Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
File:                     C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json)
Hash identifier:          gNm6mYTxP3apk8cNJHHmk8m/VRS4r+PbO+sAOYTpZNk=
Subject key identifier:   67:41:E8:04:AF:1C:19:D8:BE:0F:B6:42:0B:32:5A:6E:E2:9D:3F:F6
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Certificate issuer:       /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial:       019F186760E746B6224D0BAD818CD0349F05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
Manifest number:          0E48
Signing time:             Tue 30 Jun 2026 12:00:55 +0000
Manifest this update:     Tue 30 Jun 2026 12:00:55 +0000
Manifest next update:     Wed 01 Jul 2026 12:00:55 +0000
Files and hashes:         1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: 9hdhT4fbfomqYJ0hntOBiObpd4soAjDA+5Idm0XNMFI=)
                          2: ReyUn6tKBOELp3PqtRdTiZN56xc.roa (hash: o1NTV7KD/4RS51aQo1dWC0QW0kteepHZMeaZiAB8YZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:60:e7:46:b6:22:4d:0b:ad:81:8c:d0:34:9f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
        Validity
            Not Before: Jun 30 12:00:55 2026 GMT
            Not After : Jul  1 12:00:55 2026 GMT
        Subject: CN=6741e804af1c19d8be0fb6420b325a6ee29d3ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:db:84:56:b3:37:06:42:37:35:91:0d:28:
                    52:60:81:c8:fd:e0:95:df:f6:05:10:84:c6:80:ec:
                    93:fb:e8:f8:e3:1a:f1:5d:2d:97:96:59:9b:ba:27:
                    61:e1:27:10:4c:03:a4:e6:a0:00:00:1d:1e:15:66:
                    c2:b3:70:20:04:70:a1:7d:49:62:5d:2d:9b:74:68:
                    e8:54:82:08:1f:33:3e:10:b7:ee:f7:7f:6f:94:d4:
                    b7:b3:3d:15:9e:bf:7c:7b:73:37:48:6a:9a:0c:9a:
                    75:5e:65:59:e2:6d:ff:6b:91:9e:7e:4a:db:86:1c:
                    23:f5:f6:97:21:a4:8e:2e:3c:fb:3c:65:d9:ca:f9:
                    7e:bb:c5:89:46:25:54:c1:d6:9c:a3:a3:65:4f:a8:
                    04:44:2d:44:28:7e:82:20:ff:79:86:56:e3:14:b9:
                    82:47:e2:e0:31:25:2d:ad:e4:38:c1:d0:cd:72:55:
                    82:39:b4:b5:45:59:a1:6b:a2:6e:df:34:78:39:2d:
                    c8:af:af:7c:33:af:2f:f5:a4:b7:d5:42:42:31:7e:
                    bc:96:9d:d6:a6:a1:ec:cd:19:c3:83:1a:a0:29:fe:
                    cb:2f:5b:27:47:6a:b1:85:1c:a4:ee:7f:99:b2:1a:
                    f6:1a:1f:27:90:5c:8f:5e:7b:7e:2d:fd:b1:80:ef:
                    e6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:41:E8:04:AF:1C:19:D8:BE:0F:B6:42:0B:32:5A:6E:E2:9D:3F:F6
            X509v3 Authority Key Identifier:
                keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:12:4c:39:d3:d2:bd:4d:c6:27:3b:58:22:0e:6d:29:51:86:
         26:13:47:83:ed:29:84:3e:d3:a8:27:32:67:f4:81:8a:f2:d8:
         94:bd:4e:74:49:fd:10:e9:67:b6:e1:ac:13:37:03:dd:94:94:
         de:0f:e9:24:0d:81:5d:7a:47:64:6e:f3:1a:5f:61:ec:63:76:
         7a:e2:ee:ca:d7:d5:ad:38:a8:ad:1e:7a:98:6c:d4:47:72:79:
         47:33:cb:33:70:48:4c:f4:b3:f2:09:5e:5a:87:5e:b8:2d:31:
         27:4e:fc:7f:1e:3f:7f:7c:cc:63:d2:1e:7e:3d:45:54:7a:c4:
         03:91:37:2b:d1:f7:6a:d2:b6:a0:19:ff:00:20:d2:15:c9:6d:
         fe:96:90:e1:71:86:09:c1:7d:e0:25:08:cb:56:4c:b1:9b:f1:
         ae:2e:7e:d3:23:97:90:69:7c:c1:4c:7d:0e:ac:a2:02:05:3d:
         6f:90:25:e6:c3:41:ef:c3:a5:2d:ee:7e:ec:80:e2:7d:1d:a7:
         0b:b3:a8:22:b3:58:40:44:37:6d:e6:81:31:0e:dc:50:68:f2:
         c4:36:fb:4a:9d:2f:25:d6:e0:3b:c9:68:dd:28:62:9b:0c:ae:
         37:51:74:2b:0c:5b:02:8c:f7:f2:b2:00:e0:a0:e5:29:fa:0f:
         1a:a8:1a:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YZ2DnRrYiTQutgYzQNJ8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZWEwZWNkZDYzNGEzYzA3NWUzNWRiOWRjYTU3NjhlNGY3
NmNkODUwHhcNMjYwNjMwMTIwMDU1WhcNMjYwNzAxMTIwMDU1WjAzMTEwLwYDVQQD
Eyg2NzQxZTgwNGFmMWMxOWQ4YmUwZmI2NDIwYjMyNWE2ZWUyOWQzZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSzbhFazNwZCNzWRDShSYIHI/eCV
3/YFEITGgOyT++j44xrxXS2Xllmbuidh4ScQTAOk5qAAAB0eFWbCs3AgBHChfUli
XS2bdGjoVIIIHzM+ELfu939vlNS3sz0Vnr98e3M3SGqaDJp1XmVZ4m3/a5Gefkrb
hhwj9faXIaSOLjz7PGXZyvl+u8WJRiVUwdaco6NlT6gERC1EKH6CIP95hlbjFLmC
R+LgMSUtreQ4wdDNclWCObS1RVmha6Ju3zR4OS3Ir698M68v9aS31UJCMX68lp3W
pqHszRnDgxqgKf7LL1snR2qxhRyk7n+Zshr2Gh8nkFyPXnt+Lf2xgO/m3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdB6ASvHBnYvg+2QgsyWm7inT/2MB8GA1UdIwQY
MBaAFAvqDs3WNKPAdeNdudyldo5Pds2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTIt
MjNmY2M1MjRlYTg4LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTItMjNmY2M1MjRlYTg4
LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRJMOdPS
vU3GJztYIg5tKVGGJhNHg+0phD7TqCcyZ/SBivLYlL1OdEn9EOlntuGsEzcD3ZSU
3g/pJA2BXXpHZG7zGl9h7GN2euLuytfVrTiorR56mGzUR3J5RzPLM3BITPSz8gle
WodeuC0xJ078fx4/f3zMY9Iefj1FVHrEA5E3K9H3atK2oBn/ACDSFclt/paQ4XGG
CcF94CUIy1ZMsZvxri5+0yOXkGl8wUx9DqyiAgU9b5Al5sNB78OlLe5+7IDifR2n
C7OoIrNYQEQ3beaBMQ7cUGjyxDb7Sp0vJdbgO8lo3ShimwyuN1F0KwxbAoz38rIA
4KDlKfoPGqgaog==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:18 2026 by rpki-client