Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
File:                     OEypWHqC_DdH9GngCUXZ1VhaNbI.mft (raw, json)
Hash identifier:          VEZStT1dbKnzkVy18qHGyp8yi5gWB/K+/7LSY299b0M=
Subject key identifier:   BF:4A:AA:EC:56:C0:B8:FD:30:78:43:83:AE:0B:F0:27:50:B4:21:4F
Authority key identifier: 38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
Certificate issuer:       /CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Certificate serial:       019F12D3A659441CC1C06A5CEE58F7F4EABD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
Manifest number:          05C2
Signing time:             Mon 29 Jun 2026 10:01:28 +0000
Manifest this update:     Mon 29 Jun 2026 10:01:28 +0000
Manifest next update:     Tue 30 Jun 2026 10:01:28 +0000
Files and hashes:         1: OEypWHqC_DdH9GngCUXZ1VhaNbI.crl (hash: aYpRja1j3ttBbzQA8ak2tVjdc5ealIlw7F9Cv4pW5DY=)
                          2: m5e2ZDv7_-1udsvxigJbqqXmd_E.roa (hash: yOpoP5KeMEFEDYD+ejQW8hpR1s0gtVHvkYr8rcVTFC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 10:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:d3:a6:59:44:1c:c1:c0:6a:5c:ee:58:f7:f4:ea:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=384ca9587a82fc3747f469e00945d9d5585a35b2
        Validity
            Not Before: Jun 29 10:01:28 2026 GMT
            Not After : Jun 30 10:01:28 2026 GMT
        Subject: CN=bf4aaaec56c0b8fd30784383ae0bf02750b4214f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9f:db:ed:1e:d4:5c:3c:16:dd:46:ac:7e:5e:
                    ff:a7:0f:1c:2a:47:79:ca:26:27:8e:14:99:c7:c1:
                    31:a9:e1:a3:ba:5a:ac:b1:c1:07:d1:71:70:11:e2:
                    b3:8b:50:7b:7b:54:57:9b:e6:03:c2:34:67:64:75:
                    82:e5:34:94:55:cf:71:22:60:31:00:1f:b1:18:57:
                    22:3d:08:7c:a2:5f:49:ab:9b:90:22:78:3c:5a:ee:
                    46:ed:d9:b0:0c:3a:b8:59:4e:9f:14:ab:fb:76:7f:
                    00:04:a9:68:1e:52:98:96:b7:16:40:01:62:de:56:
                    e1:3c:22:96:22:d2:4e:9a:99:f0:77:31:17:29:c6:
                    60:a5:20:2b:e5:35:87:07:13:a9:2c:98:88:69:63:
                    e8:9e:14:3d:c7:72:e2:6c:47:d9:47:6e:f3:5c:91:
                    1b:68:a3:4c:1c:fe:73:09:5a:f8:60:02:35:d3:2d:
                    4c:59:5d:c2:e4:38:da:f8:43:aa:9c:73:f9:93:4f:
                    60:33:65:19:9d:1c:3d:42:81:64:5c:c6:86:29:a5:
                    58:83:af:39:22:47:ac:09:22:27:21:4f:bf:10:57:
                    10:9b:bc:fd:66:f3:92:60:d9:ff:60:e9:ad:96:ac:
                    b0:d0:5c:33:3a:ca:06:01:90:3b:b2:0c:93:2d:8f:
                    f7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4A:AA:EC:56:C0:B8:FD:30:78:43:83:AE:0B:F0:27:50:B4:21:4F
            X509v3 Authority Key Identifier:
                keyid:38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:47:2f:54:34:7b:47:3e:9b:f8:f7:ec:b9:b8:89:ec:9a:94:
         6d:36:55:bb:81:86:44:33:6e:00:02:b7:69:24:33:61:1c:f2:
         bd:58:22:18:70:8b:10:40:7e:68:a4:04:96:93:67:62:21:ed:
         f7:f7:e0:3e:32:87:3b:bb:0d:2a:c0:69:b9:ed:a9:4d:69:a6:
         75:84:79:7b:cd:6d:37:eb:28:05:68:e1:23:0d:32:0b:53:3c:
         ed:ed:14:c3:fe:39:39:6c:c9:17:46:33:a1:f8:f5:63:3a:fa:
         03:a5:a1:08:3b:6c:bb:ab:ed:21:1b:6b:aa:c5:e7:9e:38:4e:
         63:03:e7:6e:80:78:b7:fb:ef:77:ae:77:99:02:45:e5:3d:c9:
         f2:d6:6c:05:39:40:58:ee:4e:ee:79:a9:b6:88:44:25:aa:48:
         3f:ac:ee:2f:30:df:9d:9f:cb:d4:13:80:93:f3:02:98:1f:56:
         1f:b8:66:90:e1:d3:3c:02:3f:9c:f7:ee:d3:6e:7f:fe:f9:01:
         e4:a5:4f:a5:71:25:ea:f6:70:94:0f:77:2b:c7:ad:7f:12:47:
         0a:75:63:10:29:ac:3a:2d:40:ed:d2:e7:a7:2e:1e:3c:4e:1a:
         3b:e7:c7:9a:a5:66:dd:88:14:72:39:71:aa:14:dc:03:66:54:
         eb:13:4c:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8S06ZZRBzBwGpc7lj39Oq9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NGNhOTU4N2E4MmZjMzc0N2Y0NjllMDA5NDVkOWQ1NTg1
YTM1YjIwHhcNMjYwNjI5MTAwMTI4WhcNMjYwNjMwMTAwMTI4WjAzMTEwLwYDVQQD
EyhiZjRhYWFlYzU2YzBiOGZkMzA3ODQzODNhZTBiZjAyNzUwYjQyMTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Z/b7R7UXDwW3Uasfl7/pw8cKkd5
yiYnjhSZx8ExqeGjulqsscEH0XFwEeKzi1B7e1RXm+YDwjRnZHWC5TSUVc9xImAx
AB+xGFciPQh8ol9Jq5uQIng8Wu5G7dmwDDq4WU6fFKv7dn8ABKloHlKYlrcWQAFi
3lbhPCKWItJOmpnwdzEXKcZgpSAr5TWHBxOpLJiIaWPonhQ9x3LibEfZR27zXJEb
aKNMHP5zCVr4YAI10y1MWV3C5Dja+EOqnHP5k09gM2UZnRw9QoFkXMaGKaVYg685
IkesCSInIU+/EFcQm7z9ZvOSYNn/YOmtlqyw0FwzOsoGAZA7sgyTLY/3PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9KquxWwLj9MHhDg64L8CdQtCFPMB8GA1UdIwQY
MBaAFDhMqVh6gvw3R/Rp4AlF2dVYWjWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9hMTk2NTQtYWRlYy00Mzk3LThlYjAt
MTdhZDJmMDFjMDA5LzEvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9hMTk2NTQtYWRlYy00Mzk3LThlYjAtMTdhZDJmMDFjMDA5
LzEvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUcvVDR7
Rz6b+PfsubiJ7JqUbTZVu4GGRDNuAAK3aSQzYRzyvVgiGHCLEEB+aKQElpNnYiHt
9/fgPjKHO7sNKsBpue2pTWmmdYR5e81tN+soBWjhIw0yC1M87e0Uw/45OWzJF0Yz
ofj1Yzr6A6WhCDtsu6vtIRtrqsXnnjhOYwPnboB4t/vvd653mQJF5T3J8tZsBTlA
WO5O7nmptohEJapIP6zuLzDfnZ/L1BOAk/MCmB9WH7hmkOHTPAI/nPfu025//vkB
5KVPpXEl6vZwlA93K8etfxJHCnVjECmsOi1A7dLnpy4ePE4aO+fHmqVm3YgUcjlx
qhTcA2ZU6xNMtw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 15:43:17 2026 by rpki-client