Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft
File:                     oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft (raw, json)
Hash identifier:          AVj4BNcMF4wGRPbCHKYLfjw5YpdUwGaelyrJ7H+xVsM=
Subject key identifier:   EF:DE:DF:93:A1:D8:28:91:35:C4:52:66:16:AA:8D:AB:67:C6:8D:29
Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
Certificate issuer:       /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Certificate serial:       019FC96EB4EAF4A0B121EB484A59CC0DE698
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft
Manifest number:          0DF8
Signing time:             Mon 03 Aug 2026 21:01:43 +0000
Manifest this update:     Mon 03 Aug 2026 21:01:43 +0000
Manifest next update:     Tue 04 Aug 2026 21:01:43 +0000
Files and hashes:         1: PAykTqlzIVXa7fwF08Y8fVg3BH8.roa (hash: 2cvx8SwCrzZMQ5UhCJ5LCDN4lqE89NDEgchpM8X0P6c=)
                          2: SWToFRt_6tmEm6Z8-etXYlP5mtY.roa (hash: 8bPzOcUuusLs1dcrovR1xhzN3lKnr3gbUufI9urpO/s=)
                          3: oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl (hash: /m/yT4q8DbP3flMXqKfv5mUi9e+4L8qilog3AyhqEjU=)
                          4: rimbVwyo-KT5fQiH-V76SF8eEgM.roa (hash: gWMp6ftXBLmd7FBwaSyLz8QgWLAsVeMGYPnZBH6twvM=)
                          5: ufROvs79R76pKz3Vd4MoqsPH7FE.roa (hash: ceBVv5+PSaDyQdnhFVj50M1kNdgLsXZLAIeGcsQzNgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Aug 2026 21:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c9:6e:b4:ea:f4:a0:b1:21:eb:48:4a:59:cc:0d:e6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
        Validity
            Not Before: Aug  3 21:01:43 2026 GMT
            Not After : Aug  4 21:01:43 2026 GMT
        Subject: CN=efdedf93a1d8289135c4526616aa8dab67c68d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ba:2d:8c:cd:f5:c2:a3:9e:43:e4:47:73:40:
                    8f:35:14:21:4b:72:b6:6f:b9:11:ec:ae:7f:24:e4:
                    51:76:67:ea:f5:25:72:cc:f3:0b:f5:75:d7:ac:ff:
                    4a:6f:1e:c0:50:a3:fc:ad:94:29:17:97:de:ef:55:
                    24:17:85:40:a2:77:44:57:b7:9b:a7:5b:b6:88:a0:
                    cd:8a:3f:64:f2:63:0a:39:6e:e9:16:33:fb:ba:2e:
                    59:b0:af:c6:cb:ce:65:1e:15:df:49:3b:1b:90:c6:
                    77:07:73:03:1e:d3:3a:0a:c6:26:de:a2:ed:77:5e:
                    f6:6f:07:67:ec:c6:1c:cf:a4:a8:f0:1c:48:0d:99:
                    4b:6b:f4:ec:80:d5:19:0b:fc:74:c4:a9:12:20:14:
                    0a:d4:1b:5a:c0:39:dd:95:ae:c8:eb:25:ab:a0:65:
                    15:c7:f2:96:46:46:0e:ff:5a:54:48:63:10:e2:53:
                    34:ef:90:a9:6c:8a:10:a5:8b:51:ee:7b:35:00:d1:
                    20:6a:89:74:ae:ee:bd:80:94:2a:3a:4e:20:c8:31:
                    0b:db:97:cd:25:83:2f:3f:bf:c3:30:21:b6:4b:cd:
                    72:70:a1:30:7f:18:43:6a:51:01:04:b1:aa:f6:bf:
                    d3:f4:ac:6d:2a:65:3f:b9:4d:6a:3b:ce:08:6a:9c:
                    e6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DE:DF:93:A1:D8:28:91:35:C4:52:66:16:AA:8D:AB:67:C6:8D:29
            X509v3 Authority Key Identifier:
                keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:84:83:c2:ef:05:2b:25:90:88:18:bd:b2:65:7a:68:8b:00:
         4e:b5:ee:7c:6c:ff:a6:4f:09:ac:3e:4d:1e:bd:22:57:01:a6:
         9b:09:25:57:58:0a:96:b2:ba:c6:d5:29:e2:fd:3c:ca:3e:cd:
         1e:40:74:68:dc:31:00:9a:3c:62:fc:cc:6a:84:8c:27:0e:d7:
         5b:c3:b1:61:b8:05:4f:be:3b:48:39:d6:d7:99:4e:5d:d9:39:
         57:b0:82:8f:22:f2:79:10:44:2a:7b:14:eb:ab:5e:a7:b1:4d:
         07:2d:7a:5d:b2:68:0c:34:3c:95:4d:dc:b5:ea:27:24:81:a0:
         ca:8e:51:a1:22:98:cc:41:be:b8:d6:c9:e0:d3:3a:58:ec:d6:
         51:e6:97:0d:2f:20:9d:3b:e1:22:4c:4c:1a:01:65:e5:91:f1:
         f0:9b:2c:22:83:c8:af:ab:df:2d:bb:d7:58:e4:af:dd:51:a3:
         65:08:39:72:61:0b:cc:a4:e6:bf:cd:5a:8d:43:f7:78:59:18:
         4b:f1:e1:12:24:40:29:5c:71:6f:2c:e7:c6:99:b4:e1:a0:83:
         a9:d3:f2:ab:ae:3d:38:28:94:44:ea:8a:58:47:5e:62:44:fa:
         72:01:f2:96:d2:9c:e8:2e:40:46:15:ba:8c:de:4f:5f:5b:aa:
         aa:ab:d1:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/JbrTq9KCxIetISlnMDeaYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNTIzN2MzOWEzMjVhYTMwOWI2OWU2NmZlMDkyMzdkYTFh
ZDBkMmIwHhcNMjYwODAzMjEwMTQzWhcNMjYwODA0MjEwMTQzWjAzMTEwLwYDVQQD
EyhlZmRlZGY5M2ExZDgyODkxMzVjNDUyNjYxNmFhOGRhYjY3YzY4ZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7otjM31wqOeQ+RHc0CPNRQhS3K2
b7kR7K5/JORRdmfq9SVyzPML9XXXrP9Kbx7AUKP8rZQpF5fe71UkF4VAondEV7eb
p1u2iKDNij9k8mMKOW7pFjP7ui5ZsK/Gy85lHhXfSTsbkMZ3B3MDHtM6CsYm3qLt
d172bwdn7MYcz6So8BxIDZlLa/TsgNUZC/x0xKkSIBQK1BtawDndla7I6yWroGUV
x/KWRkYO/1pUSGMQ4lM075CpbIoQpYtR7ns1ANEgaol0ru69gJQqOk4gyDEL25fN
JYMvP7/DMCG2S81ycKEwfxhDalEBBLGq9r/T9KxtKmU/uU1qO84IapzmVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/e35Oh2CiRNcRSZhaqjatnxo0pMB8GA1UdIwQY
MBaAFKFSN8OaMlqjCbaeZv4JI32hrQ0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQt
NGM5MTBhZTM3MzVkLzEvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQtNGM5MTBhZTM3MzVk
LzEvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYSDwu8F
KyWQiBi9smV6aIsATrXufGz/pk8JrD5NHr0iVwGmmwklV1gKlrK6xtUp4v08yj7N
HkB0aNwxAJo8YvzMaoSMJw7XW8OxYbgFT747SDnW15lOXdk5V7CCjyLyeRBEKnsU
66tep7FNBy16XbJoDDQ8lU3cteonJIGgyo5RoSKYzEG+uNbJ4NM6WOzWUeaXDS8g
nTvhIkxMGgFl5ZHx8JssIoPIr6vfLbvXWOSv3VGjZQg5cmELzKTmv81ajUP3eFkY
S/HhEiRAKVxxbyznxpm04aCDqdPyq649OCiUROqKWEdeYkT6cgHyltKc6C5ARhW6
jN5PX1uqqqvRcg==
-----END CERTIFICATE-----
Generated at Tue Aug 4 06:25:34 2026 by rpki-client