Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File:                     C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier:          MMX1kGjf5MOw3kAP+Hx9wf3Vy4mC5NvS7anI1xQUSm0=
Subject key identifier:   48:4B:21:B8:07:A3:C1:D3:A9:3F:81:6C:B2:45:2C:B9:B6:DC:1D:A2
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer:       /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial:       019EBB46A3FE2AF388E3F8EDDF62F9E0FE80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number:          1669
Signing time:             Fri 12 Jun 2026 10:00:29 +0000
Manifest this update:     Fri 12 Jun 2026 10:00:29 +0000
Manifest next update:     Sat 13 Jun 2026 10:00:29 +0000
Files and hashes:         1: 5Exteqie3KsBngcWjYUU_zanfa8.roa (hash: PdNLvFWIBwQQSvbTJF82uHlbPL/7rLb8bBwlQCZrRe8=)
                          2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: nWba7Z0tq8/NRULE7H3z4irEE6LF3iJ3or6HicxVcjs=)
                          3: Y3ge3oRqpdmJst537rmbrGZpsUE.roa (hash: Pn9f33aZ8ng5xcQn0dPf3vN8u8Ztxrsr9oyxZOfeI/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bb:46:a3:fe:2a:f3:88:e3:f8:ed:df:62:f9:e0:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
        Validity
            Not Before: Jun 12 10:00:29 2026 GMT
            Not After : Jun 13 10:00:29 2026 GMT
        Subject: CN=484b21b807a3c1d3a93f816cb2452cb9b6dc1da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:32:18:31:ad:2d:c8:f3:b2:ae:6d:6c:38:5d:
                    a4:52:d1:82:7c:40:d5:e1:82:56:43:55:15:04:31:
                    3c:29:8e:1d:79:7b:c4:1d:7a:29:5f:80:62:26:d6:
                    9d:48:0f:b6:aa:80:34:e0:61:6b:6e:83:6f:2b:f0:
                    a1:ea:5d:03:68:97:63:9f:16:e1:a6:c0:9a:e9:ce:
                    a9:47:1b:8d:89:98:8b:37:84:43:4a:51:f9:ca:84:
                    11:73:b5:68:91:4a:4b:cd:2b:e1:4d:7a:50:3d:08:
                    12:27:f3:06:b4:af:63:aa:63:7d:a3:84:bd:49:98:
                    41:22:36:94:ca:eb:c9:51:a8:76:1a:83:91:be:0e:
                    c8:25:e2:09:b1:c0:89:ad:68:28:2f:7b:f5:60:c1:
                    2b:dd:01:0c:f6:85:dc:57:bf:ea:33:88:db:34:70:
                    1e:99:e1:54:62:8c:b1:95:ae:21:fd:9a:80:7b:12:
                    36:8d:af:d4:bf:8c:8c:6c:84:88:e8:f2:41:31:50:
                    3e:47:2a:b4:a4:99:ae:a2:88:27:db:c6:ff:8d:22:
                    4a:4b:aa:12:ab:ae:6a:7c:5b:3e:aa:ed:62:93:85:
                    b8:47:f8:fa:2a:3c:51:8a:27:52:b9:39:e0:04:a2:
                    b7:6c:fa:7a:d6:04:86:9c:01:50:8b:91:f4:ef:62:
                    f8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4B:21:B8:07:A3:C1:D3:A9:3F:81:6C:B2:45:2C:B9:B6:DC:1D:A2
            X509v3 Authority Key Identifier:
                keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:67:40:c2:22:35:fe:e5:db:64:80:b4:3f:f9:7f:d3:d7:5f:
         f3:36:df:10:97:0e:95:92:f6:3c:44:e3:fa:a3:e4:f4:14:bf:
         fc:01:81:35:a4:7a:a0:1c:d9:cb:e4:df:7d:1a:24:cd:ff:41:
         ef:18:3d:b3:20:d8:5b:21:ac:cf:a1:a3:f4:60:9f:41:d4:70:
         ac:d1:31:ce:95:68:a3:e9:2e:8e:53:2d:57:2d:6f:84:26:ae:
         21:be:26:7b:b8:e8:7a:37:88:40:49:24:1f:14:a5:f1:d3:3d:
         94:95:a8:ff:6a:a3:f2:f8:c5:ad:7d:02:6d:ee:6b:a7:1f:3a:
         26:7d:6b:49:ce:01:4b:08:4d:0d:ee:bc:c9:7d:f9:50:25:7e:
         0e:d5:c0:f1:16:e8:f0:80:34:5f:a5:7b:a0:a4:2a:8b:ec:8a:
         28:13:b6:37:57:7b:3a:9f:76:a4:c3:73:89:3a:2d:6d:46:d2:
         3f:50:28:3f:56:37:e8:05:c3:9d:25:89:40:ab:b8:22:4b:06:
         90:c9:ec:59:ae:29:c4:4f:d9:0f:18:5c:16:8a:b7:d1:7d:dc:
         16:4c:b9:7c:28:97:31:09:26:57:a6:3b:5b:cf:03:22:dc:93:
         6f:09:66:f6:71:4c:75:1d:0f:a2:e4:3f:4e:14:be:b0:93:d9:
         98:02:60:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ67RqP+KvOI4/jt32L54P6AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZDRhZDk1ZjE3ZjM5NzIwN2EzZmMwZDE4NmYyOTEzZGYz
OGViOTMwHhcNMjYwNjEyMTAwMDI5WhcNMjYwNjEzMTAwMDI5WjAzMTEwLwYDVQQD
Eyg0ODRiMjFiODA3YTNjMWQzYTkzZjgxNmNiMjQ1MmNiOWI2ZGMxZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzIYMa0tyPOyrm1sOF2kUtGCfEDV
4YJWQ1UVBDE8KY4deXvEHXopX4BiJtadSA+2qoA04GFrboNvK/Ch6l0DaJdjnxbh
psCa6c6pRxuNiZiLN4RDSlH5yoQRc7VokUpLzSvhTXpQPQgSJ/MGtK9jqmN9o4S9
SZhBIjaUyuvJUah2GoORvg7IJeIJscCJrWgoL3v1YMEr3QEM9oXcV7/qM4jbNHAe
meFUYoyxla4h/ZqAexI2ja/Uv4yMbISI6PJBMVA+Ryq0pJmuoogn28b/jSJKS6oS
q65qfFs+qu1ik4W4R/j6KjxRiidSuTngBKK3bPp61gSGnAFQi5H072L44QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhLIbgHo8HTqT+BbLJFLLm23B2iMB8GA1UdIwQY
MBaAFAvUrZXxfzlyB6P8DRhvKRPfOOuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83NmQwODItYWMzMi00NzM4LTk5ZTYt
YjJmNjA4NjM2OGM3LzEvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83NmQwODItYWMzMi00NzM4LTk5ZTYtYjJmNjA4NjM2OGM3
LzEvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWdAwiI1
/uXbZIC0P/l/09df8zbfEJcOlZL2PETj+qPk9BS//AGBNaR6oBzZy+TffRokzf9B
7xg9syDYWyGsz6Gj9GCfQdRwrNExzpVoo+kujlMtVy1vhCauIb4me7joejeIQEkk
HxSl8dM9lJWo/2qj8vjFrX0Cbe5rpx86Jn1rSc4BSwhNDe68yX35UCV+DtXA8Rbo
8IA0X6V7oKQqi+yKKBO2N1d7Op92pMNziTotbUbSP1AoP1Y36AXDnSWJQKu4IksG
kMnsWa4pxE/ZDxhcFoq30X3cFky5fCiXMQkmV6Y7W88DItyTbwlm9nFMdR0PouQ/
ThS+sJPZmAJgsw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 13:52:07 2026 by rpki-client