Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
File:                     dlOpinSeVpdEoe3iyUDy5DPEQIo.mft (raw, json)
Hash identifier:          SmtM9E2N7gfTD9+zl44McWYqPCqAgzbpC26+z9z5dyk=
Subject key identifier:   12:1D:B5:3A:83:A2:D3:41:AF:F4:AA:20:DD:3B:45:B7:1F:E3:86:8A
Authority key identifier: 76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A
Certificate issuer:       /CN=7653a98a749e569744a1ede2c940f2e433c4408a
Certificate serial:       019EC1B75D232EC47E0427D751D91B393ECD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
Manifest number:          0CEC
Signing time:             Sat 13 Jun 2026 16:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:20 +0000
Files and hashes:         1: RsF6wJG_DVoKQM6B-sCzW6WCDW0.roa (hash: qws597tbqP0XDfiuU1TMHHh3nxH1S6tAU3H9xRP9fH8=)
                          2: dlOpinSeVpdEoe3iyUDy5DPEQIo.crl (hash: XMp52fVHP6cT+WNM/S0kyWIxQbSYwzpAu/9FOoCXlU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:5d:23:2e:c4:7e:04:27:d7:51:d9:1b:39:3e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7653a98a749e569744a1ede2c940f2e433c4408a
        Validity
            Not Before: Jun 13 16:01:20 2026 GMT
            Not After : Jun 14 16:01:20 2026 GMT
        Subject: CN=121db53a83a2d341aff4aa20dd3b45b71fe3868a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:b8:71:42:2e:94:17:48:39:e4:c8:21:86:
                    12:0a:4b:d6:74:6b:08:04:4e:ed:dd:bc:fb:4a:05:
                    b7:9a:63:a1:a7:58:85:14:be:a5:ca:41:06:6a:21:
                    46:ca:42:8a:b1:7c:dd:ee:6f:80:d2:24:dc:32:d1:
                    53:8e:15:a0:4d:7f:2a:fe:c3:38:e4:1b:9b:e9:0f:
                    0b:c3:85:63:a8:3d:93:ed:6c:8b:d2:12:51:db:15:
                    05:db:26:0d:6a:fd:2e:39:c2:de:fb:b2:06:30:7e:
                    99:74:42:ed:ae:72:45:c3:ea:20:71:53:7d:8b:a3:
                    7c:f5:11:a8:b4:cb:6a:a3:44:ae:24:d8:8c:14:12:
                    ca:96:4c:84:b0:8e:eb:e7:75:4f:a7:29:a5:e0:9f:
                    50:ce:ef:4e:b8:9b:af:2c:34:db:07:d2:53:9c:97:
                    c5:0a:e9:73:78:b2:12:49:62:0c:f1:db:97:48:b8:
                    30:75:55:e5:fe:2e:b1:00:d3:33:a1:2a:b7:7b:17:
                    4f:f9:1b:0e:3d:22:ed:ac:62:9c:85:3a:ca:1a:ca:
                    06:bc:98:60:ac:bd:08:16:92:31:4f:27:31:b9:0b:
                    fd:08:03:e7:c9:18:eb:09:03:28:f1:47:ab:ea:a1:
                    81:1f:6a:c2:74:22:f9:9c:88:4e:46:a9:9e:1c:93:
                    c0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1D:B5:3A:83:A2:D3:41:AF:F4:AA:20:DD:3B:45:B7:1F:E3:86:8A
            X509v3 Authority Key Identifier:
                keyid:76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:68:51:a6:bf:cd:ca:29:1e:40:b6:16:e7:59:5b:b5:b4:f3:
         7a:45:2e:80:b7:09:23:0d:32:b9:b9:a2:0f:5b:e4:ec:f8:a7:
         bd:6f:72:95:6e:cb:63:c0:de:b5:64:65:16:eb:64:eb:a4:4e:
         cd:0e:96:56:74:ba:1c:8b:0f:e7:54:4c:26:db:f4:dd:d1:87:
         8c:c5:07:ed:ff:c1:d2:85:57:18:71:07:2f:e9:19:c8:09:51:
         a7:af:e3:05:2f:2b:b7:b2:cb:32:53:41:ac:3b:76:d0:f1:a3:
         8c:b8:d4:de:93:fb:10:9b:22:2c:bd:2b:39:e9:b8:be:7b:a3:
         a3:3b:17:78:a4:96:e8:ff:e2:5d:44:45:f9:f2:d3:a7:e7:19:
         ae:5e:e0:2d:d5:b7:5b:53:aa:87:43:f2:48:0a:29:af:fc:9f:
         2e:a4:fe:a0:43:8b:65:35:ad:24:4b:5b:80:78:c2:15:a8:78:
         b1:04:db:4b:32:83:7a:16:70:a0:78:67:08:4e:23:00:ca:dc:
         b5:fa:82:4b:61:ba:fd:0c:ea:da:26:8b:9f:98:82:d8:29:07:
         5e:5b:59:f6:22:b7:07:07:66:d5:bd:d4:dd:54:e8:3f:f3:a3:
         06:07:1d:70:c4:8c:58:33:1d:3e:ac:12:7f:1d:de:00:bf:8b:
         07:b4:d2:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bt10jLsR+BCfXUdkbOT7NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NTNhOThhNzQ5ZTU2OTc0NGExZWRlMmM5NDBmMmU0MzNj
NDQwOGEwHhcNMjYwNjEzMTYwMTIwWhcNMjYwNjE0MTYwMTIwWjAzMTEwLwYDVQQD
EygxMjFkYjUzYTgzYTJkMzQxYWZmNGFhMjBkZDNiNDViNzFmZTM4NjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoe4cUIulBdIOeTIIYYSCkvWdGsI
BE7t3bz7SgW3mmOhp1iFFL6lykEGaiFGykKKsXzd7m+A0iTcMtFTjhWgTX8q/sM4
5Bub6Q8Lw4VjqD2T7WyL0hJR2xUF2yYNav0uOcLe+7IGMH6ZdELtrnJFw+ogcVN9
i6N89RGotMtqo0SuJNiMFBLKlkyEsI7r53VPpyml4J9Qzu9OuJuvLDTbB9JTnJfF
CulzeLISSWIM8duXSLgwdVXl/i6xANMzoSq3exdP+RsOPSLtrGKchTrKGsoGvJhg
rL0IFpIxTycxuQv9CAPnyRjrCQMo8Uer6qGBH2rCdCL5nIhORqmeHJPA6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIdtTqDotNBr/SqIN07Rbcf44aKMB8GA1UdIwQY
MBaAFHZTqYp0nlaXRKHt4slA8uQzxECKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGxPcGluU2VWcGRFb2UzaXlVRHk1RFBFUUlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS84NjE1OTItYjFjMi00OTVmLWI1YTEt
YjlkYzJmMmIwMDJjLzEvZGxPcGluU2VWcGRFb2UzaXlVRHk1RFBFUUlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS84NjE1OTItYjFjMi00OTVmLWI1YTEtYjlkYzJmMmIwMDJj
LzEvZGxPcGluU2VWcGRFb2UzaXlVRHk1RFBFUUlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuGhRpr/N
yikeQLYW51lbtbTzekUugLcJIw0yubmiD1vk7PinvW9ylW7LY8DetWRlFutk66RO
zQ6WVnS6HIsP51RMJtv03dGHjMUH7f/B0oVXGHEHL+kZyAlRp6/jBS8rt7LLMlNB
rDt20PGjjLjU3pP7EJsiLL0rOem4vnujozsXeKSW6P/iXURF+fLTp+cZrl7gLdW3
W1Oqh0PySAopr/yfLqT+oEOLZTWtJEtbgHjCFah4sQTbSzKDehZwoHhnCE4jAMrc
tfqCS2G6/Qzq2iaLn5iC2CkHXltZ9iK3Bwdm1b3U3VToP/OjBgcdcMSMWDMdPqwS
fx3eAL+LB7TS0w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:10 2026 by rpki-client