Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
File:                     OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json)
Hash identifier:          oB4ZlOHHAgj5iIgU5wmrVvKWOAtyqtHnS2znNRgGk1g=
Subject key identifier:   55:66:15:35:60:C4:38:35:52:FD:85:14:83:1F:8C:29:9F:64:E7:44
Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
Certificate issuer:       /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Certificate serial:       019E3229B3AAADE80C954ED4790DF7AE55E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
Manifest number:          0A2D
Signing time:             Sat 16 May 2026 19:00:54 +0000
Manifest this update:     Sat 16 May 2026 19:00:54 +0000
Manifest next update:     Sun 17 May 2026 19:00:54 +0000
Files and hashes:         1: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: l1DLCb6Q8VCTuueN7nzvjMpxbNQNS2OFeIcjpuZgbcM=)
                          2: futCv-J21MxYYna1NlT0XMLEUxQ.roa (hash: Nuw/WTHENdY0hVuqEP9gOdFLaQ350WDyvFQ78Xtrdks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:29:b3:aa:ad:e8:0c:95:4e:d4:79:0d:f7:ae:55:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
        Validity
            Not Before: May 16 19:00:54 2026 GMT
            Not After : May 17 19:00:54 2026 GMT
        Subject: CN=5566153560c4383552fd8514831f8c299f64e744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0f:4b:01:23:cf:02:f7:73:97:30:ee:a5:5b:
                    57:1b:18:de:75:e1:07:de:44:dd:8f:ce:2b:0d:a8:
                    a4:41:4b:61:28:29:4e:31:21:88:5f:0f:ff:ea:70:
                    f2:06:72:a8:20:b8:9d:1a:02:8a:fc:82:53:4e:8e:
                    99:1c:75:50:34:ba:6d:5e:41:89:e6:d6:ad:64:aa:
                    76:4d:3a:a8:8a:b9:7c:c4:cf:79:6f:01:11:a7:91:
                    dc:70:81:38:a0:57:66:85:07:c5:d0:7a:95:f2:3a:
                    b3:e4:21:49:19:0d:de:91:af:eb:62:56:d1:79:c6:
                    6f:fc:30:d5:55:8b:78:af:1e:4b:6a:90:40:6a:b4:
                    3c:f9:33:9d:74:3b:59:4d:9b:6a:24:fa:ee:07:09:
                    c0:69:a1:1e:ad:c5:b9:dc:04:81:e7:58:e2:08:b4:
                    9e:ce:2f:bc:1e:0c:75:1a:8c:08:44:a8:9b:a6:29:
                    40:83:50:3f:b2:d0:b7:83:64:df:db:07:93:ed:fb:
                    bb:f9:6d:a0:3b:db:64:79:22:d9:c4:d0:f8:ae:cd:
                    ab:cf:87:41:09:53:49:91:3d:2a:36:4a:b4:3a:62:
                    2a:84:4b:c0:5c:09:55:fe:8a:07:81:12:b5:fa:c1:
                    a2:4a:70:e6:54:55:11:db:a3:04:85:d8:79:b1:9c:
                    fb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:66:15:35:60:C4:38:35:52:FD:85:14:83:1F:8C:29:9F:64:E7:44
            X509v3 Authority Key Identifier:
                keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:dc:59:e4:df:7c:5c:71:38:17:cc:fc:cc:af:ea:16:51:f9:
         2b:02:92:ef:9a:cd:58:3c:28:7f:f4:35:98:cd:fc:47:59:5c:
         99:a7:ce:32:49:d8:1c:05:d9:2b:71:31:ae:39:2e:c5:8a:48:
         8f:4f:a5:7d:30:9e:0d:31:a0:cc:dc:52:c2:7d:fc:25:30:f3:
         20:9f:7c:f1:38:e5:92:68:3b:9a:f6:bc:b8:ee:20:10:a7:39:
         bf:cb:b6:12:7a:7e:70:55:89:ad:d7:7a:e7:8d:12:d7:ae:26:
         07:d5:db:f7:5e:ce:14:b7:71:db:17:98:5e:e5:25:b7:59:2a:
         b7:10:cd:79:ba:86:4e:d6:4f:44:f0:db:66:5b:2a:9a:2e:0f:
         34:ad:89:23:84:27:fa:cd:2b:f7:d3:f5:11:5b:6e:14:d1:b7:
         da:d2:38:87:76:70:84:b9:e2:2b:45:c7:64:33:14:cb:ed:61:
         77:16:3b:81:34:11:a8:7d:04:65:92:ba:b3:35:69:c8:75:25:
         9c:6c:0a:6a:88:ec:2e:63:d3:ef:ac:c5:70:60:6a:c1:6c:01:
         fa:a4:8e:ab:2c:cc:14:c8:6e:9b:f2:9d:98:be:e7:6a:32:e2:
         70:72:7b:f2:50:ec:04:86:6e:56:58:4c:94:e5:20:4d:66:b3:
         ae:2a:5f:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yKbOqregMlU7UeQ33rlXkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NDI5ZWIwYmQ4NzAzYmUyZTVmMGFjY2MyODFiZjIyMTYw
NGIwY2UwHhcNMjYwNTE2MTkwMDU0WhcNMjYwNTE3MTkwMDU0WjAzMTEwLwYDVQQD
Eyg1NTY2MTUzNTYwYzQzODM1NTJmZDg1MTQ4MzFmOGMyOTlmNjRlNzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6A9LASPPAvdzlzDupVtXGxjedeEH
3kTdj84rDaikQUthKClOMSGIXw//6nDyBnKoILidGgKK/IJTTo6ZHHVQNLptXkGJ
5tatZKp2TTqoirl8xM95bwERp5HccIE4oFdmhQfF0HqV8jqz5CFJGQ3eka/rYlbR
ecZv/DDVVYt4rx5LapBAarQ8+TOddDtZTZtqJPruBwnAaaEercW53ASB51jiCLSe
zi+8Hgx1GowIRKibpilAg1A/stC3g2Tf2weT7fu7+W2gO9tkeSLZxND4rs2rz4dB
CVNJkT0qNkq0OmIqhEvAXAlV/ooHgRK1+sGiSnDmVFUR26MEhdh5sZz7XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVmFTVgxDg1Uv2FFIMfjCmfZOdEMB8GA1UdIwQY
MBaAFDlCnrC9hwO+Ll8KzMKBvyIWBLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1VLZXNMMkhBNzR1WHdyTXdvR19JaFlFc000LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wMWVhZmMtZDY1YS00YTc3LWJhNzMt
ZjJjNDhmYWY3ZjNkLzEvT1VLZXNMMkhBNzR1WHdyTXdvR19JaFlFc000Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8wMWVhZmMtZDY1YS00YTc3LWJhNzMtZjJjNDhmYWY3ZjNk
LzEvT1VLZXNMMkhBNzR1WHdyTXdvR19JaFlFc000LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATdxZ5N98
XHE4F8z8zK/qFlH5KwKS75rNWDwof/Q1mM38R1lcmafOMknYHAXZK3ExrjkuxYpI
j0+lfTCeDTGgzNxSwn38JTDzIJ988Tjlkmg7mva8uO4gEKc5v8u2Enp+cFWJrdd6
540S164mB9Xb917OFLdx2xeYXuUlt1kqtxDNebqGTtZPRPDbZlsqmi4PNK2JI4Qn
+s0r99P1EVtuFNG32tI4h3ZwhLniK0XHZDMUy+1hdxY7gTQRqH0EZZK6szVpyHUl
nGwKaojsLmPT76zFcGBqwWwB+qSOqyzMFMhum/KdmL7najLicHJ78lDsBIZuVlhM
lOUgTWazripfTw==
-----END CERTIFICATE-----
Generated at Sat May 16 22:41:42 2026 by rpki-client