Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
File:                     osiREA5QD7XGTzDxYD_lRdq0kBY.mft (raw, json)
Hash identifier:          U+nWKsQXyER/FLDv4XV1PVhj4C1cFOXrn0jwZuWJAFM=
Subject key identifier:   59:61:5B:8A:2A:3C:B0:C9:A2:28:89:12:B5:2C:6A:9E:B7:9F:68:46
Authority key identifier: A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
Certificate issuer:       /CN=a2c891100e500fb5c64f30f1603fe545dab49016
Certificate serial:       019EC4130EE5BCC6C87A3BB7ADABE7B71AEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
Manifest number:          0D4E
Signing time:             Sun 14 Jun 2026 03:00:43 +0000
Manifest this update:     Sun 14 Jun 2026 03:00:43 +0000
Manifest next update:     Mon 15 Jun 2026 03:00:43 +0000
Files and hashes:         1: LrvP2Z0cjFRqmLYiApVT3jJ98UU.roa (hash: 5YQBrYuaiVtBkE+i+x1V3fP75u5I8cFtQ+HuRNndJN4=)
                          2: osiREA5QD7XGTzDxYD_lRdq0kBY.crl (hash: hmYyi+BdHM5WXBenYyD5/tRL3BxxTOPn9CutKtnkGWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:13:0e:e5:bc:c6:c8:7a:3b:b7:ad:ab:e7:b7:1a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2c891100e500fb5c64f30f1603fe545dab49016
        Validity
            Not Before: Jun 14 03:00:43 2026 GMT
            Not After : Jun 15 03:00:43 2026 GMT
        Subject: CN=59615b8a2a3cb0c9a2288912b52c6a9eb79f6846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ea:e4:db:23:58:b1:8e:3d:00:33:6a:d6:12:
                    2e:9e:d6:6a:40:ab:ae:95:f4:2f:d2:ba:7b:81:49:
                    a5:72:c0:5f:f4:a2:dd:c4:11:f1:bb:bb:ae:f0:cd:
                    70:5a:53:13:6b:88:41:98:88:fa:9d:d4:ed:a0:27:
                    36:65:5d:fb:39:65:fc:9c:f8:7f:64:91:2f:a5:ad:
                    81:cd:23:00:e0:cf:29:67:85:76:c5:c0:f9:da:ce:
                    cd:c5:d7:1d:6a:ef:04:2c:c2:4a:d8:e1:2a:02:2a:
                    77:8b:d4:c0:20:f6:c6:e7:15:93:a1:6e:b3:53:8a:
                    26:92:f0:f8:29:fe:f8:dc:a3:60:92:05:af:a2:5f:
                    93:93:b0:3f:5b:9b:58:a9:50:a9:8b:7e:4e:cc:f5:
                    6e:61:c0:b9:55:03:9a:ec:ac:4e:c4:1c:69:f9:9f:
                    77:17:76:58:21:9b:a3:70:ad:bb:72:24:2e:cb:13:
                    21:94:8d:65:69:f1:24:76:25:0f:79:7d:55:80:30:
                    cb:ba:1f:e5:bb:b3:f3:d7:42:3f:ba:1f:c4:3a:cd:
                    e1:02:fb:5f:bc:69:e4:8f:4d:bb:b8:a1:51:11:2f:
                    35:23:bd:61:57:7c:6b:d8:a5:80:27:d8:a3:66:a9:
                    38:24:cf:62:4d:b4:76:12:0f:65:ee:71:5d:c2:0d:
                    fa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:61:5B:8A:2A:3C:B0:C9:A2:28:89:12:B5:2C:6A:9E:B7:9F:68:46
            X509v3 Authority Key Identifier:
                keyid:A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a2:37:4a:19:4c:67:38:5e:4e:34:1b:c3:6f:50:a4:60:94:
         22:5b:01:e9:61:92:eb:1d:2c:2e:65:be:80:79:5f:cd:a3:3a:
         e5:5f:ee:f3:97:f6:3d:2a:9c:77:82:db:1c:2c:7b:8c:cd:c3:
         40:aa:5c:84:90:51:c8:3a:13:c4:f1:95:c0:b1:51:fe:15:2d:
         dd:19:df:52:be:18:94:20:7f:90:91:bc:53:0a:65:91:f7:12:
         11:d3:a0:b5:26:42:64:d5:6f:34:c8:24:2d:2f:04:0f:f5:d9:
         97:58:6e:95:6b:d8:f3:fb:6e:09:1f:5f:ee:0b:ff:3c:3e:cb:
         f3:6b:72:12:78:43:dd:48:8f:d2:e0:cb:9c:59:36:96:b3:7f:
         96:e4:56:27:59:21:c5:d2:b3:dc:87:1d:53:bd:31:be:79:fc:
         9b:70:fd:3a:44:41:7e:7c:1e:a2:11:13:8e:e9:3f:79:34:ac:
         8a:52:bd:33:99:f4:02:f7:85:8d:6f:60:1e:8d:ed:08:91:0b:
         4f:05:7a:bb:13:92:e8:bf:81:20:41:1d:0f:35:01:89:2b:65:
         c6:c0:30:13:5a:d2:9d:b2:4d:e9:e4:e0:15:9e:50:08:a3:18:
         88:b2:21:49:87:d4:fc:aa:26:96:ca:7d:d1:58:fa:a9:63:0e:
         36:6a:5c:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7EEw7lvMbIeju3ravntxrvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYzg5MTEwMGU1MDBmYjVjNjRmMzBmMTYwM2ZlNTQ1ZGFi
NDkwMTYwHhcNMjYwNjE0MDMwMDQzWhcNMjYwNjE1MDMwMDQzWjAzMTEwLwYDVQQD
Eyg1OTYxNWI4YTJhM2NiMGM5YTIyODg5MTJiNTJjNmE5ZWI3OWY2ODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ork2yNYsY49ADNq1hIuntZqQKuu
lfQv0rp7gUmlcsBf9KLdxBHxu7uu8M1wWlMTa4hBmIj6ndTtoCc2ZV37OWX8nPh/
ZJEvpa2BzSMA4M8pZ4V2xcD52s7Nxdcdau8ELMJK2OEqAip3i9TAIPbG5xWToW6z
U4omkvD4Kf743KNgkgWvol+Tk7A/W5tYqVCpi35OzPVuYcC5VQOa7KxOxBxp+Z93
F3ZYIZujcK27ciQuyxMhlI1lafEkdiUPeX1VgDDLuh/lu7Pz10I/uh/EOs3hAvtf
vGnkj027uKFRES81I71hV3xr2KWAJ9ijZqk4JM9iTbR2Eg9l7nFdwg36DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlhW4oqPLDJoiiJErUsap63n2hGMB8GA1UdIwQY
MBaAFKLIkRAOUA+1xk8w8WA/5UXatJAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3NpUkVBNVFEN1hHVHpEeFlEX2xSZHEwa0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yOGI1NmMtNmFhYy00OGQ3LWFiYTIt
OGNhMGM5MGY1NzdlLzEvb3NpUkVBNVFEN1hHVHpEeFlEX2xSZHEwa0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yOGI1NmMtNmFhYy00OGQ3LWFiYTItOGNhMGM5MGY1Nzdl
LzEvb3NpUkVBNVFEN1hHVHpEeFlEX2xSZHEwa0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcaI3ShlM
ZzheTjQbw29QpGCUIlsB6WGS6x0sLmW+gHlfzaM65V/u85f2PSqcd4LbHCx7jM3D
QKpchJBRyDoTxPGVwLFR/hUt3RnfUr4YlCB/kJG8UwplkfcSEdOgtSZCZNVvNMgk
LS8ED/XZl1hulWvY8/tuCR9f7gv/PD7L82tyEnhD3UiP0uDLnFk2lrN/luRWJ1kh
xdKz3IcdU70xvnn8m3D9OkRBfnweohETjuk/eTSsilK9M5n0AveFjW9gHo3tCJEL
TwV6uxOS6L+BIEEdDzUBiStlxsAwE1rSnbJN6eTgFZ5QCKMYiLIhSYfU/Komlsp9
0Vj6qWMONmpc5g==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:10:25 2026 by rpki-client