Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/670d24-7f5c-43eb-a1ed-dc3ba948d71e/1/o-bULY3pgsA5-oG_CEuhYYM6zjA.mft
File:                     o-bULY3pgsA5-oG_CEuhYYM6zjA.mft (raw, json)
Hash identifier:          Fm7CrzQlnOucMbhPIZaPU6qWNu03VelJvhutALB2uOg=
Subject key identifier:   A6:19:9B:D3:85:4D:E5:AE:F9:B9:FD:C5:D7:86:88:32:B6:11:C5:38
Authority key identifier: A3:E6:D4:2D:8D:E9:82:C0:39:FA:81:BF:08:4B:A1:61:83:3A:CE:30
Certificate issuer:       /CN=a3e6d42d8de982c039fa81bf084ba161833ace30
Certificate serial:       019EBFC91078E52B71CD6704311CFC99EDCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-bULY3pgsA5-oG_CEuhYYM6zjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/670d24-7f5c-43eb-a1ed-dc3ba948d71e/1/o-bULY3pgsA5-oG_CEuhYYM6zjA.mft
Manifest number:          51
Signing time:             Sat 13 Jun 2026 07:01:25 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:25 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:25 +0000
Files and hashes:         1: 8OrZ-Y_HP7mNK0Wg5q6pTzrFWIY.asa (hash: Q/V+vcg97mJxJxbUvevFdo9sCyk5TMEA0ORHq1KOCLc=)
                          2: o-bULY3pgsA5-oG_CEuhYYM6zjA.crl (hash: V24KLaJxNxjxR3T7JRP0AJhRe7+fcZJi2N5RbS+SjDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/670d24-7f5c-43eb-a1ed-dc3ba948d71e/1/o-bULY3pgsA5-oG_CEuhYYM6zjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/670d24-7f5c-43eb-a1ed-dc3ba948d71e/1/o-bULY3pgsA5-oG_CEuhYYM6zjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o-bULY3pgsA5-oG_CEuhYYM6zjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c9:10:78:e5:2b:71:cd:67:04:31:1c:fc:99:ed:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e6d42d8de982c039fa81bf084ba161833ace30
        Validity
            Not Before: Jun 13 07:01:25 2026 GMT
            Not After : Jun 14 07:01:25 2026 GMT
        Subject: CN=a6199bd3854de5aef9b9fdc5d7868832b611c538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f0:9b:02:c7:1b:23:13:7d:ab:64:cb:92:db:
                    c1:eb:ef:25:a2:b9:7f:de:1e:90:28:4d:ed:fe:a1:
                    61:51:27:22:43:c2:3b:33:fa:b6:62:e5:60:cc:d6:
                    50:03:39:6b:56:7a:fa:f8:fc:7c:6f:bb:49:13:b1:
                    42:4a:98:5c:e0:3e:23:aa:d6:fe:82:40:4d:23:a9:
                    08:fe:ff:4a:ce:10:96:30:7f:18:da:91:81:de:36:
                    7f:1f:67:bc:a8:52:28:c5:bb:38:15:d7:5a:7b:e2:
                    f3:54:bf:cd:6b:67:df:3a:0a:a0:61:a0:3e:9d:1e:
                    d9:a6:f6:95:a1:d3:48:d6:df:d8:af:c3:42:d9:7c:
                    c9:e7:93:c6:cb:75:67:ac:91:6e:4d:70:38:9b:a5:
                    ca:e4:9c:a3:fe:2e:cc:65:6d:45:82:eb:be:17:e7:
                    bb:b1:06:55:41:1f:e2:4c:89:8f:10:20:3e:0c:df:
                    f5:b4:d3:9c:6e:10:ef:ef:16:18:14:3d:c8:a7:30:
                    f0:d6:83:4f:44:ab:0c:6e:50:b8:b7:df:76:22:a9:
                    f6:d4:09:82:96:16:a2:a5:36:dd:d5:36:92:b9:ab:
                    35:e1:e1:b8:5b:d6:a8:2c:ca:ca:1b:24:49:91:59:
                    d2:00:4f:4e:c8:be:88:f0:e3:fb:a3:96:e9:53:91:
                    8e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:19:9B:D3:85:4D:E5:AE:F9:B9:FD:C5:D7:86:88:32:B6:11:C5:38
            X509v3 Authority Key Identifier:
                keyid:A3:E6:D4:2D:8D:E9:82:C0:39:FA:81:BF:08:4B:A1:61:83:3A:CE:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bULY3pgsA5-oG_CEuhYYM6zjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/670d24-7f5c-43eb-a1ed-dc3ba948d71e/1/o-bULY3pgsA5-oG_CEuhYYM6zjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/670d24-7f5c-43eb-a1ed-dc3ba948d71e/1/o-bULY3pgsA5-oG_CEuhYYM6zjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b1:6d:22:32:7d:74:44:71:e9:bd:4d:44:e3:4b:e3:3c:77:
         0b:c9:1a:5a:39:54:2f:6c:86:8f:21:13:d3:83:84:65:06:e0:
         33:5f:e3:65:33:b7:85:5d:f9:d2:7c:a6:0a:c4:de:76:0e:1a:
         44:9f:c3:cd:17:73:6a:bc:ee:c8:18:eb:9f:a1:6e:cd:0d:ac:
         8d:4f:a4:d2:c3:14:ab:91:14:c4:17:40:d6:77:df:1c:00:f2:
         0c:2e:a7:f9:9d:76:9f:d4:a0:37:a5:e2:16:40:0e:ea:bc:af:
         f9:ca:66:12:10:ca:c3:fb:96:77:4b:c1:0c:35:11:3b:59:1b:
         81:92:35:7a:35:d3:c7:2b:fc:12:4e:6c:e0:e5:b4:13:c6:f3:
         b6:25:bc:52:a4:2a:9e:eb:6d:0f:06:38:15:81:15:5a:6e:42:
         77:a0:8a:c4:d9:d9:a7:1b:25:a9:89:89:44:6a:74:16:94:6a:
         67:18:6b:47:41:a8:1b:7a:8c:73:51:7e:ba:dc:95:5c:b4:31:
         c0:25:1f:0d:3f:ce:08:6e:27:56:1e:3b:cb:ee:13:78:ca:7a:
         7b:b5:fb:70:3a:42:b7:82:4f:44:a7:3c:c7:05:fe:f8:fa:a4:
         e3:c2:38:20:69:fe:76:35:8c:0c:b5:90:be:23:bc:18:15:5c:
         f9:67:22:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yRB45StxzWcEMRz8me3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZTZkNDJkOGRlOTgyYzAzOWZhODFiZjA4NGJhMTYxODMz
YWNlMzAwHhcNMjYwNjEzMDcwMTI1WhcNMjYwNjE0MDcwMTI1WjAzMTEwLwYDVQQD
EyhhNjE5OWJkMzg1NGRlNWFlZjliOWZkYzVkNzg2ODgzMmI2MTFjNTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPCbAscbIxN9q2TLktvB6+8lorl/
3h6QKE3t/qFhUSciQ8I7M/q2YuVgzNZQAzlrVnr6+Px8b7tJE7FCSphc4D4jqtb+
gkBNI6kI/v9KzhCWMH8Y2pGB3jZ/H2e8qFIoxbs4Fddae+LzVL/Na2ffOgqgYaA+
nR7ZpvaVodNI1t/Yr8NC2XzJ55PGy3VnrJFuTXA4m6XK5Jyj/i7MZW1Fguu+F+e7
sQZVQR/iTImPECA+DN/1tNOcbhDv7xYYFD3IpzDw1oNPRKsMblC4t992Iqn21AmC
lhaipTbd1TaSuas14eG4W9aoLMrKGyRJkVnSAE9OyL6I8OP7o5bpU5GOgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYZm9OFTeWu+bn9xdeGiDK2EcU4MB8GA1UdIwQY
MBaAFKPm1C2N6YLAOfqBvwhLoWGDOs4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby1iVUxZM3Bnc0E1LW9HX0NFdWhZWU02empBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82NzBkMjQtN2Y1Yy00M2ViLWExZWQt
ZGMzYmE5NDhkNzFlLzEvby1iVUxZM3Bnc0E1LW9HX0NFdWhZWU02empBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS82NzBkMjQtN2Y1Yy00M2ViLWExZWQtZGMzYmE5NDhkNzFl
LzEvby1iVUxZM3Bnc0E1LW9HX0NFdWhZWU02empBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLFtIjJ9
dERx6b1NRONL4zx3C8kaWjlUL2yGjyET04OEZQbgM1/jZTO3hV350nymCsTedg4a
RJ/DzRdzarzuyBjrn6FuzQ2sjU+k0sMUq5EUxBdA1nffHADyDC6n+Z12n9SgN6Xi
FkAO6ryv+cpmEhDKw/uWd0vBDDURO1kbgZI1ejXTxyv8Ek5s4OW0E8bztiW8UqQq
nuttDwY4FYEVWm5Cd6CKxNnZpxslqYmJRGp0FpRqZxhrR0GoG3qMc1F+utyVXLQx
wCUfDT/OCG4nVh47y+4TeMp6e7X7cDpCt4JPRKc8xwX++Pqk48I4IGn+djWMDLWQ
viO8GBVc+WcilQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:54:57 2026 by rpki-client