Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File:                     1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier:          h8ezuIelpxgNJmAf4HYzrhLuZsGV/GW+yXQNM+OvaKk=
Subject key identifier:   B1:BF:BE:B1:46:3E:50:29:0C:D3:0B:51:9B:AB:C9:27:1B:F3:AB:69
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer:       /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial:       019EBE7FC32648244AF21D10A505F5839DD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number:          0FFB
Signing time:             Sat 13 Jun 2026 01:01:44 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:44 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:44 +0000
Files and hashes:         1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: Jv3rJnRYPGfkBO0OT7QSGoUky+2pt1NR2cavf/Ha2LI=)
                          2: cm7yc5ocW07wElUQnj8sV7yvJ1E.roa (hash: sgiYRfXKAqpRMQa7LkE6X1z2YPcOejwF3EEFNRme46s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:c3:26:48:24:4a:f2:1d:10:a5:05:f5:83:9d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
        Validity
            Not Before: Jun 13 01:01:44 2026 GMT
            Not After : Jun 14 01:01:44 2026 GMT
        Subject: CN=b1bfbeb1463e50290cd30b519babc9271bf3ab69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:76:81:b2:8b:d5:7d:f8:10:88:02:5b:f4:49:
                    c3:c6:65:9b:e1:e6:1e:24:0d:6d:fa:c0:ae:4e:ef:
                    a5:18:5f:67:30:31:6f:89:cc:49:18:b4:91:bb:34:
                    70:3d:8c:4d:61:b6:aa:3e:35:d0:63:65:66:ee:f3:
                    36:c7:ca:62:a0:da:f0:f3:64:fe:e1:5d:7f:99:54:
                    03:e0:e8:07:c4:5e:b4:2c:3c:2c:dc:6d:f5:ac:b6:
                    a7:0f:3a:ae:33:da:12:cd:93:47:03:eb:64:5a:16:
                    76:aa:67:46:35:d6:70:20:b6:32:4b:2e:95:8c:0b:
                    03:d4:d8:9f:b0:40:cf:af:56:45:43:95:f8:34:8a:
                    ba:da:af:8d:4d:87:76:86:aa:a5:eb:f7:c1:f4:b0:
                    1d:c8:54:93:fb:55:c9:ff:74:cf:54:65:12:65:05:
                    13:9b:06:ab:51:6c:9e:c8:b4:1c:7e:67:8a:73:37:
                    7e:8d:53:c7:aa:a2:1e:99:d8:c7:27:39:ba:80:13:
                    c5:64:51:65:5b:5b:4a:56:ec:da:58:34:b0:98:3f:
                    38:20:2a:e2:20:4f:60:8f:a4:b6:45:3f:be:89:31:
                    88:9b:9f:d3:cc:ed:46:a6:ef:ae:68:54:71:ac:ce:
                    18:81:21:21:52:42:ef:9a:2e:fa:6e:19:55:e8:8f:
                    ac:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BF:BE:B1:46:3E:50:29:0C:D3:0B:51:9B:AB:C9:27:1B:F3:AB:69
            X509v3 Authority Key Identifier:
                keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:4d:f4:91:1c:06:06:7c:81:5d:26:f2:b3:1d:2c:ce:f7:b8:
         fc:a1:e9:42:13:f3:fa:4f:c8:a3:20:12:9b:9e:f8:8a:b4:12:
         94:e3:cc:b9:77:8e:c7:a0:d1:6b:f1:b5:74:c0:79:c8:f1:fb:
         ad:a0:68:fa:5f:f3:6e:c6:bf:eb:d9:ad:09:6c:fe:a0:57:30:
         bc:22:84:92:b8:3a:e2:3e:b0:ff:1c:6c:cb:f4:40:c7:68:d3:
         4f:5c:7d:e8:bb:20:d9:47:6e:ef:cb:d4:d4:4c:5e:a1:d2:65:
         7f:a0:50:ad:79:1c:84:9d:b3:49:b7:1f:36:7b:5b:60:53:ef:
         9d:25:a6:71:c9:fe:e0:94:f2:bd:82:24:04:68:76:04:60:2e:
         58:b4:97:bf:47:b7:74:ab:22:3b:e1:5d:ac:fd:1a:76:67:ed:
         67:6e:12:8b:b2:53:3c:49:26:39:96:0d:1b:8c:06:e6:fd:f2:
         2f:99:a3:92:76:0d:94:a7:2d:d1:64:aa:c4:44:16:f8:23:af:
         bd:1c:85:5b:fb:76:a7:6a:aa:9b:75:2a:6b:c3:c7:75:e9:0b:
         ff:5b:51:a4:37:8f:b3:24:0b:9c:5b:43:a3:31:04:4f:0f:b4:
         17:54:af:9b:d8:66:3c:f5:75:32:19:e7:5e:29:19:76:c9:3c:
         c0:98:b4:26
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ6+f8MmSCRK8h0QpQX1g53RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhODFkYzQ2Y2NlMzljMTZjMjQzOTZmNTVlNjI2M2E2Njlj
N2U3NjkwHhcNMjYwNjEzMDEwMTQ0WhcNMjYwNjE0MDEwMTQ0WjAzMTEwLwYDVQQD
EyhiMWJmYmViMTQ2M2U1MDI5MGNkMzBiNTE5YmFiYzkyNzFiZjNhYjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HaBsovVffgQiAJb9EnDxmWb4eYe
JA1t+sCuTu+lGF9nMDFvicxJGLSRuzRwPYxNYbaqPjXQY2Vm7vM2x8pioNrw82T+
4V1/mVQD4OgHxF60LDws3G31rLanDzquM9oSzZNHA+tkWhZ2qmdGNdZwILYySy6V
jAsD1NifsEDPr1ZFQ5X4NIq62q+NTYd2hqql6/fB9LAdyFST+1XJ/3TPVGUSZQUT
mwarUWyeyLQcfmeKczd+jVPHqqIemdjHJzm6gBPFZFFlW1tKVuzaWDSwmD84ICri
IE9gj6S2RT++iTGIm5/TzO1Gpu+uaFRxrM4YgSEhUkLvmi76bhlV6I+s4QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLG/vrFGPlApDNMLUZuryScb86tpMB8GA1UdIwQY
MBaAFPqB3EbM45wWwkOW9V5iY6Zpx+dpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1vSGNSc3pqbkJiQ1E1YjFYbUpqcG1uSDUyay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvOGYwMTgwLTJiNWItNDQxOS1hZDM2
LWY0YjhjYTM3YTFmYi8xLzEtb0hjUnN6am5CYkNRNWIxWG1KanBtbkg1MmsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNjLzhmMDE4MC0yYjViLTQ0MTktYWQzNi1mNGI4Y2EzN2Ex
ZmIvMS8xLW9IY1JzempuQmJDUTViMVhtSmpwbW5INTJrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHU30
kRwGBnyBXSbysx0szve4/KHpQhPz+k/IoyASm574irQSlOPMuXeOx6DRa/G1dMB5
yPH7raBo+l/zbsa/69mtCWz+oFcwvCKEkrg64j6w/xxsy/RAx2jTT1x96Lsg2Udu
78vU1ExeodJlf6BQrXkchJ2zSbcfNntbYFPvnSWmccn+4JTyvYIkBGh2BGAuWLSX
v0e3dKsiO+FdrP0admftZ24Si7JTPEkmOZYNG4wG5v3yL5mjknYNlKct0WSqxEQW
+COvvRyFW/t2p2qqm3Uqa8PHdekL/1tRpDePsyQLnFtDozEETw+0F1Svm9hmPPV1
MhnnXikZdsk8wJi0Jg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:34:18 2026 by rpki-client