Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
File:                     olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json)
Hash identifier:          D6vaAAAyWN4zgvJu1crwl9NRosokD7pcfmHVxn6f9Xc=
Subject key identifier:   B9:F8:3D:CB:EF:E4:68:54:DC:0D:A2:6E:70:E3:90:0E:19:56:BA:8A
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Certificate issuer:       /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial:       019DF8DED9B9C4A8E76C440D4947000623E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
Manifest number:          192A
Signing time:             Tue 05 May 2026 16:00:47 +0000
Manifest this update:     Tue 05 May 2026 16:00:47 +0000
Manifest next update:     Wed 06 May 2026 16:00:47 +0000
Files and hashes:         1: 0dbyZwebQgTGMD5-wPhJH6_Pd5I.roa (hash: rG5nZgpv1Ah9jz+mC9094dW59+5lFAhfWaH5ssnQtAk=)
                          2: 1-SQFDfpp9D_i817zUQFbntY0dRQ.roa (hash: biSe4GCFtSwazcB9PCCa1NKBDVP5/i0SLuwOHponshU=)
                          3: 2frKTWb3ttQDpCXNMXbTSXrlIqI.roa (hash: obnt34G7IEsjg6vdddM8muzJwshLaBlLPb65paOFsfE=)
                          4: 3lYygY9QSAAHtzgINKWVRrbCp_4.roa (hash: xTlxdsrlszD3wQ8XFzdmUFKsu5SMwqAldL5Rb7oJqzA=)
                          5: 4WijXRQsTuAJtSd_hSZYlUqj8lA.roa (hash: cDODijNSh6xud6bY86CXr7OdBhes8GnABNkzt2sQT9E=)
                          6: 7zTwSbIrIN1tbHKaAerBGKh4H_4.roa (hash: Uj+d0N/fp4CQPw2Wdyt0B7bkrgBCMNOKaEUgThPZLo4=)
                          7: Gv1ql7t0nNON87AJIldQVqDpbaw.roa (hash: Afsi36EyWB2mwsT0UzfNkOmYYiw9CwLh31zU2SIsaxk=)
                          8: I2KpdLXbpYuKcc5P2UrERlbUmQI.roa (hash: QwjjNYoou+Yqw7bbIshNHDY3CQQBCro8tQly5UuqIPQ=)
                          9: K6IIfeYnJcau7XFah26WtRrWoX4.roa (hash: kAmjx0E3nDeIJhDMXwZG/0loikW8ryL2ZHfuoiau2sI=)
                          10: KWr1d9bN0TxO3Vyyxh5NZILCR88.roa (hash: f1P78u1Ma27QCc9BoOC2qZIiHB032llb4ntaFCXhm3A=)
                          11: KfKdKGXKrJVAyc679p1xVdKcOuU.roa (hash: MZjQw9I7nKK82B9sKr7/qbtBGaD/PhRCNNoKDtPpSRQ=)
                          12: Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa (hash: ROtPVP9nVJ4sSu+guXDuQ34VOIJfTdPXZnYgNbsVTRc=)
                          13: PT0OVKn7DoYDkXnLiYT9h8XOQSo.roa (hash: P3oRTt1oGGLmL6K2JdXvl8dIu0LI9RbrIcGwZo70+dU=)
                          14: T-Tc8u-y-A23bEMCsm71F_7_jTg.roa (hash: uvA7IEtWcoBgqQxL/f1PptXnW15RVEqbUY2vsk5myZQ=)
                          15: TUHp0yldZUy2noEeejLALiKlsOA.roa (hash: hJdNCDGT+WfObUpSa1plMcdJasirz1T8A6b/aK4MsFo=)
                          16: Urxc-_3dN2rsdSn-CFXZaM1OMmE.roa (hash: KTdVek6dN9t33L+6LCMmAcoph/JKLQZZF3RFY22Laag=)
                          17: aFybrbDshxtrknuOyM8RFxRBKs0.roa (hash: RQU0CLTgvLglUS45QfR69+raL0+alWumuh4CDPItdCA=)
                          18: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: 9eLX09MAnmdBxyEnUNq2AxTlyPYxiO30P1BCzSVEY1Q=)
                          19: rZIzlxjNqrmdhiYj8eZcD_DAyYQ.roa (hash: HtYYyQJMTgOPk/TpOD1+JZFhzQ3pNzbNJ5gyclYza/w=)
                          20: thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa (hash: CSkwEjedoekw5JE8fDs8zoEDa+VA8TtlPZQTJSLtR3Q=)
                          21: xqLMI4n3mv1T0FOyglej7wVFdYE.roa (hash: BA8dbC4wqu6gr5aHMdPy/PzpkFFbaeIFkYk6ddxpagE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 May 2026 13:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f8:de:d9:b9:c4:a8:e7:6c:44:0d:49:47:00:06:23:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
        Validity
            Not Before: May  5 16:00:47 2026 GMT
            Not After : May  6 16:00:47 2026 GMT
        Subject: CN=b9f83dcbefe46854dc0da26e70e3900e1956ba8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:98:b0:28:60:33:2f:2d:b0:5d:ba:e5:ff:fb:
                    7b:06:0c:41:1b:f8:e6:4a:dd:6a:33:76:7f:81:38:
                    e6:bd:13:56:3c:65:33:c4:6c:a5:a7:d3:a1:a0:4b:
                    e2:d1:f8:d1:fe:ab:e9:4c:39:3c:63:57:73:91:cd:
                    f4:57:f7:ed:8b:ac:aa:74:ec:35:25:a2:f6:dd:76:
                    75:92:43:57:69:ef:ab:85:1b:1d:bb:81:d1:cc:1a:
                    45:de:71:fe:d4:5d:2c:f4:f5:b0:f2:90:15:f9:6a:
                    f1:05:91:ac:30:44:9d:5e:c9:bb:d6:87:ec:26:f4:
                    d5:9e:68:41:8b:66:20:5c:a3:73:0a:98:be:de:3c:
                    31:7f:76:71:29:b9:63:5a:c1:61:a4:5c:0f:80:21:
                    11:9d:c8:56:8e:50:b5:52:21:2b:2f:f1:e7:cf:5a:
                    f9:9a:5b:3d:69:eb:e5:05:ac:35:af:bd:f6:de:46:
                    72:53:71:39:82:ee:82:6d:83:75:58:15:0a:7f:32:
                    b7:2b:6a:f3:42:57:84:0c:69:7a:50:5c:76:5f:81:
                    c1:17:19:4d:8d:9b:e5:ba:82:e8:19:4b:9d:2d:dd:
                    c5:e1:86:b0:fd:7c:77:52:96:d3:6e:09:fa:d6:44:
                    50:5f:ca:01:64:9f:90:ca:1e:36:50:08:4b:99:a3:
                    da:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F8:3D:CB:EF:E4:68:54:DC:0D:A2:6E:70:E3:90:0E:19:56:BA:8A
            X509v3 Authority Key Identifier:
                keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:91:19:bb:73:24:fb:ed:99:3f:bf:03:68:ac:7f:f9:5b:dd:
         65:c8:44:9a:e6:aa:7d:a4:fc:ec:08:2f:b7:16:0a:e7:ee:92:
         d5:7f:d0:61:15:d5:00:ec:2d:9f:60:82:81:d1:bc:a4:0e:11:
         81:f1:6f:af:92:15:86:1c:77:d7:22:74:12:8e:11:e6:89:00:
         0c:aa:bd:b2:35:15:06:27:f6:d0:09:f2:72:9d:f1:eb:92:18:
         f0:5f:17:04:20:d5:27:20:00:a1:bc:fb:6a:1f:9a:26:72:6e:
         79:4c:f7:a9:cc:78:08:18:39:d6:ec:b7:f4:85:45:18:1e:94:
         c8:58:0f:06:6b:c7:e2:88:d7:b9:22:15:f3:08:7c:9f:be:f2:
         04:d3:56:45:f3:58:27:85:20:44:55:3c:e3:d2:f9:45:55:43:
         20:79:39:35:29:3f:bd:01:c3:10:c9:f1:2a:d3:6c:18:b3:03:
         cf:77:d3:ba:c9:98:c3:ac:3d:4d:6b:4f:1f:cd:e8:1b:a0:89:
         41:df:70:87:c1:56:ee:65:51:ba:85:d4:c2:e5:69:3d:97:96:
         13:a7:87:35:55:8e:1e:6c:05:bd:c6:50:c1:15:d4:ed:8e:dd:
         16:e5:d4:07:d4:2c:3c:c5:b6:34:5d:da:68:72:a9:af:ce:4c:
         d5:ec:b3:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ343tm5xKjnbEQNSUcABiPkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz
MGVhMTAwHhcNMjYwNTA1MTYwMDQ3WhcNMjYwNTA2MTYwMDQ3WjAzMTEwLwYDVQQD
EyhiOWY4M2RjYmVmZTQ2ODU0ZGMwZGEyNmU3MGUzOTAwZTE5NTZiYThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJiwKGAzLy2wXbrl//t7BgxBG/jm
St1qM3Z/gTjmvRNWPGUzxGylp9OhoEvi0fjR/qvpTDk8Y1dzkc30V/fti6yqdOw1
JaL23XZ1kkNXae+rhRsdu4HRzBpF3nH+1F0s9PWw8pAV+WrxBZGsMESdXsm71ofs
JvTVnmhBi2YgXKNzCpi+3jwxf3ZxKbljWsFhpFwPgCERnchWjlC1UiErL/Hnz1r5
mls9aevlBaw1r7323kZyU3E5gu6CbYN1WBUKfzK3K2rzQleEDGl6UFx2X4HBFxlN
jZvluoLoGUudLd3F4Yaw/Xx3UpbTbgn61kRQX8oBZJ+Qyh42UAhLmaPaaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLn4Pcvv5GhU3A2ibnDjkA4ZVrqKMB8GA1UdIwQY
MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt
YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi
LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpEZu3Mk
++2ZP78DaKx/+VvdZchEmuaqfaT87AgvtxYK5+6S1X/QYRXVAOwtn2CCgdG8pA4R
gfFvr5IVhhx31yJ0Eo4R5okADKq9sjUVBif20Anycp3x65IY8F8XBCDVJyAAobz7
ah+aJnJueUz3qcx4CBg51uy39IVFGB6UyFgPBmvH4ojXuSIV8wh8n77yBNNWRfNY
J4UgRFU849L5RVVDIHk5NSk/vQHDEMnxKtNsGLMDz3fTusmYw6w9TWtPH83oG6CJ
Qd9wh8FW7mVRuoXUwuVpPZeWE6eHNVWOHmwFvcZQwRXU7Y7dFuXUB9QsPMW2NF3a
aHKpr85M1eyzbg==
-----END CERTIFICATE-----
Generated at Tue May 5 20:11:29 2026 by rpki-client