Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
File:                     Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft (raw, json)
Hash identifier:          lOttQ5ln41394GSOOlk5tprYupJCM5iOTqHC0gDc/Wg=
Subject key identifier:   6D:27:B0:F1:D9:46:44:E5:79:27:03:AF:DB:24:B4:C9:2A:91:0E:A1
Authority key identifier: 3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
Certificate issuer:       /CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Certificate serial:       019EFB6FB2047489CADF688FC485F52C27AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
Manifest number:          01FB
Signing time:             Wed 24 Jun 2026 21:01:01 +0000
Manifest this update:     Wed 24 Jun 2026 21:01:01 +0000
Manifest next update:     Thu 25 Jun 2026 21:01:01 +0000
Files and hashes:         1: OVKvymFrbX43XOljNNooa7WThWs.asa (hash: 1FTm/6RnYDK0EBULBUTl49w/2xuw2jLBEG4MKGTL100=)
                          2: Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl (hash: pbny2NNP4uqiX+ut0Ie4420QZ0OKYKQJrIz/J9wV1x0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fb:6f:b2:04:74:89:ca:df:68:8f:c4:85:f5:2c:27:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
        Validity
            Not Before: Jun 24 21:01:01 2026 GMT
            Not After : Jun 25 21:01:01 2026 GMT
        Subject: CN=6d27b0f1d94644e5792703afdb24b4c92a910ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:72:c1:be:10:74:1b:03:c3:1a:78:dc:e9:f7:
                    65:b4:90:82:d1:f4:76:29:85:5a:c9:a2:5c:99:55:
                    b4:6a:77:d2:7c:54:a2:42:36:17:71:62:7b:16:e3:
                    ad:3d:48:f2:4b:66:54:d1:c2:0a:ff:e2:5c:40:3d:
                    c1:fd:16:69:0a:ea:0a:57:5f:e2:c4:f2:d1:2c:b1:
                    b3:5f:df:7a:ef:fb:d8:d2:17:28:28:56:7a:52:ed:
                    3d:33:44:54:03:f8:af:60:40:48:7b:ae:d0:b0:47:
                    80:dc:0f:bc:5c:14:f2:6a:25:3f:e5:50:44:75:25:
                    08:79:0f:1c:93:bb:72:4c:11:7b:2b:2e:46:2f:a6:
                    78:20:86:2e:b5:3b:c1:c4:ff:36:e3:b2:63:8d:8a:
                    29:72:05:73:22:68:aa:e2:a9:4c:70:93:ea:0d:d0:
                    63:4f:fe:36:47:8e:58:05:0c:61:58:1d:75:80:62:
                    a6:16:5b:1d:62:fb:83:02:4c:db:62:34:b9:c9:43:
                    41:02:d7:96:2f:3f:91:c9:45:91:7b:1b:dd:7d:c4:
                    cd:f3:15:3c:4b:fd:be:28:9f:66:a2:30:d9:f0:e6:
                    22:b1:6f:b9:a4:90:ae:20:6c:d0:07:34:a9:7f:4b:
                    c8:0d:68:eb:12:a4:bc:5b:0f:80:a9:c9:58:92:0f:
                    7c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:27:B0:F1:D9:46:44:E5:79:27:03:AF:DB:24:B4:C9:2A:91:0E:A1
            X509v3 Authority Key Identifier:
                keyid:3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:e7:95:75:a4:6a:7c:31:2a:2d:79:75:74:66:eb:44:fe:ba:
         45:8f:3e:57:6f:a4:da:4e:cb:5f:fb:b4:db:22:cc:ea:ef:47:
         2d:a9:4f:a0:69:cb:1e:0b:8e:3f:19:b1:d3:5d:38:90:2a:c4:
         d8:eb:71:56:f0:a6:42:5a:7b:42:08:e7:6a:32:73:ed:31:7c:
         15:f2:9a:3f:ea:74:79:52:37:23:51:f4:6e:ed:a6:d0:6b:0d:
         bf:7a:a0:ca:34:84:8b:2e:87:16:8c:99:28:d2:79:9a:04:cf:
         1e:e0:25:10:cb:2e:73:7b:f9:5a:0c:c3:51:d4:b9:b1:f0:ce:
         36:fb:a0:0b:44:aa:d3:0e:5d:d2:1c:df:e6:9b:31:7a:90:ad:
         f6:b4:32:3e:17:be:1d:84:fd:2b:f3:a6:58:f5:9a:3e:26:a4:
         f1:26:23:bb:4d:cf:75:39:77:4a:19:e8:fa:0c:2d:b4:e9:b7:
         07:b6:67:bf:b6:8a:55:a9:95:d7:77:cd:2b:c1:b3:d8:37:a3:
         62:87:c4:11:45:48:0e:b5:82:96:62:31:1d:8f:d0:6c:a1:80:
         c9:6d:f6:3f:19:a2:a4:68:f1:af:bb:c0:52:e8:f6:6e:85:95:
         db:cf:28:cd:c5:71:1e:31:d9:5e:23:f6:ac:55:cb:e2:2d:5e:
         26:12:03:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ77b7IEdInK32iPxIX1LCeqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhN2E3NjYxZDRhMDFlY2VlMjQzODRkMTUyZWM3OWFhMWM4
MDdiZTcwHhcNMjYwNjI0MjEwMTAxWhcNMjYwNjI1MjEwMTAxWjAzMTEwLwYDVQQD
Eyg2ZDI3YjBmMWQ5NDY0NGU1NzkyNzAzYWZkYjI0YjRjOTJhOTEwZWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknLBvhB0GwPDGnjc6fdltJCC0fR2
KYVayaJcmVW0anfSfFSiQjYXcWJ7FuOtPUjyS2ZU0cIK/+JcQD3B/RZpCuoKV1/i
xPLRLLGzX9967/vY0hcoKFZ6Uu09M0RUA/ivYEBIe67QsEeA3A+8XBTyaiU/5VBE
dSUIeQ8ck7tyTBF7Ky5GL6Z4IIYutTvBxP8247JjjYopcgVzImiq4qlMcJPqDdBj
T/42R45YBQxhWB11gGKmFlsdYvuDAkzbYjS5yUNBAteWLz+RyUWRexvdfcTN8xU8
S/2+KJ9mojDZ8OYisW+5pJCuIGzQBzSpf0vIDWjrEqS8Ww+AqclYkg98bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0nsPHZRkTleScDr9sktMkqkQ6hMB8GA1UdIwQY
MBaAFDp6dmHUoB7O4kOE0VLseaocgHvnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT25wMllkU2dIczdpUTRUUlV1eDVxaHlBZS1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hMWQ4NGUtMGM1ZC00ZmI1LTlkZDEt
OGM4NTI0ZTE2MGY3LzEvT25wMllkU2dIczdpUTRUUlV1eDVxaHlBZS1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hMWQ4NGUtMGM1ZC00ZmI1LTlkZDEtOGM4NTI0ZTE2MGY3
LzEvT25wMllkU2dIczdpUTRUUlV1eDVxaHlBZS1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+eVdaRq
fDEqLXl1dGbrRP66RY8+V2+k2k7LX/u02yLM6u9HLalPoGnLHguOPxmx0104kCrE
2OtxVvCmQlp7QgjnajJz7TF8FfKaP+p0eVI3I1H0bu2m0GsNv3qgyjSEiy6HFoyZ
KNJ5mgTPHuAlEMsuc3v5WgzDUdS5sfDONvugC0Sq0w5d0hzf5psxepCt9rQyPhe+
HYT9K/OmWPWaPiak8SYju03PdTl3Shno+gwttOm3B7Znv7aKVamV13fNK8Gz2Dej
YofEEUVIDrWClmIxHY/QbKGAyW32PxmipGjxr7vAUuj2boWV288ozcVxHjHZXiP2
rFXL4i1eJhIDJg==
-----END CERTIFICATE-----
Generated at Thu Jun 25 08:30:22 2026 by rpki-client