Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
File:                     oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json)
Hash identifier:          JY9nbth4vXPMK363JAdQEnQx4xSYOI7w39iFETmocfw=
Subject key identifier:   4B:92:46:42:B1:96:77:AB:A3:F0:AF:60:0D:6A:20:57:AC:EE:CB:21
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Certificate issuer:       /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial:       019EC2CA2828CE0E5921F8F624D44037FE8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
Manifest number:          08FA
Signing time:             Sat 13 Jun 2026 21:01:28 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:28 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:28 +0000
Files and hashes:         1: 3_ICGJ04_o-B78xtxe-BL1771oM.roa (hash: ISb9BZPlnND5DSOlgTsgHag+YAm+Sabx40NlDe58dfY=)
                          2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: 1ODQzoM+b5fiC9Uwd6+/8Agl8SzL0rmFeeAeAUYFQD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:ca:28:28:ce:0e:59:21:f8:f6:24:d4:40:37:fe:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
        Validity
            Not Before: Jun 13 21:01:28 2026 GMT
            Not After : Jun 14 21:01:28 2026 GMT
        Subject: CN=4b924642b19677aba3f0af600d6a2057aceecb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:4a:b6:98:46:05:c5:fe:1c:50:f7:e4:ba:
                    e3:af:d0:61:fa:28:27:3c:68:82:23:eb:a0:c8:1b:
                    06:d4:b0:a1:cc:ce:70:51:27:f9:05:64:22:11:17:
                    d6:fc:75:aa:21:1b:ed:e5:61:04:8d:93:70:fe:e3:
                    75:68:e9:2c:19:de:7b:27:94:7a:07:5d:28:fb:89:
                    85:34:5f:52:f4:3d:0e:d4:b1:42:9a:c5:af:25:ae:
                    1c:9a:2b:73:5c:1e:1e:75:8f:bb:dc:b1:97:f5:bb:
                    1e:2d:ae:31:17:94:a6:8d:90:3b:8b:9a:2c:3b:d7:
                    f2:41:c6:96:dd:68:92:2e:cb:23:c2:4f:e4:62:96:
                    6d:c8:ab:f0:81:5c:75:36:d2:22:57:59:09:a2:97:
                    10:30:be:3b:0f:58:57:a1:45:35:78:ea:53:8c:f2:
                    00:ef:30:07:86:70:b6:ce:38:b5:c8:09:55:6f:4d:
                    97:b9:da:5b:9a:35:df:d8:5e:04:3e:43:a8:cc:d2:
                    5e:63:96:ef:c6:8d:ac:a3:b7:29:71:f0:9d:78:40:
                    84:18:8b:f6:30:eb:10:3a:d6:c7:bd:69:9c:8f:58:
                    7e:c7:d8:18:42:ed:9d:85:86:23:ee:22:6c:f5:44:
                    ce:2c:68:23:b4:b5:3d:67:b5:61:8d:dc:df:a8:6f:
                    65:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:92:46:42:B1:96:77:AB:A3:F0:AF:60:0D:6A:20:57:AC:EE:CB:21
            X509v3 Authority Key Identifier:
                keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:78:55:21:e2:78:0e:be:42:39:32:45:51:f1:c2:9f:e3:e3:
         0c:fe:78:71:01:a2:8c:94:1b:e0:f2:6a:13:11:3e:21:76:8a:
         8b:a2:84:22:75:0f:65:58:bd:8e:eb:94:52:a1:c4:d5:ba:3b:
         0d:0c:5f:d9:c3:3a:0f:13:1c:94:c3:95:cf:a1:2e:7a:b3:41:
         6a:b1:31:f0:82:3e:df:9b:88:30:b9:e2:51:09:f4:97:2c:fb:
         44:65:e2:f7:fd:ad:f8:31:bd:10:6a:ca:56:99:7d:8f:6f:cd:
         aa:b7:0d:7e:36:b0:d1:35:13:f2:08:c3:dc:8f:68:ec:5b:6e:
         ef:8e:84:85:a4:68:51:e9:5e:9d:fc:9f:26:c2:ee:43:3d:30:
         38:07:f3:07:cb:01:6b:21:0e:ab:70:9d:b9:32:4f:10:0c:b3:
         f4:72:9d:ac:ce:21:60:f1:27:87:b1:90:89:24:b1:09:51:9a:
         82:61:ec:ea:5f:8c:b3:c2:ce:d4:60:0d:fc:8f:95:2c:a0:64:
         2d:e7:0d:4a:ca:76:d2:97:af:6f:57:a2:12:b6:1a:df:24:42:
         98:85:63:bb:84:a7:b6:62:9c:80:05:5e:3b:6b:9b:d4:21:d8:
         8c:a1:03:86:f6:c4:35:02:8b:5e:07:aa:6a:ee:7f:42:58:69:
         d6:80:5a:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Cyigozg5ZIfj2JNRAN/6MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNWIxOTYzODYxMWYzZTFmNzY0NGE3ZTNiYjcxZDBjYTM3
NDkxOWUwHhcNMjYwNjEzMjEwMTI4WhcNMjYwNjE0MjEwMTI4WjAzMTEwLwYDVQQD
Eyg0YjkyNDY0MmIxOTY3N2FiYTNmMGFmNjAwZDZhMjA1N2FjZWVjYjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCpKtphGBcX+HFD35Lrjr9Bh+ign
PGiCI+ugyBsG1LChzM5wUSf5BWQiERfW/HWqIRvt5WEEjZNw/uN1aOksGd57J5R6
B10o+4mFNF9S9D0O1LFCmsWvJa4cmitzXB4edY+73LGX9bseLa4xF5SmjZA7i5os
O9fyQcaW3WiSLssjwk/kYpZtyKvwgVx1NtIiV1kJopcQML47D1hXoUU1eOpTjPIA
7zAHhnC2zji1yAlVb02XudpbmjXf2F4EPkOozNJeY5bvxo2so7cpcfCdeECEGIv2
MOsQOtbHvWmcj1h+x9gYQu2dhYYj7iJs9UTOLGgjtLU9Z7VhjdzfqG9lxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuSRkKxlnero/CvYA1qIFes7sshMB8GA1UdIwQY
MBaAFKFbGWOGEfPh92RKfju3HQyjdJGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYt
MTI1MTg0MjlmYTYzLzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYtMTI1MTg0MjlmYTYz
LzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3hVIeJ4
Dr5COTJFUfHCn+PjDP54cQGijJQb4PJqExE+IXaKi6KEInUPZVi9juuUUqHE1bo7
DQxf2cM6DxMclMOVz6EuerNBarEx8II+35uIMLniUQn0lyz7RGXi9/2t+DG9EGrK
Vpl9j2/NqrcNfjaw0TUT8gjD3I9o7Ftu746EhaRoUelenfyfJsLuQz0wOAfzB8sB
ayEOq3CduTJPEAyz9HKdrM4hYPEnh7GQiSSxCVGagmHs6l+Ms8LO1GAN/I+VLKBk
LecNSsp20pevb1eiErYa3yRCmIVju4SntmKcgAVeO2ub1CHYjKEDhvbENQKLXgeq
au5/Qlhp1oBanA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:45:13 2026 by rpki-client