Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
File:                     olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json)
Hash identifier:          A9eofnlzawQXgIwS+Pt3dSzpcaOEXf0ParKzo4uG7Iw=
Subject key identifier:   F1:58:D1:A8:A6:F1:F0:FA:99:DD:AF:8E:45:F8:30:91:63:D6:75:27
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Certificate issuer:       /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial:       019EE0D4A047EA6E6C6678944CE8285E2AA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
Manifest number:          19A6
Signing time:             Fri 19 Jun 2026 17:01:31 +0000
Manifest this update:     Fri 19 Jun 2026 17:01:31 +0000
Manifest next update:     Sat 20 Jun 2026 17:01:31 +0000
Files and hashes:         1: 0dbyZwebQgTGMD5-wPhJH6_Pd5I.roa (hash: rG5nZgpv1Ah9jz+mC9094dW59+5lFAhfWaH5ssnQtAk=)
                          2: 1-SQFDfpp9D_i817zUQFbntY0dRQ.roa (hash: biSe4GCFtSwazcB9PCCa1NKBDVP5/i0SLuwOHponshU=)
                          3: 2frKTWb3ttQDpCXNMXbTSXrlIqI.roa (hash: obnt34G7IEsjg6vdddM8muzJwshLaBlLPb65paOFsfE=)
                          4: 3lYygY9QSAAHtzgINKWVRrbCp_4.roa (hash: xTlxdsrlszD3wQ8XFzdmUFKsu5SMwqAldL5Rb7oJqzA=)
                          5: 4WijXRQsTuAJtSd_hSZYlUqj8lA.roa (hash: cDODijNSh6xud6bY86CXr7OdBhes8GnABNkzt2sQT9E=)
                          6: 5KqisG8I4aftfbpV-Wm5RoZOAu4.roa (hash: aWHlE7ObMJmJWXU63vmIza0enQBptwax9xe4eo6h4LY=)
                          7: 7zTwSbIrIN1tbHKaAerBGKh4H_4.roa (hash: Uj+d0N/fp4CQPw2Wdyt0B7bkrgBCMNOKaEUgThPZLo4=)
                          8: BiFlBqm3KUzEVOiMzYhT_EVILsg.roa (hash: fPfSMKmz3G9txaE/xrCmq0xkzT0anA6fzG93SYzo/Cs=)
                          9: Gv1ql7t0nNON87AJIldQVqDpbaw.roa (hash: Afsi36EyWB2mwsT0UzfNkOmYYiw9CwLh31zU2SIsaxk=)
                          10: I2KpdLXbpYuKcc5P2UrERlbUmQI.roa (hash: QwjjNYoou+Yqw7bbIshNHDY3CQQBCro8tQly5UuqIPQ=)
                          11: K6IIfeYnJcau7XFah26WtRrWoX4.roa (hash: kAmjx0E3nDeIJhDMXwZG/0loikW8ryL2ZHfuoiau2sI=)
                          12: KfKdKGXKrJVAyc679p1xVdKcOuU.roa (hash: MZjQw9I7nKK82B9sKr7/qbtBGaD/PhRCNNoKDtPpSRQ=)
                          13: Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa (hash: ROtPVP9nVJ4sSu+guXDuQ34VOIJfTdPXZnYgNbsVTRc=)
                          14: PT0OVKn7DoYDkXnLiYT9h8XOQSo.roa (hash: P3oRTt1oGGLmL6K2JdXvl8dIu0LI9RbrIcGwZo70+dU=)
                          15: Ss_HAbXwrBgTnN9olUTWyjQFCB4.roa (hash: nrNxrT3l4poCRT7QhHB8p4Y5AUqyWOUsBfKv8pVp0tQ=)
                          16: TUHp0yldZUy2noEeejLALiKlsOA.roa (hash: hJdNCDGT+WfObUpSa1plMcdJasirz1T8A6b/aK4MsFo=)
                          17: Urxc-_3dN2rsdSn-CFXZaM1OMmE.roa (hash: KTdVek6dN9t33L+6LCMmAcoph/JKLQZZF3RFY22Laag=)
                          18: aFybrbDshxtrknuOyM8RFxRBKs0.roa (hash: RQU0CLTgvLglUS45QfR69+raL0+alWumuh4CDPItdCA=)
                          19: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: cDvdvVqTHn0jzgFpusDODO5psYfpNWkYLJriRp7CbDY=)
                          20: rZIzlxjNqrmdhiYj8eZcD_DAyYQ.roa (hash: HtYYyQJMTgOPk/TpOD1+JZFhzQ3pNzbNJ5gyclYza/w=)
                          21: thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa (hash: CSkwEjedoekw5JE8fDs8zoEDa+VA8TtlPZQTJSLtR3Q=)
                          22: xqLMI4n3mv1T0FOyglej7wVFdYE.roa (hash: BA8dbC4wqu6gr5aHMdPy/PzpkFFbaeIFkYk6ddxpagE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 17:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e0:d4:a0:47:ea:6e:6c:66:78:94:4c:e8:28:5e:2a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
        Validity
            Not Before: Jun 19 17:01:31 2026 GMT
            Not After : Jun 20 17:01:31 2026 GMT
        Subject: CN=f158d1a8a6f1f0fa99ddaf8e45f8309163d67527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:70:3d:31:f6:3d:f2:c4:2b:8f:cb:94:6d:a9:
                    27:7c:59:89:f5:e9:3a:bb:d3:8b:59:9c:24:ab:7a:
                    e3:a5:38:c0:bf:1e:81:12:e4:c1:61:47:bb:33:6d:
                    f0:4f:3a:2a:6e:30:d1:80:35:ac:eb:26:d2:24:b4:
                    bd:e6:2c:53:a5:a5:57:4b:dc:72:b8:60:bc:f6:bd:
                    ef:42:8b:b1:8f:49:10:65:ef:a5:a3:a0:1b:0a:b4:
                    74:cf:1a:79:9f:c5:8b:8e:b1:ce:12:01:12:f6:02:
                    d9:30:8c:77:0d:90:1d:e7:78:07:d9:32:fd:6d:89:
                    4e:38:ed:e7:c3:aa:cb:ff:5b:11:8d:75:15:62:a7:
                    2f:85:3a:2c:89:41:5c:6e:1b:8f:4b:8f:74:9d:3f:
                    a9:09:fe:f5:b1:2f:1c:34:93:aa:ca:11:1d:70:81:
                    d6:96:a2:24:0c:27:9e:a1:61:e0:2f:86:b6:ec:7b:
                    0c:56:20:57:65:47:35:6c:51:02:b0:b2:7c:f4:5d:
                    b4:0b:e5:23:dd:90:d3:84:07:ce:24:6c:09:3e:2a:
                    60:1b:a1:db:bb:b1:89:ef:1b:ee:ed:06:c2:6b:a2:
                    13:2a:1e:8d:14:dd:87:55:4d:49:55:db:40:74:c4:
                    77:74:c5:22:26:c8:98:bd:e9:d8:9a:88:e5:45:15:
                    ec:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:58:D1:A8:A6:F1:F0:FA:99:DD:AF:8E:45:F8:30:91:63:D6:75:27
            X509v3 Authority Key Identifier:
                keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:30:2f:63:a4:9e:b4:9a:4d:86:bc:1a:46:a8:4a:8a:16:64:
         69:7d:86:6e:ec:7c:66:20:25:91:61:8c:26:b9:4a:66:56:2c:
         3d:0b:b8:af:a0:7c:7c:8c:b6:ad:26:04:8b:a1:ad:fc:34:3f:
         2d:f8:0a:bb:3f:55:7f:3c:7b:c7:6d:08:65:c3:50:9e:af:3e:
         d8:c5:8c:0f:1d:49:df:09:23:da:26:f7:14:a7:40:da:32:a2:
         c0:79:a5:7f:88:55:14:4c:4f:b0:61:d9:fb:26:67:de:ee:49:
         28:60:f6:4a:de:8a:36:0f:3e:b8:0e:38:0d:aa:5a:60:e6:e3:
         b6:9c:38:4c:2b:ed:70:3b:29:41:00:5a:d9:93:39:8a:61:9f:
         f9:ca:62:50:1b:73:df:14:1d:74:1e:99:01:80:64:1e:ed:15:
         d3:e6:96:3f:ba:d6:14:c1:13:be:85:46:67:70:00:2f:b0:52:
         29:7f:34:b4:5e:15:28:ef:e1:35:2e:b2:b2:7a:ab:70:be:8a:
         8f:06:aa:ab:b5:44:fe:eb:d7:45:f4:bf:b2:d1:c1:ac:44:ec:
         11:d4:be:1b:fb:18:f7:20:7c:a3:62:10:6a:12:53:44:e7:60:
         b5:6c:b8:ba:50:c9:0a:35:4b:36:c0:3b:90:d0:23:a5:69:8c:
         2d:08:6d:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7g1KBH6m5sZniUTOgoXiqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz
MGVhMTAwHhcNMjYwNjE5MTcwMTMxWhcNMjYwNjIwMTcwMTMxWjAzMTEwLwYDVQQD
EyhmMTU4ZDFhOGE2ZjFmMGZhOTlkZGFmOGU0NWY4MzA5MTYzZDY3NTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXA9MfY98sQrj8uUbaknfFmJ9ek6
u9OLWZwkq3rjpTjAvx6BEuTBYUe7M23wTzoqbjDRgDWs6ybSJLS95ixTpaVXS9xy
uGC89r3vQouxj0kQZe+lo6AbCrR0zxp5n8WLjrHOEgES9gLZMIx3DZAd53gH2TL9
bYlOOO3nw6rL/1sRjXUVYqcvhTosiUFcbhuPS490nT+pCf71sS8cNJOqyhEdcIHW
lqIkDCeeoWHgL4a27HsMViBXZUc1bFECsLJ89F20C+Uj3ZDThAfOJGwJPipgG6Hb
u7GJ7xvu7QbCa6ITKh6NFN2HVU1JVdtAdMR3dMUiJsiYvenYmojlRRXsPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFY0aim8fD6md2vjkX4MJFj1nUnMB8GA1UdIwQY
MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt
YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi
LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzAvY6Se
tJpNhrwaRqhKihZkaX2Gbux8ZiAlkWGMJrlKZlYsPQu4r6B8fIy2rSYEi6Gt/DQ/
LfgKuz9Vfzx7x20IZcNQnq8+2MWMDx1J3wkj2ib3FKdA2jKiwHmlf4hVFExPsGHZ
+yZn3u5JKGD2St6KNg8+uA44DapaYObjtpw4TCvtcDspQQBa2ZM5imGf+cpiUBtz
3xQddB6ZAYBkHu0V0+aWP7rWFMETvoVGZ3AAL7BSKX80tF4VKO/hNS6ysnqrcL6K
jwaqq7VE/uvXRfS/stHBrETsEdS+G/sY9yB8o2IQahJTROdgtWy4ulDJCjVLNsA7
kNAjpWmMLQhtDQ==
-----END CERTIFICATE-----
Generated at Sat Jun 20 04:15:19 2026 by rpki-client