Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
File:                     xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json)
Hash identifier:          Vgk7s7EIJWSnoHfE6Nrau6bDmy+qSPDpoXIXu+hcwlE=
Subject key identifier:   98:CF:6C:E4:16:68:A9:A8:7F:53:DD:BC:D2:31:6D:1C:E4:AB:CC:4F
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Certificate issuer:       /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial:       019EBF5A1A0BEE4837E67F5091DBC4FCABF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
Manifest number:          12A2
Signing time:             Sat 13 Jun 2026 05:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:13 +0000
Files and hashes:         1: 127V_jpRHP2qe1Oxj4NCvLXq2AA.roa (hash: JgwxLbzHN3eoerC5l1XJTzKuRT9IzvEH3qQbGmvVj/U=)
                          2: ATFqvKQfCzg1eIhHj9ilysnZYnE.roa (hash: 9xWvqqO+irmFSgWZgkDiVyOSk6AqF02qWQdfh9GrCc8=)
                          3: NIt5HAEHP3eGIkRaRfmU_TQEUio.roa (hash: kNqtp8gVzKVPwqTczsFvU1xgIi6B9Z0PZaQgvs2xN6o=)
                          4: _lfdoiLagSclQFLhRG9TZSert0s.roa (hash: BzO/SBnCrjXko5DW8YSZkFc4F4C9Udpc0JMuFJcr16U=)
                          5: gtTwRDBJR-BbMiRZiF0UkREdrNI.roa (hash: EYI6Dc616oG3PdcronQ8IrDd6TturvsbVQq4J3V4p+w=)
                          6: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: /NBGOdWm+y5njGCnEa0bPdniu3uMoif3uJIIVkgfWMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:1a:0b:ee:48:37:e6:7f:50:91:db:c4:fc:ab:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
        Validity
            Not Before: Jun 13 05:00:13 2026 GMT
            Not After : Jun 14 05:00:13 2026 GMT
        Subject: CN=98cf6ce41668a9a87f53ddbcd2316d1ce4abcc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c2:18:0c:79:61:35:34:a3:8d:75:db:39:06:
                    ec:9b:e2:a3:12:e7:34:2e:06:21:00:8a:f5:03:2e:
                    e3:85:0e:36:a1:20:1f:fd:86:31:eb:8d:6c:07:13:
                    39:fb:21:04:9f:54:3b:8f:37:c0:6a:d4:11:6a:63:
                    af:3a:54:d1:60:27:c8:e8:e5:95:44:bb:80:e1:71:
                    b5:a4:ca:39:7a:7d:df:7b:99:a2:14:82:32:de:cd:
                    39:aa:42:db:dd:00:64:27:fc:7c:21:73:ad:85:e1:
                    9e:a5:d1:cd:78:34:7c:0a:4c:65:d9:0b:db:be:91:
                    95:91:38:ca:f3:c5:bd:73:10:f7:4a:3a:ac:34:98:
                    ba:55:93:10:84:05:a4:75:0f:25:c7:8e:30:7b:99:
                    c0:ee:1b:5a:23:dc:fc:84:27:c9:31:9e:8e:16:3e:
                    c6:1f:b7:84:64:7d:35:eb:b5:72:69:1e:a1:72:88:
                    b3:07:da:bc:c8:f4:34:e8:36:b5:d7:ab:15:c1:a4:
                    f9:c4:94:ac:3e:1b:1a:e2:4e:16:57:b2:7a:12:e4:
                    12:4c:34:60:be:06:d7:74:ca:9f:5f:7e:e6:90:62:
                    0c:77:75:78:8e:13:76:90:da:5c:a6:5f:81:e3:4d:
                    ce:de:92:3b:f8:07:be:b1:66:a6:0d:1d:b3:66:50:
                    2d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CF:6C:E4:16:68:A9:A8:7F:53:DD:BC:D2:31:6D:1C:E4:AB:CC:4F
            X509v3 Authority Key Identifier:
                keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9e:3f:2d:7a:bb:10:a5:2f:a5:de:e5:a6:2f:03:6d:d7:62:
         df:e0:b7:89:80:8f:67:d4:30:21:ca:80:23:29:17:f6:ca:e4:
         d7:f9:68:0f:05:81:76:4a:37:08:db:f0:39:1a:79:07:7b:96:
         9c:2d:97:cf:c9:01:d2:10:7e:7f:8b:73:b2:c4:11:85:29:ca:
         15:06:ef:bb:54:4e:52:cc:a0:8b:b9:c7:ca:c7:4f:b0:0a:2d:
         26:63:f3:04:2a:15:66:86:5c:ed:72:8e:05:9d:0c:42:f7:e3:
         3b:ef:80:a8:22:96:c2:4b:25:58:3c:3d:0f:72:d1:3b:46:37:
         fa:8a:e4:a7:8e:df:2c:f8:db:c7:0d:2a:54:4f:73:02:c9:e1:
         5c:21:72:4c:4f:f5:a2:09:f5:83:60:9d:c1:c1:89:d5:43:d4:
         cc:fa:dc:99:b2:8d:ad:0f:2c:a7:85:e1:93:04:dc:38:bd:2c:
         1c:f9:25:f7:db:1f:5a:d6:75:49:6c:9c:30:06:53:58:77:f7:
         0d:97:12:fd:49:66:aa:c5:19:ba:4d:4f:41:35:81:a6:c5:11:
         c5:5f:1d:16:33:b3:d4:2e:a0:ec:46:c7:11:ee:1b:08:83:9c:
         89:49:b5:b6:c5:ff:9f:ab:6f:cd:1a:37:e0:3c:0b:82:9c:77:
         a5:fd:1a:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WhoL7kg35n9QkdvE/Kv0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZWIzNGRkYTJmODA5NDk2ODQ5NDg5MjA2MzM1MWVlMGYx
MGU5MWEwHhcNMjYwNjEzMDUwMDEzWhcNMjYwNjE0MDUwMDEzWjAzMTEwLwYDVQQD
Eyg5OGNmNmNlNDE2NjhhOWE4N2Y1M2RkYmNkMjMxNmQxY2U0YWJjYzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MIYDHlhNTSjjXXbOQbsm+KjEuc0
LgYhAIr1Ay7jhQ42oSAf/YYx641sBxM5+yEEn1Q7jzfAatQRamOvOlTRYCfI6OWV
RLuA4XG1pMo5en3fe5miFIIy3s05qkLb3QBkJ/x8IXOtheGepdHNeDR8Ckxl2Qvb
vpGVkTjK88W9cxD3SjqsNJi6VZMQhAWkdQ8lx44we5nA7htaI9z8hCfJMZ6OFj7G
H7eEZH0167VyaR6hcoizB9q8yPQ06Da116sVwaT5xJSsPhsa4k4WV7J6EuQSTDRg
vgbXdMqfX37mkGIMd3V4jhN2kNpcpl+B403O3pI7+Ae+sWamDR2zZlAtkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjPbOQWaKmof1PdvNIxbRzkq8xPMB8GA1UdIwQY
MBaAFMTrNN2i+AlJaElIkgYzUe4PEOkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEt
YTM0N2I1NmYzYjlhLzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEtYTM0N2I1NmYzYjlh
LzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfp4/LXq7
EKUvpd7lpi8Dbddi3+C3iYCPZ9QwIcqAIykX9srk1/loDwWBdko3CNvwORp5B3uW
nC2Xz8kB0hB+f4tzssQRhSnKFQbvu1ROUsygi7nHysdPsAotJmPzBCoVZoZc7XKO
BZ0MQvfjO++AqCKWwkslWDw9D3LRO0Y3+orkp47fLPjbxw0qVE9zAsnhXCFyTE/1
ogn1g2CdwcGJ1UPUzPrcmbKNrQ8sp4XhkwTcOL0sHPkl99sfWtZ1SWycMAZTWHf3
DZcS/UlmqsUZuk1PQTWBpsURxV8dFjOz1C6g7EbHEe4bCIOciUm1tsX/n6tvzRo3
4DwLgpx3pf0aVw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:19:51 2026 by rpki-client