Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
File:                     od5FbU1AXG9CktY2iGds4VDn8H4.mft (raw, json)
Hash identifier:          VjUaNIOmT3vBbFoKGja8knB0A8X8hQZRoHWK/L3k6Bs=
Subject key identifier:   40:BE:56:48:72:8D:76:AD:5B:21:95:75:3A:6C:7A:EF:EB:50:04:98
Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
Certificate issuer:       /CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Certificate serial:       019EB7A12FD7E496D0B90A54F54F6D454AFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
Manifest number:          0EC7
Signing time:             Thu 11 Jun 2026 17:00:54 +0000
Manifest this update:     Thu 11 Jun 2026 17:00:54 +0000
Manifest next update:     Fri 12 Jun 2026 17:00:54 +0000
Files and hashes:         1: aPqOfzzuuz9AqAHspb9bdZx6PfM.roa (hash: zBL5ieLSzKkx3st5xVsICvLwsvchGrXAG+kK+S4AaG8=)
                          2: od5FbU1AXG9CktY2iGds4VDn8H4.crl (hash: ZVr5Hq0g6Obb8tybRu1O+RHGp+7TrD8yBRKtBRTv51U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a1:2f:d7:e4:96:d0:b9:0a:54:f5:4f:6d:45:4a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e
        Validity
            Not Before: Jun 11 17:00:54 2026 GMT
            Not After : Jun 12 17:00:54 2026 GMT
        Subject: CN=40be5648728d76ad5b2195753a6c7aefeb500498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:5a:e3:37:f4:35:2b:8e:53:be:56:f7:13:
                    ba:cb:1c:c5:59:24:b2:84:49:15:c1:b8:0c:e6:66:
                    cd:aa:52:b4:e6:19:5c:f5:be:6c:f1:ed:fc:12:5a:
                    63:19:ed:21:b1:80:49:7d:6c:c8:d7:87:51:e7:c7:
                    33:b8:44:b0:3c:84:9f:70:b2:57:58:39:42:df:30:
                    57:86:d5:4d:e2:5c:b3:fb:8a:da:ef:8c:43:fc:81:
                    64:5f:a8:c9:84:ff:7e:a4:ac:b9:57:b5:8b:dd:27:
                    4e:2e:f2:6e:7f:4d:56:c2:e9:6b:6b:f1:39:bb:44:
                    69:25:2e:77:d8:f2:13:08:ad:33:be:00:38:fb:35:
                    42:b6:9f:be:ba:aa:b0:97:c3:12:e9:05:22:ca:37:
                    28:ba:db:c2:d6:18:4a:01:82:48:b8:a0:9f:54:7f:
                    1a:0a:1e:7f:6a:37:61:3b:8d:31:99:d9:68:b0:8e:
                    ee:cc:ec:18:73:a2:fd:03:db:6b:2c:f5:a3:95:49:
                    21:aa:a2:1c:92:d5:20:ad:05:45:bf:c5:97:f8:c9:
                    59:38:67:92:47:09:86:69:54:c2:df:87:cb:f3:f7:
                    23:96:c0:a7:6e:5b:66:b9:8b:d3:57:94:f2:f2:0f:
                    42:f0:af:3f:7d:1d:0a:56:75:df:bd:df:52:85:0d:
                    03:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BE:56:48:72:8D:76:AD:5B:21:95:75:3A:6C:7A:EF:EB:50:04:98
            X509v3 Authority Key Identifier:
                keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a8:67:19:30:70:63:0e:bc:dd:c9:ef:e6:c2:bd:36:fa:73:
         01:c0:47:2e:35:67:da:04:30:58:39:d2:df:9d:86:f4:63:f1:
         a9:9c:fb:69:f7:56:b7:8e:ca:9a:bc:1f:c9:ca:8e:b3:6a:f1:
         fe:4f:25:63:38:ff:61:89:13:13:f2:f3:e3:6b:66:85:ee:67:
         81:f8:7b:1c:c6:11:fb:65:ae:04:29:0f:a3:fc:ca:d2:08:a8:
         9e:68:7e:55:04:84:16:d1:83:03:c5:d8:93:96:fe:25:d0:b7:
         49:ab:33:94:4e:ca:65:0a:f4:9a:bf:96:47:58:c6:a1:b3:52:
         7f:45:e6:4f:e2:53:c6:03:3b:94:0f:7f:b9:1e:87:86:89:e7:
         cf:5f:6d:6b:2e:f4:33:b4:1c:e9:a9:bd:a4:be:09:fa:be:98:
         0b:24:cb:60:65:64:50:91:c0:cb:56:34:4a:16:65:b6:6d:5e:
         01:80:e3:7a:20:77:98:6b:ac:ed:ac:9f:1f:fa:60:c1:a8:69:
         9b:f8:61:94:a8:5b:96:01:83:32:94:bb:ef:69:e7:99:0c:17:
         a6:aa:a9:29:7d:87:ad:6d:2b:d7:22:84:00:dd:2e:f8:d6:61:
         c8:0c:07:51:2b:ef:1a:2d:24:b4:3f:ac:54:2e:72:5e:dd:3b:
         0f:29:50:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63oS/X5JbQuQpU9U9tRUr6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZGU0NTZkNGQ0MDVjNmY0MjkyZDYzNjg4Njc2Y2UxNTBl
N2YwN2UwHhcNMjYwNjExMTcwMDU0WhcNMjYwNjEyMTcwMDU0WjAzMTEwLwYDVQQD
Eyg0MGJlNTY0ODcyOGQ3NmFkNWIyMTk1NzUzYTZjN2FlZmViNTAwNDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGVa4zf0NSuOU75W9xO6yxzFWSSy
hEkVwbgM5mbNqlK05hlc9b5s8e38ElpjGe0hsYBJfWzI14dR58czuESwPISfcLJX
WDlC3zBXhtVN4lyz+4ra74xD/IFkX6jJhP9+pKy5V7WL3SdOLvJuf01Wwulra/E5
u0RpJS532PITCK0zvgA4+zVCtp++uqqwl8MS6QUiyjcoutvC1hhKAYJIuKCfVH8a
Ch5/ajdhO40xmdlosI7uzOwYc6L9A9trLPWjlUkhqqIcktUgrQVFv8WX+MlZOGeS
RwmGaVTC34fL8/cjlsCnbltmuYvTV5Ty8g9C8K8/fR0KVnXfvd9ShQ0DGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEC+VkhyjXatWyGVdTpseu/rUASYMB8GA1UdIwQY
MBaAFKHeRW1NQFxvQpLWNohnbOFQ5/B+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2Q1RmJVMUFYRzlDa3RZMmlHZHM0VkRuOEg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80MGU0MDUtYTM4Zi00NzgxLThkNTUt
MGM5ZTBjZjdlOWZjLzEvb2Q1RmJVMUFYRzlDa3RZMmlHZHM0VkRuOEg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80MGU0MDUtYTM4Zi00NzgxLThkNTUtMGM5ZTBjZjdlOWZj
LzEvb2Q1RmJVMUFYRzlDa3RZMmlHZHM0VkRuOEg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqhnGTBw
Yw683cnv5sK9NvpzAcBHLjVn2gQwWDnS352G9GPxqZz7afdWt47KmrwfycqOs2rx
/k8lYzj/YYkTE/Lz42tmhe5ngfh7HMYR+2WuBCkPo/zK0gionmh+VQSEFtGDA8XY
k5b+JdC3SaszlE7KZQr0mr+WR1jGobNSf0XmT+JTxgM7lA9/uR6Hhonnz19tay70
M7Qc6am9pL4J+r6YCyTLYGVkUJHAy1Y0ShZltm1eAYDjeiB3mGus7ayfH/pgwahp
m/hhlKhblgGDMpS772nnmQwXpqqpKX2HrW0r1yKEAN0u+NZhyAwHUSvvGi0ktD+s
VC5yXt07DylQlA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:13:13 2026 by rpki-client