Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft
File:                     oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft (raw, json)
Hash identifier:          czSXCWmOOfWnRT3LdNomiEFiGHbkFKaUd6GCvOuMKrM=
Subject key identifier:   F5:55:05:79:9F:E9:A7:CA:8B:67:73:F0:EB:BE:FE:8F:67:E9:02:E7
Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
Certificate issuer:       /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Certificate serial:       019EBB100F917E07C512C8D8B39C0ABC7DC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft
Manifest number:          0D6C
Signing time:             Fri 12 Jun 2026 09:00:52 +0000
Manifest this update:     Fri 12 Jun 2026 09:00:52 +0000
Manifest next update:     Sat 13 Jun 2026 09:00:52 +0000
Files and hashes:         1: PAykTqlzIVXa7fwF08Y8fVg3BH8.roa (hash: 2cvx8SwCrzZMQ5UhCJ5LCDN4lqE89NDEgchpM8X0P6c=)
                          2: SWToFRt_6tmEm6Z8-etXYlP5mtY.roa (hash: 8bPzOcUuusLs1dcrovR1xhzN3lKnr3gbUufI9urpO/s=)
                          3: oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl (hash: ESHVkCVI36kAJzh2jHhJ1fea8Vbixf8T5oS9t8eFvsM=)
                          4: rimbVwyo-KT5fQiH-V76SF8eEgM.roa (hash: gWMp6ftXBLmd7FBwaSyLz8QgWLAsVeMGYPnZBH6twvM=)
                          5: ufROvs79R76pKz3Vd4MoqsPH7FE.roa (hash: ceBVv5+PSaDyQdnhFVj50M1kNdgLsXZLAIeGcsQzNgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bb:10:0f:91:7e:07:c5:12:c8:d8:b3:9c:0a:bc:7d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
        Validity
            Not Before: Jun 12 09:00:52 2026 GMT
            Not After : Jun 13 09:00:52 2026 GMT
        Subject: CN=f55505799fe9a7ca8b6773f0ebbefe8f67e902e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:38:1e:96:c6:0b:45:d4:eb:fb:20:2c:a2:4a:
                    7c:2d:90:fa:34:8c:4e:ac:c0:6d:e3:bf:c2:b4:c4:
                    10:c2:39:41:0b:8f:54:90:f5:67:59:ce:d5:db:f2:
                    6a:0e:fd:ff:65:bf:b1:39:de:ca:78:89:21:77:ee:
                    6f:6b:71:45:25:39:8c:3f:e3:d7:10:0a:5e:45:3c:
                    5c:c6:f2:69:94:2b:27:17:09:12:47:69:49:e8:c8:
                    af:d8:79:12:8e:61:07:fc:9f:01:a8:78:2d:9f:db:
                    a1:cc:da:5f:5a:80:d6:35:7d:3f:94:96:99:f1:10:
                    33:3a:33:81:7e:93:e2:00:32:0e:52:3b:fb:66:ae:
                    a3:49:a4:61:e0:83:f2:d7:fc:90:7e:70:11:d9:1e:
                    4b:c1:81:17:a7:72:40:62:f5:a2:df:97:a5:42:7e:
                    66:6f:3f:50:57:cb:f7:92:d0:b4:1a:aa:2f:14:74:
                    31:69:c7:60:f0:06:56:42:21:cf:5f:9a:ae:20:8b:
                    e2:a1:f2:51:f2:26:d2:48:8c:0a:a2:14:a6:2a:46:
                    af:6d:f1:e0:19:0e:c8:a0:5d:3a:b2:2c:41:b3:62:
                    a0:bc:fb:ac:0d:b9:22:03:29:89:40:28:da:72:e1:
                    8e:78:79:18:15:55:32:a4:62:03:21:a7:6b:b7:e5:
                    e7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:55:05:79:9F:E9:A7:CA:8B:67:73:F0:EB:BE:FE:8F:67:E9:02:E7
            X509v3 Authority Key Identifier:
                keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c4:83:66:7c:38:1b:e1:5e:97:76:04:43:5a:38:a1:ae:44:
         3e:b7:e0:e6:c9:4f:95:46:77:03:03:23:80:4f:40:3b:1d:b0:
         d0:4d:c5:11:41:55:67:6d:40:c7:90:7d:4d:4f:cb:54:5a:98:
         97:89:f2:ff:f1:eb:34:52:0d:97:88:62:16:f9:8e:e9:87:b0:
         89:da:98:45:ac:d9:04:76:8c:fa:59:62:a7:38:34:40:ca:d2:
         8b:c9:98:ef:c3:5f:28:9c:bb:61:6f:0a:65:b1:e4:e5:4c:60:
         0e:17:b8:3f:88:da:48:b2:29:dd:fe:dd:61:5f:d1:b6:92:5e:
         b7:e9:bb:cf:13:97:b7:32:f9:50:2b:7b:a9:d7:2e:a9:f4:90:
         6c:9c:e0:87:91:13:d7:91:77:14:70:15:95:3e:85:07:14:19:
         04:c7:ff:ce:db:2c:9a:7c:3e:2d:20:d2:42:6a:56:01:ff:8b:
         31:38:c8:1e:af:41:2a:97:db:d1:d6:51:db:53:b4:a6:cd:5b:
         d8:0f:44:54:ec:09:a8:cc:93:1e:b0:0c:33:60:16:d1:59:9b:
         b9:81:d9:47:19:f0:8f:93:a7:f4:be:a6:7b:f6:f2:b3:c9:d8:
         7d:45:68:9e:d4:cf:ed:a9:17:af:01:6d:91:e3:3f:a4:96:da:
         c5:60:0d:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ67EA+RfgfFEsjYs5wKvH3JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNTIzN2MzOWEzMjVhYTMwOWI2OWU2NmZlMDkyMzdkYTFh
ZDBkMmIwHhcNMjYwNjEyMDkwMDUyWhcNMjYwNjEzMDkwMDUyWjAzMTEwLwYDVQQD
EyhmNTU1MDU3OTlmZTlhN2NhOGI2NzczZjBlYmJlZmU4ZjY3ZTkwMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTgelsYLRdTr+yAsokp8LZD6NIxO
rMBt47/CtMQQwjlBC49UkPVnWc7V2/JqDv3/Zb+xOd7KeIkhd+5va3FFJTmMP+PX
EApeRTxcxvJplCsnFwkSR2lJ6Miv2HkSjmEH/J8BqHgtn9uhzNpfWoDWNX0/lJaZ
8RAzOjOBfpPiADIOUjv7Zq6jSaRh4IPy1/yQfnAR2R5LwYEXp3JAYvWi35elQn5m
bz9QV8v3ktC0GqovFHQxacdg8AZWQiHPX5quIIviofJR8ibSSIwKohSmKkavbfHg
GQ7IoF06sixBs2KgvPusDbkiAymJQCjacuGOeHkYFVUypGIDIadrt+XnWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVVBXmf6afKi2dz8Ou+/o9n6QLnMB8GA1UdIwQY
MBaAFKFSN8OaMlqjCbaeZv4JI32hrQ0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQt
NGM5MTBhZTM3MzVkLzEvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQtNGM5MTBhZTM3MzVk
LzEvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcSDZnw4
G+Fel3YEQ1o4oa5EPrfg5slPlUZ3AwMjgE9AOx2w0E3FEUFVZ21Ax5B9TU/LVFqY
l4ny//HrNFINl4hiFvmO6YewidqYRazZBHaM+llipzg0QMrSi8mY78NfKJy7YW8K
ZbHk5UxgDhe4P4jaSLIp3f7dYV/RtpJet+m7zxOXtzL5UCt7qdcuqfSQbJzgh5ET
15F3FHAVlT6FBxQZBMf/ztssmnw+LSDSQmpWAf+LMTjIHq9BKpfb0dZR21O0ps1b
2A9EVOwJqMyTHrAMM2AW0VmbuYHZRxnwj5On9L6me/bys8nYfUVontTP7akXrwFt
keM/pJbaxWANsg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 15:08:45 2026 by rpki-client