Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
File:                     oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json)
Hash identifier:          QGRLZWemG+/lFYkGiZanLfXkNUH1OVXw4F52lx+G4P0=
Subject key identifier:   5B:55:09:B0:36:6F:6D:FA:46:73:06:98:8A:6E:4E:66:18:6C:A9:49
Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
Certificate issuer:       /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Certificate serial:       019EC2921CBEA804DEFB56EAAE5CE5B30066
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
Manifest number:          0992
Signing time:             Sat 13 Jun 2026 20:00:15 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:15 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:15 +0000
Files and hashes:         1: 1-dKs6JiGc-gWNM_u3hT68Z-M9-E.roa (hash: NUuaKTsuVI94pE+iA9XsbEXpRar3w3VZVCIsvU2Qp6M=)
                          2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: H8SESadCmVmP0j0R6//CaNKeq69ELrEX6p7aQ5+4Gmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:1c:be:a8:04:de:fb:56:ea:ae:5c:e5:b3:00:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
        Validity
            Not Before: Jun 13 20:00:15 2026 GMT
            Not After : Jun 14 20:00:15 2026 GMT
        Subject: CN=5b5509b0366f6dfa467306988a6e4e66186ca949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ef:cb:a0:1f:ae:ca:0a:e5:70:de:b9:0f:4f:
                    40:e1:a0:50:a2:17:05:3c:c4:52:96:87:24:31:d4:
                    94:2a:d7:c1:ed:fc:80:5b:43:34:d3:f1:d2:e9:a6:
                    56:5f:9a:59:a3:25:6c:b5:a2:be:ad:e4:2c:52:db:
                    b4:b6:1c:a8:ca:ab:e1:3b:11:54:49:21:1a:30:14:
                    61:cc:27:17:42:6b:e6:bd:cf:33:e5:56:1a:4d:ac:
                    22:57:4d:10:c3:49:f5:0e:e5:90:4d:29:3c:a1:27:
                    5e:81:2c:db:1e:b9:ae:63:99:2d:aa:bf:f8:e8:b3:
                    c5:95:bb:d3:10:2c:dd:7d:92:9b:cd:7a:73:f2:69:
                    d8:d1:27:c5:89:3d:7e:90:c5:cb:df:7c:5f:ca:24:
                    b0:81:c9:ac:4e:13:07:43:d0:4e:4b:ab:e7:14:e6:
                    4e:42:b4:db:b8:33:72:76:b9:fe:e6:6a:2f:9e:28:
                    64:dd:4f:6f:53:79:87:64:16:5b:71:df:7d:82:f0:
                    e2:e9:39:7a:b3:22:4c:6e:ee:dc:85:f3:1a:a2:9e:
                    ba:b0:49:81:9d:dd:a5:90:b0:d2:15:9d:ce:38:2a:
                    41:3a:cd:b9:bd:9c:ce:5b:f1:3f:b2:05:12:35:a8:
                    fb:6c:73:c1:7c:b5:16:91:30:b8:06:27:8b:98:50:
                    49:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:55:09:B0:36:6F:6D:FA:46:73:06:98:8A:6E:4E:66:18:6C:A9:49
            X509v3 Authority Key Identifier:
                keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:fc:9e:fd:b2:f5:35:cd:b2:da:e1:47:4d:7d:2e:e5:c6:3b:
         dc:d7:0f:5b:de:74:d9:8c:0e:1a:ad:15:27:19:cb:24:60:6c:
         6c:55:69:e9:e5:45:76:52:3b:45:88:23:1a:bc:06:2c:b7:5a:
         7e:56:be:e6:b3:ae:3f:a0:cc:01:a0:88:3a:83:fe:e9:89:95:
         83:19:28:82:43:58:4d:41:49:05:dc:d0:01:fe:3f:49:46:c1:
         56:ed:d4:25:d4:7f:7e:71:d1:f0:54:92:48:f4:cb:34:9a:93:
         69:df:b7:2b:a9:84:bf:50:71:7d:bc:f1:16:f2:12:fc:a8:98:
         b1:12:c5:15:ba:25:78:cb:b7:22:fe:2e:c1:72:f4:cb:4c:2b:
         8e:1d:db:7f:5e:a4:9f:88:92:d7:d5:b5:14:2e:82:bd:cd:c5:
         6e:ec:d8:5d:56:5e:b0:a1:d0:40:7e:5e:38:a8:ca:61:b7:ee:
         5b:7e:fa:1a:62:4f:f1:1f:46:f5:6f:da:a6:08:9a:44:a7:47:
         d4:04:dc:d9:22:26:b0:59:28:0c:cc:63:0e:b5:34:9f:dc:e0:
         8a:8b:a2:45:6e:29:1e:33:81:52:5a:f7:55:0a:b4:8e:18:20:
         4b:ab:dc:d0:f9:ba:0d:42:af:b4:75:c4:11:9e:2c:15:1a:a8:
         e4:31:58:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Ckhy+qATe+1bqrlzlswBmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwY2VmMWNhYTM0NTliOGIwMzljMjE3ODEzNjQ4ZGNhYmNl
OGMyZDMwHhcNMjYwNjEzMjAwMDE1WhcNMjYwNjE0MjAwMDE1WjAzMTEwLwYDVQQD
Eyg1YjU1MDliMDM2NmY2ZGZhNDY3MzA2OTg4YTZlNGU2NjE4NmNhOTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+/LoB+uygrlcN65D09A4aBQohcF
PMRSlockMdSUKtfB7fyAW0M00/HS6aZWX5pZoyVstaK+reQsUtu0thyoyqvhOxFU
SSEaMBRhzCcXQmvmvc8z5VYaTawiV00Qw0n1DuWQTSk8oSdegSzbHrmuY5ktqr/4
6LPFlbvTECzdfZKbzXpz8mnY0SfFiT1+kMXL33xfyiSwgcmsThMHQ9BOS6vnFOZO
QrTbuDNydrn+5movnihk3U9vU3mHZBZbcd99gvDi6Tl6syJMbu7chfMaop66sEmB
nd2lkLDSFZ3OOCpBOs25vZzOW/E/sgUSNaj7bHPBfLUWkTC4BieLmFBJeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtVCbA2b236RnMGmIpuTmYYbKlJMB8GA1UdIwQY
MBaAFKDO8cqjRZuLA5wheBNkjcq86MLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84NThlZDgtNzMxYS00NzYxLTgyYzAt
NmIwMTc5ZWUxZGQ5LzEvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84NThlZDgtNzMxYS00NzYxLTgyYzAtNmIwMTc5ZWUxZGQ5
LzEvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwfye/bL1
Nc2y2uFHTX0u5cY73NcPW9502YwOGq0VJxnLJGBsbFVp6eVFdlI7RYgjGrwGLLda
fla+5rOuP6DMAaCIOoP+6YmVgxkogkNYTUFJBdzQAf4/SUbBVu3UJdR/fnHR8FSS
SPTLNJqTad+3K6mEv1BxfbzxFvIS/KiYsRLFFboleMu3Iv4uwXL0y0wrjh3bf16k
n4iS19W1FC6Cvc3FbuzYXVZesKHQQH5eOKjKYbfuW376GmJP8R9G9W/apgiaRKdH
1ATc2SImsFkoDMxjDrU0n9zgiouiRW4pHjOBUlr3VQq0jhggS6vc0Pm6DUKvtHXE
EZ4sFRqo5DFYqw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:21:35 2026 by rpki-client