Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
File:                     OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json)
Hash identifier:          Sx+p8wa3OgwNSHlg1ysl0GBvLQeXNaK9XFTH/NGqbXU=
Subject key identifier:   C5:F4:E7:17:8E:63:CA:93:DA:70:4C:AD:00:63:95:37:52:6B:64:83
Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
Certificate issuer:       /CN=3938a907772a59fdf59f62f9ad90be502171946e
Certificate serial:       019EC3DC5C716FC5C88C45532FCB2C866077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
Manifest number:          0CB3
Signing time:             Sun 14 Jun 2026 02:00:59 +0000
Manifest this update:     Sun 14 Jun 2026 02:00:59 +0000
Manifest next update:     Mon 15 Jun 2026 02:00:59 +0000
Files and hashes:         1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: MizQ8DnkDp204q8HsNGFL0o85x0mNP/+5hedHNj1tCk=)
                          2: W02fhpsgnAConQXGiEg0hq7nCh4.roa (hash: tNI40lTOaeDENHJQqWq3yNuLBeyi0rMHvNCsn/g7nQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:5c:71:6f:c5:c8:8c:45:53:2f:cb:2c:86:60:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e
        Validity
            Not Before: Jun 14 02:00:59 2026 GMT
            Not After : Jun 15 02:00:59 2026 GMT
        Subject: CN=c5f4e7178e63ca93da704cad00639537526b6483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:61:6c:d1:db:6c:1e:a1:88:e3:1b:bd:7d:95:
                    bf:7f:c4:97:d8:d4:b7:d9:d9:a6:83:4a:3e:42:f3:
                    7c:6b:9d:5c:94:df:fe:a4:30:c1:f1:b0:c3:de:9e:
                    c0:4f:0c:0c:56:26:d2:87:29:62:2d:d4:36:25:4e:
                    23:97:58:05:62:87:55:0a:f6:ef:39:c3:53:12:96:
                    5e:ac:c9:3f:aa:c7:80:86:90:1f:28:01:44:5d:4d:
                    12:64:50:73:2d:8c:31:cc:39:40:f5:de:d5:e7:88:
                    a3:a4:94:3f:97:83:7d:f0:c9:26:ac:47:12:d6:db:
                    b7:8e:c9:c0:83:9f:28:b9:73:06:3a:38:53:56:34:
                    65:05:7a:75:2e:86:95:bf:6b:d0:42:2e:31:39:44:
                    e2:a8:bf:5f:db:7e:24:3f:1c:b8:7f:5f:44:ec:fd:
                    af:46:05:3f:d8:b9:75:b1:16:a7:f3:0e:57:38:29:
                    06:c2:df:41:7f:ed:75:c8:21:51:fb:0c:16:17:59:
                    08:ec:31:08:15:d0:98:98:d6:63:85:f1:e9:58:12:
                    f9:d9:c9:86:76:ad:3c:e1:11:98:b1:49:8f:ad:ab:
                    58:2a:a1:87:94:eb:ff:13:e1:5e:89:b6:89:db:c0:
                    6f:6c:66:92:ae:6a:e9:5e:39:2d:9b:3e:2b:bf:a1:
                    e8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F4:E7:17:8E:63:CA:93:DA:70:4C:AD:00:63:95:37:52:6B:64:83
            X509v3 Authority Key Identifier:
                keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:3b:9e:b9:dd:0a:cb:1d:79:21:18:44:6d:ea:80:42:05:54:
         39:03:1f:0d:03:c5:59:37:15:eb:06:88:07:b6:54:51:8b:07:
         dd:27:78:79:b3:21:18:9a:ac:0c:26:a1:48:ee:9d:73:33:12:
         2e:69:0b:2c:5a:ca:d1:7a:0c:cc:2f:22:2f:f2:0e:60:12:9c:
         bc:a2:33:55:97:5f:61:f4:39:07:e4:de:fe:6b:72:94:1c:e8:
         b7:21:68:67:11:19:94:44:a5:ad:d8:4b:85:29:7d:1c:4f:63:
         df:3e:f0:7b:1e:39:aa:f0:01:cb:57:17:25:40:80:42:fc:7b:
         d8:4c:96:e5:47:9a:46:a3:5e:68:27:8d:ca:2c:c6:d0:e6:c0:
         cb:38:79:88:16:35:c8:c1:e2:21:e7:88:77:51:b6:34:a8:0b:
         34:5d:31:c1:c0:ac:c0:f8:0b:46:28:33:84:9b:55:c6:83:61:
         dc:33:51:d1:02:5e:b2:53:66:f1:ee:4b:f7:5b:86:9c:8b:77:
         09:12:45:66:82:95:9d:4b:98:20:e8:8d:16:9a:1b:b9:26:ca:
         1a:ce:83:25:31:28:28:7e:9f:09:6d:b5:c1:75:cd:36:88:51:
         0e:e7:ef:75:a7:f8:59:ed:53:92:a0:b8:3d:2b:4d:2b:0b:42:
         00:29:81:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7D3Fxxb8XIjEVTL8sshmB3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MzhhOTA3NzcyYTU5ZmRmNTlmNjJmOWFkOTBiZTUwMjE3
MTk0NmUwHhcNMjYwNjE0MDIwMDU5WhcNMjYwNjE1MDIwMDU5WjAzMTEwLwYDVQQD
EyhjNWY0ZTcxNzhlNjNjYTkzZGE3MDRjYWQwMDYzOTUzNzUyNmI2NDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGFs0dtsHqGI4xu9fZW/f8SX2NS3
2dmmg0o+QvN8a51clN/+pDDB8bDD3p7ATwwMVibShyliLdQ2JU4jl1gFYodVCvbv
OcNTEpZerMk/qseAhpAfKAFEXU0SZFBzLYwxzDlA9d7V54ijpJQ/l4N98MkmrEcS
1tu3jsnAg58ouXMGOjhTVjRlBXp1LoaVv2vQQi4xOUTiqL9f234kPxy4f19E7P2v
RgU/2Ll1sRan8w5XOCkGwt9Bf+11yCFR+wwWF1kI7DEIFdCYmNZjhfHpWBL52cmG
dq084RGYsUmPratYKqGHlOv/E+FeibaJ28BvbGaSrmrpXjktmz4rv6HoaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMX05xeOY8qT2nBMrQBjlTdSa2SDMB8GA1UdIwQY
MBaAFDk4qQd3Kln99Z9i+a2QvlAhcZRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84MThlMTAtNDA5Yi00NTFhLTgyYjct
ZTVjMWM2MmNmZTM3LzEvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi84MThlMTAtNDA5Yi00NTFhLTgyYjctZTVjMWM2MmNmZTM3
LzEvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzueud0K
yx15IRhEbeqAQgVUOQMfDQPFWTcV6waIB7ZUUYsH3Sd4ebMhGJqsDCahSO6dczMS
LmkLLFrK0XoMzC8iL/IOYBKcvKIzVZdfYfQ5B+Te/mtylBzotyFoZxEZlESlrdhL
hSl9HE9j3z7wex45qvABy1cXJUCAQvx72EyW5UeaRqNeaCeNyizG0ObAyzh5iBY1
yMHiIeeId1G2NKgLNF0xwcCswPgLRigzhJtVxoNh3DNR0QJeslNm8e5L91uGnIt3
CRJFZoKVnUuYIOiNFpobuSbKGs6DJTEoKH6fCW21wXXNNohRDufvdaf4We1TkqC4
PStNKwtCACmBDA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:20:23 2026 by rpki-client