fc:04:0e:33:8e:7d:c3:ed:19:5b:5f:
         e3:02:06:56:cc:0e:ed:ed:6a:44:ae:cf:e5:37:7c:93:11:01:
         6e:99:aa:20:27:e7:72:14:e0:84:36:fa:90:f6:0a:0f:29:15:
         5e:cb:fc:04:98:1c:8c:17:69:92:63:c4:95:bc:ac:bd:35:2b:
         b4:ab:25:72:1f:06:75:68:5b:57:5c:ad:a9:31:bc:ad:f5:80:
         39:8c:78:df:1e:2b:94:f5:91:00:05:e6:54:eb:6c:a2:82:c3:
         18:bd:a0:69:5d:a8:32:c6:97:4f:e9:5a:92:06:5f:9e:0b:58:
         4b:5d:9e:95:37:24:ef:9c:64:36:ef:24:d7:b2:55:49:2d:eb:
         7e:79:8e:1a:c9:fc:87:4d:38:be:8d:c7:40:92:4a:f8:99:e6:
         69:0c:9c:bd:67:f1:2f:d6:fd:b9:d0:40:46:3d:54:b3:91:ee:
         01:7d:aa:68:5a:49:da:33:af:f6:c9:6f:8c:b5:1c:28:96:94:
         2d:84:25:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADlLVEfrJ+uNlWkOYIz48+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NDI5ZWIwYmQ4NzAzYmUyZTVmMGFjY2MyODFiZjIyMTYw
NGIwY2UwHhcNMjYwODE1MDQwMTEyWhcNMjYwODE2MDQwMTEyWjAzMTEwLwYDVQQD
Eyg2NzViM2RmMWZlNzkxZTJjZGJiOGZlMGVlNmEwMWIyZjY1Y2VlMDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJfxWlS8mTBAPFdK/hCcJKwsOUuq
94wqOx16rEM/dWaBxTj3akiSXYVTPdByz+j0uRMdN6eg1mPfbJLf5JBEdSwA6+J2
8gi4fKTDc8OoTod/FFFcuHoGcN9iPSwjXMhpQDVttqZB15aqKaVkTEI5iyZdv3H9
Cc4xRGC9hfxDq7ICPvNg6sEWMDGCY89PSFljfxgNp+VKhw3uVcbWxmMBVZlhH4PE
7PBkr69CaNdsYebn9ljOxUr8G+VRWrEgNTaHNgUWpJ+meZa5XLvVCy36I2wWGOX/
RUqOpnW6za4fVvi8A57GTIUYNpTGwnK+8K41YAEgMqxiF5G7Prv/alTPTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdbPfH+eR4s27j+DuagGy9lzuB0MB8GA1UdIwQY
MBaAFDlCnrC9hwO+Ll8KzMKBvyIWBLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1VLZXNMMkhBNzR1WHdyTXdvR19JaFlFc000LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wMWVhZmMtZDY1YS00YTc3LWJhNzMt
ZjJjNDhmYWY3ZjNkLzEvT1VLZXNMMkhBNzR1WHdyTXdvR19JaFlFc000Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8wMWVhZmMtZDY1YS00YTc3LWJhNzMtZjJjNDhmYWY3ZjNk
LzEvT1VLZXNMMkhBNzR1WHdyTXdvR19JaFlFc000LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUP0UBAZQ
2PeQE0nosToAzMDV1yWuVkTBh0Vk9m3/jc+6/wTCvnGQlB+NFu2jXwEoaCGXRKGg
tnHw+75XAvwEDjOOfcPtGVtf4wIGVswO7e1qRK7P5Td8kxEBbpmqICfnchTghDb6
kPYKDykVXsv8BJgcjBdpkmPElbysvTUrtKslch8GdWhbV1ytqTG8rfWAOYx43x4r
lPWRAAXmVOtsooLDGL2gaV2oMsaXT+lakgZfngtYS12elTck75xkNu8k17JVSS3r
fnmOGsn8h004vo3HQJJK+JnmaQycvWfxL9b9udBARj1Us5HuAX2qaFpJ2jOv9slv
jLUcKJaULYQlHQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:45:25 2026 by rpki-client