Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
File:                     OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft (raw, json)
Hash identifier:          D6RSBtUbs4boQAxd1TZrrMUK9w+/X2X0ybNfTAHAmBI=
Subject key identifier:   48:FA:83:07:D1:D8:E5:0B:86:0A:FF:96:9C:AF:7F:39:A6:6E:DE:2B
Authority key identifier: 38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75
Certificate issuer:       /CN=381203337b0cd06fcfc045588f097cbc24153a75
Certificate serial:       019FA33C95AC328D3F9EDBD42CC091206771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
Manifest number:          06D0
Signing time:             Mon 27 Jul 2026 11:01:24 +0000
Manifest this update:     Mon 27 Jul 2026 11:01:24 +0000
Manifest next update:     Tue 28 Jul 2026 11:01:24 +0000
Files and hashes:         1: OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl (hash: JzhJ+O+3vNvYQ3i2kbUBT0LhiGCtjRs9xeR9rixRo/w=)
                          2: y0EOGWIKk7WR342AYtoS4ft8s8g.roa (hash: F6PTeIw5ik/EvHxhZTEzM2YWypGnV0TJXxvPjQa9SsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:3c:95:ac:32:8d:3f:9e:db:d4:2c:c0:91:20:67:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=381203337b0cd06fcfc045588f097cbc24153a75
        Validity
            Not Before: Jul 27 11:01:24 2026 GMT
            Not After : Jul 28 11:01:24 2026 GMT
        Subject: CN=48fa8307d1d8e50b860aff969caf7f39a66ede2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b7:23:cf:e8:13:5a:72:59:ae:20:d2:9e:ba:
                    27:de:df:16:1e:e5:76:57:f8:78:77:1e:f5:7a:65:
                    f6:86:ce:70:c3:2d:89:22:16:e2:bf:9a:b1:08:13:
                    98:11:94:23:60:7a:1b:e3:5f:4b:bf:50:7c:0d:c0:
                    6a:dc:54:db:dc:87:83:46:49:54:45:79:d2:9a:98:
                    89:11:e1:35:f0:84:51:fb:63:12:10:e1:54:db:8a:
                    50:a5:0e:d5:ca:b8:e4:c9:d5:27:d3:fe:f9:c7:bb:
                    78:91:17:13:45:f9:a6:fe:df:aa:84:77:95:0d:91:
                    f9:8c:a4:15:b5:90:aa:20:78:67:56:e0:60:29:1d:
                    54:fa:1a:33:5b:da:8c:7c:a2:d3:25:60:4f:61:a2:
                    3a:8b:d4:cb:24:58:4e:4a:fc:ea:4d:a5:56:41:b9:
                    f0:68:ee:7d:af:42:e3:06:8c:94:13:28:8a:41:28:
                    14:34:63:4f:e7:59:3b:87:61:6f:b9:2b:91:54:cf:
                    9f:d8:f2:15:bf:12:a4:e6:8b:40:02:fe:bb:d9:8f:
                    e9:4e:8c:af:1c:bb:cb:65:5c:8a:93:71:96:8f:6f:
                    f8:62:c1:ec:21:b3:44:75:6b:d3:ab:a4:a5:db:8e:
                    6f:a8:69:a9:97:6d:9b:08:de:f6:81:e2:b5:1f:8d:
                    e6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FA:83:07:D1:D8:E5:0B:86:0A:FF:96:9C:AF:7F:39:A6:6E:DE:2B
            X509v3 Authority Key Identifier:
                keyid:38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:55:bd:f6:fb:fd:c6:6c:ba:c5:71:1f:e6:a7:ee:02:8c:aa:
         7a:77:bf:51:6c:ef:58:fe:19:be:27:4c:e0:46:1c:9e:b9:1f:
         2a:a3:c5:d2:20:e5:a6:32:57:e4:b7:4d:b9:e1:c3:d0:88:2a:
         e9:e1:6c:80:61:b1:66:15:71:86:0f:23:5b:f3:c3:59:3c:49:
         79:52:84:5b:a6:f9:27:8a:ad:0e:d2:d0:ec:3e:03:82:22:26:
         95:48:89:03:aa:4b:e0:48:d0:e6:70:f3:12:f4:28:36:34:16:
         17:bf:2e:81:6f:c7:74:17:fe:62:ce:66:03:bd:88:ad:8a:cb:
         c6:69:f7:1c:d3:87:b8:f5:9f:f2:8c:a4:7d:6a:04:6f:f3:d9:
         e4:ff:ff:77:1a:99:6c:99:9a:7b:a7:f6:8f:b1:0b:a2:69:9b:
         1c:5b:e3:f0:d3:7b:f1:ff:cc:88:50:01:d4:16:11:49:54:c2:
         6d:ca:c3:5e:d6:15:c8:79:e9:46:cd:d6:69:0e:b7:cc:74:09:
         02:6c:94:a6:cd:f6:5a:74:5a:bc:67:05:71:92:5a:4e:93:79:
         e6:76:6a:2f:f5:2e:f9:b4:1e:bb:d0:65:6d:bf:11:62:29:71:
         4e:2c:c2:e8:42:47:8f:65:63:fa:46:79:38:3f:61:22:59:ad:
         d7:24:c1:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jPJWsMo0/ntvULMCRIGdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MTIwMzMzN2IwY2QwNmZjZmMwNDU1ODhmMDk3Y2JjMjQx
NTNhNzUwHhcNMjYwNzI3MTEwMTI0WhcNMjYwNzI4MTEwMTI0WjAzMTEwLwYDVQQD
Eyg0OGZhODMwN2QxZDhlNTBiODYwYWZmOTY5Y2FmN2YzOWE2NmVkZTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07cjz+gTWnJZriDSnron3t8WHuV2
V/h4dx71emX2hs5wwy2JIhbiv5qxCBOYEZQjYHob419Lv1B8DcBq3FTb3IeDRklU
RXnSmpiJEeE18IRR+2MSEOFU24pQpQ7VyrjkydUn0/75x7t4kRcTRfmm/t+qhHeV
DZH5jKQVtZCqIHhnVuBgKR1U+hozW9qMfKLTJWBPYaI6i9TLJFhOSvzqTaVWQbnw
aO59r0LjBoyUEyiKQSgUNGNP51k7h2FvuSuRVM+f2PIVvxKk5otAAv672Y/pToyv
HLvLZVyKk3GWj2/4YsHsIbNEdWvTq6Sl245vqGmpl22bCN72geK1H43mHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEj6gwfR2OULhgr/lpyvfzmmbt4rMB8GA1UdIwQY
MBaAFDgSAzN7DNBvz8BFWI8JfLwkFTp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0JJRE0zc00wR19Qd0VWWWp3bDh2Q1FWT25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80Y2Y1YWQtYTZjYS00NGZmLTlkMTgt
YzVjNjRiMTM0MjFkLzEvT0JJRE0zc00wR19Qd0VWWWp3bDh2Q1FWT25VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80Y2Y1YWQtYTZjYS00NGZmLTlkMTgtYzVjNjRiMTM0MjFk
LzEvT0JJRE0zc00wR19Qd0VWWWp3bDh2Q1FWT25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVW99vv9
xmy6xXEf5qfuAoyqene/UWzvWP4ZvidM4EYcnrkfKqPF0iDlpjJX5LdNueHD0Igq
6eFsgGGxZhVxhg8jW/PDWTxJeVKEW6b5J4qtDtLQ7D4DgiImlUiJA6pL4EjQ5nDz
EvQoNjQWF78ugW/HdBf+Ys5mA72IrYrLxmn3HNOHuPWf8oykfWoEb/PZ5P//dxqZ
bJmae6f2j7ELommbHFvj8NN78f/MiFAB1BYRSVTCbcrDXtYVyHnpRs3WaQ63zHQJ
AmyUps32WnRavGcFcZJaTpN55nZqL/Uu+bQeu9Blbb8RYilxTizC6EJHj2Vj+kZ5
OD9hIlmt1yTBAQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:44:41 2026 by rpki-client