Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
File:                     OjSIklHnyxM-kGxwiRuhoEle2GA.mft (raw, json)
Hash identifier:          UL+tlRzO8v9BgOyPljNdkd1fV9HeuRMvKQ5Bd4CDD7M=
Subject key identifier:   8D:1E:B4:28:53:57:F8:D2:DE:7C:8F:25:5B:62:3B:50:EB:6F:3B:F5
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Certificate issuer:       /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial:       019EBDD9E965D6D1A218E5634B9ECF5BC9A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
Manifest number:          10F5
Signing time:             Fri 12 Jun 2026 22:00:35 +0000
Manifest this update:     Fri 12 Jun 2026 22:00:35 +0000
Manifest next update:     Sat 13 Jun 2026 22:00:35 +0000
Files and hashes:         1: OjSIklHnyxM-kGxwiRuhoEle2GA.crl (hash: pVO5NP1KOcna45H3Lyk96ASbyfD/zAUxLDhvF3OSg/U=)
                          2: TEmzgEgKyQo96Gqk3OCXyu8JaO8.roa (hash: w2y72ko+lJjiVlRbZd4qD2G3W4qa+BLqf6Sn4G+/dow=)
                          3: XWcYfudW_fCjYcND3H407xe959o.roa (hash: hWyo7JRjc5zRnP54qNBVfiEpztNdLDDxrtX9abLg7Ps=)
                          4: ge5kxbikwrvAEUuIO3lNRkFxLmw.roa (hash: eEJ79T/++oL5XPtUGIItjARG2jFvNlWqvTqYFtL6EkY=)
                          5: rTgC7PLBMFHhdpl3fBHWaPGZP_Y.roa (hash: ng9lqabxlxHQ1G6hpIjPJfi43vHsrt3ed7Cyb0T70ss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:d9:e9:65:d6:d1:a2:18:e5:63:4b:9e:cf:5b:c9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
        Validity
            Not Before: Jun 12 22:00:35 2026 GMT
            Not After : Jun 13 22:00:35 2026 GMT
        Subject: CN=8d1eb4285357f8d2de7c8f255b623b50eb6f3bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:14:4e:e4:a6:94:70:11:15:b7:f6:59:47:d9:
                    94:4a:38:3b:3b:32:4f:70:42:f8:eb:48:8d:65:51:
                    e3:06:c1:de:34:f1:8f:49:d0:65:4b:0d:e2:86:f7:
                    22:05:19:c9:76:6e:6a:b5:4b:d2:5b:e3:6b:7d:24:
                    cd:52:f0:7f:6a:f8:b1:20:a9:ce:e5:ec:5a:b0:3e:
                    67:f6:70:aa:6f:af:be:45:b9:19:dc:f1:77:aa:63:
                    65:b9:d1:cb:d1:c0:0f:51:f1:f1:7d:e8:97:3b:fa:
                    51:fe:07:ab:0a:3f:3a:d3:88:3f:02:de:f3:61:cd:
                    7f:4c:25:4e:49:0f:f2:76:db:75:f1:ed:d0:b8:60:
                    87:e7:19:7e:53:1a:4e:22:12:a4:88:97:62:e9:fc:
                    6a:d3:eb:24:02:91:ec:36:5b:1f:52:09:10:86:48:
                    62:64:f5:ab:22:e4:c6:51:7c:e2:2c:77:a3:24:0d:
                    fb:fa:36:77:66:fa:e2:80:73:64:2a:c5:be:b6:73:
                    55:32:a3:44:bf:3c:de:47:f9:f4:98:fe:a4:12:22:
                    45:ba:09:8c:a7:72:ba:c8:19:f7:26:15:df:9c:bb:
                    37:04:8d:46:49:0d:9a:5f:dc:ac:e8:25:a7:5d:dc:
                    63:38:d9:7a:2d:a1:7e:f0:40:c5:75:90:87:e2:e8:
                    27:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1E:B4:28:53:57:F8:D2:DE:7C:8F:25:5B:62:3B:50:EB:6F:3B:F5
            X509v3 Authority Key Identifier:
                keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ab:38:95:dc:6f:ee:d4:b6:af:49:c7:a3:b4:ce:68:32:7e:
         12:66:aa:ac:dc:21:d8:3b:7c:0e:21:9b:00:1c:a7:53:ee:78:
         25:d5:f5:3e:ad:bb:2f:22:11:a7:87:9c:dc:83:08:3f:77:c7:
         94:e2:ed:29:65:31:29:0d:02:95:9f:f8:e1:03:6f:7c:e9:b9:
         13:50:55:05:cf:97:92:11:d4:ac:87:b3:60:7a:f9:d8:2b:9b:
         cd:58:11:ef:5b:b9:7a:68:9d:29:1c:ca:3f:62:d1:85:23:8d:
         e2:cd:d5:eb:10:f8:a0:47:7f:68:c4:03:58:d3:9a:79:98:db:
         ef:93:a1:80:43:21:b7:22:23:43:7c:c4:7d:15:c4:60:57:60:
         47:55:10:0f:34:3d:68:46:59:f6:e0:ba:01:48:de:00:cf:53:
         0c:8d:a4:05:45:6e:6d:4e:97:dd:1f:c5:0b:08:71:99:82:b1:
         92:af:0c:3c:4f:4f:f5:68:81:b4:e1:81:0f:fe:dc:c5:73:a4:
         65:f0:c6:5e:da:0f:f3:d8:95:0c:13:f0:08:f8:5f:d8:b2:84:
         ad:e9:4e:c3:2c:01:fe:dd:0c:2d:bf:be:0a:4b:9b:ee:b2:46:
         fb:ea:32:89:ef:76:aa:4d:99:38:a9:a4:69:14:b4:3c:1c:5f:
         1e:64:e5:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ692ell1tGiGOVjS57PW8mmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMzQ4ODkyNTFlN2NiMTMzZTkwNmM3MDg5MWJhMWEwNDk1
ZWQ4NjAwHhcNMjYwNjEyMjIwMDM1WhcNMjYwNjEzMjIwMDM1WjAzMTEwLwYDVQQD
Eyg4ZDFlYjQyODUzNTdmOGQyZGU3YzhmMjU1YjYyM2I1MGViNmYzYmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxRO5KaUcBEVt/ZZR9mUSjg7OzJP
cEL460iNZVHjBsHeNPGPSdBlSw3ihvciBRnJdm5qtUvSW+NrfSTNUvB/avixIKnO
5exasD5n9nCqb6++RbkZ3PF3qmNludHL0cAPUfHxfeiXO/pR/gerCj8604g/At7z
Yc1/TCVOSQ/ydtt18e3QuGCH5xl+UxpOIhKkiJdi6fxq0+skApHsNlsfUgkQhkhi
ZPWrIuTGUXziLHejJA37+jZ3ZvrigHNkKsW+tnNVMqNEvzzeR/n0mP6kEiJFugmM
p3K6yBn3JhXfnLs3BI1GSQ2aX9ys6CWnXdxjONl6LaF+8EDFdZCH4ugn2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0etChTV/jS3nyPJVtiO1Drbzv1MB8GA1UdIwQY
MBaAFDo0iJJR58sTPpBscIkboaBJXthgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMt
ODRmOWVkODdhYzMxLzEvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMtODRmOWVkODdhYzMx
LzEvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6s4ldxv
7tS2r0nHo7TOaDJ+EmaqrNwh2Dt8DiGbABynU+54JdX1Pq27LyIRp4ec3IMIP3fH
lOLtKWUxKQ0ClZ/44QNvfOm5E1BVBc+XkhHUrIezYHr52CubzVgR71u5emidKRzK
P2LRhSON4s3V6xD4oEd/aMQDWNOaeZjb75OhgEMhtyIjQ3zEfRXEYFdgR1UQDzQ9
aEZZ9uC6AUjeAM9TDI2kBUVubU6X3R/FCwhxmYKxkq8MPE9P9WiBtOGBD/7cxXOk
ZfDGXtoP89iVDBPwCPhf2LKErelOwywB/t0MLb++Ckub7rJG++oyie92qk2ZOKmk
aRS0PBxfHmTl7w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:37:44 2026 by rpki-client