Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
File:                     _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json)
Hash identifier:          K3oYOWyzGmGBoaJY36ybhEa5baWAwovIr88euRsRpMQ=
Subject key identifier:   F9:8E:C8:AA:C8:FA:4A:85:19:CF:9C:1F:76:40:F6:B3:23:F4:C1:77
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Certificate issuer:       /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial:       019FCB2601ED5A36E6180AEEB08050C28A6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
Manifest number:          0FBE
Signing time:             Tue 04 Aug 2026 05:01:33 +0000
Manifest this update:     Tue 04 Aug 2026 05:01:33 +0000
Manifest next update:     Wed 05 Aug 2026 05:01:33 +0000
Files and hashes:         1: 1j-0fRD2UKFFOwRpmh3BdgzS-KY.roa (hash: J/OpGEjDOcAf1NYGQDPN+Up9rV3l4EiqrJmyP7OZ814=)
                          2: 1jeMDJUiXFwN8iyBiVBPKoxXVXs.roa (hash: AMsBQ6qY2ffhJac7OKTZiKgzqFTd8W61KP5VxcegYfI=)
                          3: 8dzN450MceNxFZuh40v7FDAkGTQ.roa (hash: BgZesWB7TBZ2ukStYIi5/XRVw/OSfrLbRqY0NDLypP4=)
                          4: 8qcIukp4HnQx0oYkGLwCzsKZiYo.roa (hash: lKiK6GaUIl/2a4hMyDoRDNhH9WPIQAXZ8Vf6bDffpMU=)
                          5: QHyWqsk-H_U_C8FgB92VgJrEDYc.roa (hash: 2PrV5bBw8H3ip6Yld1QjjzmInJzdg74Uy0jZkkwlPFU=)
                          6: SebffTJZqAhjn9b2tB5fFNf4TVo.roa (hash: gyrU041nZbWUtGgHmkEeVRe5OSCwzL356v2625rtYDU=)
                          7: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: 7n7N/8tuvlz/1AJ89paGXsKUcRkpBP7q6XVk9PGdtcg=)
                          8: yvdM8oqK9UEjHe-j9vf4hYEvsHI.roa (hash: FyIoG3Rlf0BHBBnW/KlrAfAwmMpmY2nq+UoGuSzOyGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Aug 2026 23:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cb:26:01:ed:5a:36:e6:18:0a:ee:b0:80:50:c2:8a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
        Validity
            Not Before: Aug  4 05:01:33 2026 GMT
            Not After : Aug  5 05:01:33 2026 GMT
        Subject: CN=f98ec8aac8fa4a8519cf9c1f7640f6b323f4c177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:30:66:14:4f:d5:83:8f:f4:fc:ea:a2:f7:33:
                    4c:3f:3f:f7:b6:dd:80:36:67:1d:55:34:90:46:a6:
                    81:91:38:56:41:ab:65:51:a7:22:bf:01:c7:6f:1a:
                    6d:1e:1c:80:4e:4e:c8:94:24:f1:9a:cc:d2:b4:d5:
                    24:14:ce:cd:b3:ad:9e:c9:80:ab:d8:a4:a8:a6:c6:
                    7a:5e:73:80:16:4b:c0:5c:e7:73:b4:a4:1d:49:c9:
                    50:b7:7c:85:e6:40:15:79:77:22:f0:03:7d:86:d4:
                    66:f1:56:0f:c9:f1:77:88:42:48:29:6f:cc:71:54:
                    0c:3d:0a:0f:ae:67:d8:94:52:bb:88:32:81:86:0c:
                    73:25:33:9f:ea:e6:2d:d1:9a:96:c4:09:f8:b0:da:
                    68:2b:57:62:5d:c7:3a:c4:e8:dc:53:e0:9e:3f:50:
                    e7:d9:a7:82:01:46:78:00:a0:88:8a:32:65:0c:35:
                    03:91:ad:c0:86:ef:02:07:f6:f6:01:4f:57:69:c2:
                    0d:86:27:2b:e9:90:3e:f8:df:82:88:b0:30:7d:03:
                    22:6c:33:fb:6d:16:c1:35:c4:30:be:ba:3f:2c:8a:
                    f0:cc:ef:4a:d1:78:e2:b1:1c:4f:8a:43:81:1e:d9:
                    4b:71:6a:1f:4a:c0:29:93:1e:c3:5a:d3:bf:c3:3b:
                    d0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8E:C8:AA:C8:FA:4A:85:19:CF:9C:1F:76:40:F6:B3:23:F4:C1:77
            X509v3 Authority Key Identifier:
                keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b5:73:17:97:fe:96:c9:67:91:e1:1a:a7:f3:a5:01:31:60:
         11:cc:eb:e4:3f:3d:90:67:68:4c:e0:14:16:48:18:4a:dd:b6:
         f0:8c:97:ac:3b:35:22:ea:9a:1e:61:29:3f:8d:b8:79:1e:16:
         bc:83:7b:47:a3:b3:07:5d:ed:9b:8b:33:a5:77:9d:c5:4b:0a:
         77:2d:ad:ee:59:2e:08:47:1b:bf:95:bc:f2:4f:fc:8d:84:1a:
         0a:77:33:fd:03:ad:f0:38:05:09:97:78:53:18:8d:e0:d8:48:
         7a:7e:b4:b6:9c:1b:e4:48:58:76:b3:eb:f7:48:d1:d8:5f:26:
         7c:21:61:ba:ed:1f:5c:fb:05:77:14:c5:8f:c0:08:c4:b6:00:
         4e:f7:ab:da:16:a9:99:0b:7f:44:01:02:1f:cd:c6:46:0f:57:
         cc:cb:b1:b2:9b:2d:5d:96:a6:bf:9a:f6:63:43:78:df:db:01:
         4f:8d:2e:8f:94:23:a7:1f:50:a4:fa:c2:73:3b:b1:71:63:85:
         40:c0:19:4e:b5:bb:67:06:3f:c9:3e:b0:83:3e:5f:fe:44:dc:
         b9:5d:8a:12:27:64:55:15:c2:ca:12:88:45:64:8c:ce:07:29:
         5a:2a:bf:28:39:61:b8:a5:8b:00:4b:ec:f0:7b:b1:13:a2:0a:
         6c:f7:75:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/LJgHtWjbmGArusIBQwopqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlODE5OWU4MzQ1NTY3ZDg1MTZiNzg4ZmUyZTFkMzk3ZTI3
YzczYTQwHhcNMjYwODA0MDUwMTMzWhcNMjYwODA1MDUwMTMzWjAzMTEwLwYDVQQD
EyhmOThlYzhhYWM4ZmE0YTg1MTljZjljMWY3NjQwZjZiMzIzZjRjMTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzBmFE/Vg4/0/Oqi9zNMPz/3tt2A
NmcdVTSQRqaBkThWQatlUacivwHHbxptHhyATk7IlCTxmszStNUkFM7Ns62eyYCr
2KSopsZ6XnOAFkvAXOdztKQdSclQt3yF5kAVeXci8AN9htRm8VYPyfF3iEJIKW/M
cVQMPQoPrmfYlFK7iDKBhgxzJTOf6uYt0ZqWxAn4sNpoK1diXcc6xOjcU+CeP1Dn
2aeCAUZ4AKCIijJlDDUDka3Ahu8CB/b2AU9XacINhicr6ZA++N+CiLAwfQMibDP7
bRbBNcQwvro/LIrwzO9K0XjisRxPikOBHtlLcWofSsApkx7DWtO/wzvQaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmOyKrI+kqFGc+cH3ZA9rMj9MF3MB8GA1UdIwQY
MBaAFP6Bmeg0VWfYUWt4j+Lh05fifHOkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQt
ODQwY2NiMzRiM2Y1LzEvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQtODQwY2NiMzRiM2Y1
LzEvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAerVzF5f+
lslnkeEap/OlATFgEczr5D89kGdoTOAUFkgYSt228IyXrDs1IuqaHmEpP424eR4W
vIN7R6OzB13tm4szpXedxUsKdy2t7lkuCEcbv5W88k/8jYQaCncz/QOt8DgFCZd4
UxiN4NhIen60tpwb5EhYdrPr90jR2F8mfCFhuu0fXPsFdxTFj8AIxLYATver2hap
mQt/RAECH83GRg9XzMuxspstXZamv5r2Y0N439sBT40uj5Qjpx9QpPrCczuxcWOF
QMAZTrW7ZwY/yT6wgz5f/kTcuV2KEidkVRXCyhKIRWSMzgcpWiq/KDlhuKWLAEvs
8HuxE6IKbPd1sA==
-----END CERTIFICATE-----
Generated at Tue Aug 4 08:46:59 2026 by rpki-client