Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File:                     oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier:          MmH56bYDX1rKY8Y0oyI+GkZ1q4+DOFrd5pDAN6Od3LE=
Subject key identifier:   47:24:70:11:0A:63:7E:63:05:5F:B9:7D:BA:2A:22:76:BB:E9:9B:3A
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer:       /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial:       019CE5C93FD4A257172EF09025311C377FD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number:          1242
Signing time:             Fri 13 Mar 2026 06:01:37 +0000
Manifest this update:     Fri 13 Mar 2026 06:01:37 +0000
Manifest next update:     Sat 14 Mar 2026 06:01:37 +0000
Files and hashes:         1: 0Zesq0AbB4PradrYOoKeAmLgmoo.roa (hash: uyAIf7m1jJ9F7/DZjhCImbWm0xh75pqBE+0Iul58rXo=)
                          2: 1-Xka6nhHlTAY0IkAtp7cisl4Q0o.roa (hash: cYSQflXuM4PG35Mh50PGE2nbDxv/tnzYwdWGgGNp7kU=)
                          3: 3-zjNQeLr2VYnGvtAQl3wPrAttQ.roa (hash: oZEc3kU6X6afeD3VVmtRDKKInN6hBgwdLqV0FrQL9OA=)
                          4: 3xEx3bVGfXIchqPcHOE-UCr11f0.roa (hash: y+CVyDs3ZBJgnuFTk7NR2y3nV9NJmzoB4Ik1Ns4joJs=)
                          5: B7UyS94iVj1DJiAES7AGdZBkhvU.roa (hash: LvNOB6rKBIqz8zy85DW3nACAYVwrAZC+twiA7P7L6S8=)
                          6: gr24W9hYxDP-t_iDnbRQ3OZdbjk.roa (hash: 3hVp+1R1qAZlY2bc8T6diQXm1af3Uw7Bq4eqKsz2fRA=)
                          7: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: g4YAVH0YG/RlT/PLgttQAtHwpH6j8U58VpxU8GPmZFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c9:3f:d4:a2:57:17:2e:f0:90:25:31:1c:37:7f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
        Validity
            Not Before: Mar 13 06:01:37 2026 GMT
            Not After : Mar 14 06:01:37 2026 GMT
        Subject: CN=472470110a637e63055fb97dba2a2276bbe99b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a8:12:ea:68:b1:58:f1:43:4e:e1:07:63:68:
                    b5:57:e5:10:6b:31:b8:bf:72:db:c0:3e:74:47:0e:
                    86:f4:e5:e9:e2:8e:9f:03:6d:72:a2:65:97:c5:a3:
                    08:37:38:6a:48:b1:9f:da:57:85:ec:12:66:48:4a:
                    e6:f6:ab:5a:cf:44:9a:cf:0e:ae:b8:c5:13:8e:03:
                    84:dd:bd:dc:ef:46:38:9c:71:37:b8:31:07:99:6e:
                    4a:45:25:3e:04:95:69:a9:9a:f5:0b:5c:2b:55:e9:
                    a6:fd:64:b4:93:d4:9f:fe:28:54:2a:59:e1:a6:f8:
                    62:93:bb:c9:7c:52:27:87:55:b3:36:39:19:d7:e6:
                    a6:46:60:8a:b7:2f:2d:c8:55:2e:41:52:99:96:41:
                    0d:75:bc:07:ed:db:05:c4:1e:c3:eb:e3:05:c4:1d:
                    0a:bc:a4:5e:c6:a8:22:5d:31:89:ff:d5:b4:fc:1e:
                    0c:71:97:1d:72:00:ed:00:6f:d3:90:cf:7c:0d:bb:
                    d9:0c:e7:90:12:70:38:04:5b:4d:66:ce:aa:2b:c1:
                    0c:73:1d:d6:22:4b:13:cd:60:53:e2:b1:08:0f:a9:
                    e0:16:9e:37:e5:45:0c:26:9f:11:d8:7f:6e:f7:4d:
                    5a:7b:d0:a3:48:59:2d:24:83:0d:94:ef:40:46:cb:
                    23:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:24:70:11:0A:63:7E:63:05:5F:B9:7D:BA:2A:22:76:BB:E9:9B:3A
            X509v3 Authority Key Identifier:
                keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e7:69:67:09:5b:26:58:24:36:e4:e4:da:22:1d:2d:a5:73:
         cc:92:96:f1:80:8c:e8:f8:2c:16:ee:83:90:11:68:19:35:a0:
         fa:86:4c:bf:f9:36:5e:ca:eb:b1:45:12:2c:b8:6c:80:67:bd:
         d3:2f:e8:8e:b4:a1:6f:eb:7e:7d:74:70:d0:77:7f:f4:cc:bc:
         be:91:4a:a2:37:55:87:a9:f9:25:c3:44:b4:a3:a0:01:1a:30:
         be:41:0a:cd:41:17:5c:15:da:96:2a:5f:1c:6e:67:28:29:c3:
         cc:75:fc:e9:58:d0:1a:50:6a:bc:47:23:8c:c6:31:9e:f2:f6:
         bf:7d:81:3a:5f:a4:7e:24:db:e6:0a:55:ec:5b:09:2b:f8:f0:
         04:29:51:d1:87:67:8b:11:e8:25:f4:9f:e8:bb:0e:a7:23:a3:
         b3:1d:60:f7:63:4a:fd:be:5a:f3:2a:5c:6b:f5:b0:f9:9d:7f:
         37:3d:b5:3c:40:72:38:4e:ae:2b:a4:d3:58:38:9a:e1:55:dd:
         22:96:1e:01:a5:48:1a:4c:fa:0a:98:d7:1a:22:e8:56:0c:2f:
         ce:22:19:e0:c8:e5:d1:fa:aa:81:da:4d:f1:44:57:f3:0f:f8:
         e4:78:11:55:77:da:6c:84:82:17:20:eb:a2:e7:5f:eb:49:da:
         e2:21:80:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlyT/UolcXLvCQJTEcN3/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMTZjNzY1OWFmMWQ1NmJjNzE4ZmFmNjE0ZjA5Mjc1OGY1
ZWRjN2YwHhcNMjYwMzEzMDYwMTM3WhcNMjYwMzE0MDYwMTM3WjAzMTEwLwYDVQQD
Eyg0NzI0NzAxMTBhNjM3ZTYzMDU1ZmI5N2RiYTJhMjI3NmJiZTk5YjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtagS6mixWPFDTuEHY2i1V+UQazG4
v3LbwD50Rw6G9OXp4o6fA21yomWXxaMINzhqSLGf2leF7BJmSErm9qtaz0Sazw6u
uMUTjgOE3b3c70Y4nHE3uDEHmW5KRSU+BJVpqZr1C1wrVemm/WS0k9Sf/ihUKlnh
pvhik7vJfFInh1WzNjkZ1+amRmCKty8tyFUuQVKZlkENdbwH7dsFxB7D6+MFxB0K
vKRexqgiXTGJ/9W0/B4McZcdcgDtAG/TkM98DbvZDOeQEnA4BFtNZs6qK8EMcx3W
IksTzWBT4rEID6ngFp435UUMJp8R2H9u901ae9CjSFktJIMNlO9ARssjvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEckcBEKY35jBV+5fboqIna76Zs6MB8GA1UdIwQY
MBaAFKMWx2Wa8dVrxxj69hTwknWPXtx/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUt
MzY4N2M4MThlZGU1LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUtMzY4N2M4MThlZGU1
LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALedpZwlb
JlgkNuTk2iIdLaVzzJKW8YCM6PgsFu6DkBFoGTWg+oZMv/k2XsrrsUUSLLhsgGe9
0y/ojrShb+t+fXRw0Hd/9My8vpFKojdVh6n5JcNEtKOgARowvkEKzUEXXBXalipf
HG5nKCnDzHX86VjQGlBqvEcjjMYxnvL2v32BOl+kfiTb5gpV7FsJK/jwBClR0Ydn
ixHoJfSf6LsOpyOjsx1g92NK/b5a8ypca/Ww+Z1/Nz21PEByOE6uK6TTWDia4VXd
IpYeAaVIGkz6CpjXGiLoVgwvziIZ4Mjl0fqqgdpN8URX8w/45HgRVXfabISCFyDr
oudf60na4iGAog==
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:33:55 2026 by rpki-client