Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
File:                     O47zaZ48ewDP9VFOVME2EqO8CBA.mft (raw, json)
Hash identifier:          CJE75R/ce4GbMJnBsMMlC9XWLqrZpDf6Mfh1vSZWECw=
Subject key identifier:   CC:73:28:3E:0A:77:47:8A:A6:25:BE:D3:7C:FC:2A:1B:C1:62:21:99
Authority key identifier: 3B:8E:F3:69:9E:3C:7B:00:CF:F5:51:4E:54:C1:36:12:A3:BC:08:10
Certificate issuer:       /CN=3b8ef3699e3c7b00cff5514e54c13612a3bc0810
Certificate serial:       019ED42B5C937DF44120F7A55425D5A76F3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
Manifest number:          012C
Signing time:             Wed 17 Jun 2026 06:01:11 +0000
Manifest this update:     Wed 17 Jun 2026 06:01:11 +0000
Manifest next update:     Thu 18 Jun 2026 06:01:11 +0000
Files and hashes:         1: O47zaZ48ewDP9VFOVME2EqO8CBA.crl (hash: iOTRVIJvYA1drUzOiTiENn5csJiy2Aeksi1lq0balXY=)
                          2: sLLadZHcLuLxJyRCEcg6ugP5rdc.roa (hash: z14c08hX3kPcGJfG3drJX75MFVvqokGJtQr08nJp+rA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:2b:5c:93:7d:f4:41:20:f7:a5:54:25:d5:a7:6f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b8ef3699e3c7b00cff5514e54c13612a3bc0810
        Validity
            Not Before: Jun 17 06:01:11 2026 GMT
            Not After : Jun 18 06:01:11 2026 GMT
        Subject: CN=cc73283e0a77478aa625bed37cfc2a1bc1622199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:ce:97:ca:3f:76:6e:12:62:0c:32:ff:6c:
                    db:38:7c:46:68:ce:5f:a5:15:ff:0f:18:95:fb:b1:
                    bd:c6:f6:fb:ff:ce:fc:16:d8:e9:be:6d:5c:b8:4a:
                    e8:89:32:e3:94:bf:b5:29:64:e7:6c:bc:a6:b0:77:
                    47:c0:8f:e2:77:c7:2a:c8:f0:3c:94:fd:42:41:2c:
                    90:71:05:10:8c:fa:f2:12:8e:07:d6:f3:a7:ca:97:
                    5f:72:e6:07:69:1a:56:69:5a:d2:f2:bd:23:bc:4d:
                    e2:a2:23:f4:fb:fa:65:59:98:61:b9:ba:e3:d8:b3:
                    1d:69:5e:c2:c1:65:e2:68:e1:60:da:36:2b:80:94:
                    97:b1:36:74:eb:91:74:00:08:84:f7:c8:40:89:69:
                    30:01:1a:68:dc:e7:4b:a8:26:d4:89:3d:cc:4c:ea:
                    3a:c5:37:f2:c8:18:f3:d0:4b:54:89:54:8a:6c:96:
                    e1:6b:06:c4:fe:17:d2:08:c8:e9:7b:c2:57:c7:bf:
                    38:4e:a0:35:13:6d:f4:41:5d:7c:38:bc:2c:2c:44:
                    d6:09:f4:0b:d1:d1:3f:39:fa:13:a0:8c:69:bb:81:
                    11:19:d3:c3:e8:aa:af:a3:ea:eb:25:b9:bb:00:bd:
                    a3:44:d1:5a:91:35:37:d9:e7:e8:2c:1f:c6:7a:52:
                    a4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:73:28:3E:0A:77:47:8A:A6:25:BE:D3:7C:FC:2A:1B:C1:62:21:99
            X509v3 Authority Key Identifier:
                keyid:3B:8E:F3:69:9E:3C:7B:00:CF:F5:51:4E:54:C1:36:12:A3:BC:08:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:2c:06:77:30:ef:01:30:2d:d8:6d:88:85:74:15:98:e6:df:
         9f:41:1b:5f:11:32:46:4c:e1:28:bc:4b:2c:08:e1:d0:94:1b:
         d7:2c:4d:ad:f6:53:0a:a7:df:a9:3d:a7:bc:d9:b1:3f:8c:54:
         01:32:ac:c2:37:32:91:7d:1e:d4:93:fa:8d:d3:b8:53:1d:b6:
         4d:9d:54:50:d3:78:42:47:65:a0:63:eb:9d:72:ff:ad:bd:8a:
         7f:b4:15:23:83:67:51:fa:f3:4e:60:bc:4e:9a:16:fe:b9:4d:
         34:58:b7:b4:a5:de:19:9a:f4:a9:f1:d1:07:fe:7f:80:b1:a3:
         1f:2e:ce:ef:ac:17:ce:6a:b9:7f:25:c4:db:90:43:46:f2:2a:
         e3:a5:23:0b:a9:ab:f0:e0:a0:49:4a:7b:69:40:dc:fc:97:64:
         a2:80:57:8e:23:9d:e3:7e:0f:30:07:e0:9d:e1:79:80:52:49:
         de:9c:02:0e:6c:b3:09:fd:c8:71:02:28:38:6b:80:d0:45:78:
         b0:a7:c1:43:94:c1:b7:0a:0e:08:70:45:cc:f5:52:52:e4:1d:
         a0:fb:0c:83:77:30:42:56:70:f5:69:dd:13:ce:39:b2:19:b6:
         bc:c2:5d:de:96:06:fa:c0:dd:7a:cb:41:08:c0:ca:95:5d:20:
         44:bf:c7:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UK1yTffRBIPelVCXVp289MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOGVmMzY5OWUzYzdiMDBjZmY1NTE0ZTU0YzEzNjEyYTNi
YzA4MTAwHhcNMjYwNjE3MDYwMTExWhcNMjYwNjE4MDYwMTExWjAzMTEwLwYDVQQD
EyhjYzczMjgzZTBhNzc0NzhhYTYyNWJlZDM3Y2ZjMmExYmMxNjIyMTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7vOl8o/dm4SYgwy/2zbOHxGaM5f
pRX/DxiV+7G9xvb7/878Ftjpvm1cuEroiTLjlL+1KWTnbLymsHdHwI/id8cqyPA8
lP1CQSyQcQUQjPryEo4H1vOnypdfcuYHaRpWaVrS8r0jvE3ioiP0+/plWZhhubrj
2LMdaV7CwWXiaOFg2jYrgJSXsTZ065F0AAiE98hAiWkwARpo3OdLqCbUiT3MTOo6
xTfyyBjz0EtUiVSKbJbhawbE/hfSCMjpe8JXx784TqA1E230QV18OLwsLETWCfQL
0dE/OfoToIxpu4ERGdPD6Kqvo+rrJbm7AL2jRNFakTU32efoLB/GelKk3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxzKD4Kd0eKpiW+03z8KhvBYiGZMB8GA1UdIwQY
MBaAFDuO82mePHsAz/VRTlTBNhKjvAgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzQ3emFaNDhld0RQOVZGT1ZNRTJFcU84Q0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83MTAyMzktMzE3Ny00NjNhLTg5ODUt
YjIxZGE2ZDAxMjhlLzEvTzQ3emFaNDhld0RQOVZGT1ZNRTJFcU84Q0JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi83MTAyMzktMzE3Ny00NjNhLTg5ODUtYjIxZGE2ZDAxMjhl
LzEvTzQ3emFaNDhld0RQOVZGT1ZNRTJFcU84Q0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAriwGdzDv
ATAt2G2IhXQVmObfn0EbXxEyRkzhKLxLLAjh0JQb1yxNrfZTCqffqT2nvNmxP4xU
ATKswjcykX0e1JP6jdO4Ux22TZ1UUNN4QkdloGPrnXL/rb2Kf7QVI4NnUfrzTmC8
TpoW/rlNNFi3tKXeGZr0qfHRB/5/gLGjHy7O76wXzmq5fyXE25BDRvIq46UjC6mr
8OCgSUp7aUDc/JdkooBXjiOd434PMAfgneF5gFJJ3pwCDmyzCf3IcQIoOGuA0EV4
sKfBQ5TBtwoOCHBFzPVSUuQdoPsMg3cwQlZw9WndE845shm2vMJd3pYG+sDdestB
CMDKlV0gRL/HjA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 16:51:08 2026 by rpki-client