Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
File:                     O3vGRy6lJXXOlb3KeCbppR-qzkk.mft (raw, json)
Hash identifier:          oO5lRyJJ0wMz97cPtt2ZeJVP4UaFHhl37DM4dEPYcNc=
Subject key identifier:   EA:B9:C5:B5:3A:A4:21:64:4B:9C:98:11:46:71:15:0A:0F:4F:3E:E3
Authority key identifier: 3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
Certificate issuer:       /CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Certificate serial:       019FABD15AB580935174892BA231CA5B1DCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
Manifest number:          04C5
Signing time:             Wed 29 Jul 2026 03:00:51 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:51 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:51 +0000
Files and hashes:         1: O3vGRy6lJXXOlb3KeCbppR-qzkk.crl (hash: JHvqU+FOAm5VjcBMrPeGAi5NUbp1FIreWJXhbX/fM4g=)
                          2: xZvTVsgAgTHbHn_16cZuYXn4mck.roa (hash: +oE3yDmB7hi9Ypi3E2o3IvseUAbSMG6NeT9277jObu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:5a:b5:80:93:51:74:89:2b:a2:31:ca:5b:1d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
        Validity
            Not Before: Jul 29 03:00:51 2026 GMT
            Not After : Jul 30 03:00:51 2026 GMT
        Subject: CN=eab9c5b53aa421644b9c98114671150a0f4f3ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:65:11:e3:8a:a7:96:11:b1:89:30:07:f8:05:
                    1d:9a:0c:7d:b0:b0:e7:46:ad:9f:9d:da:14:35:bf:
                    db:a6:59:34:bc:37:3b:61:37:02:3c:4c:b4:a9:cf:
                    d2:d2:82:9f:65:bc:a7:04:99:23:23:ef:57:60:cd:
                    07:3b:e9:ae:4d:49:57:bf:06:e5:f7:66:f5:b6:dc:
                    6e:cd:80:d6:c9:c1:3f:d1:9d:a6:65:ab:77:24:8d:
                    d0:da:9b:d7:85:cb:b0:c5:f5:e9:37:c1:ba:3e:17:
                    d9:aa:7f:79:3e:e2:9b:f7:da:e2:1d:46:0b:6d:56:
                    e0:67:17:8c:73:d8:d8:b4:ad:38:a2:4d:10:b5:78:
                    bb:e9:aa:93:2b:f8:42:f6:60:1f:ea:57:32:c9:7e:
                    62:32:2a:df:f3:f0:4c:8d:56:68:31:fe:6b:b6:7a:
                    24:a6:42:64:7d:ef:94:cc:5d:58:9b:f4:f1:11:b3:
                    b1:f3:f2:f3:43:14:46:ff:b2:65:07:ae:41:3e:e3:
                    e9:25:6c:d1:f0:5b:3c:cf:27:16:6f:ed:6c:8a:9e:
                    a2:5d:77:7c:0b:ff:9c:75:09:54:04:75:70:01:8b:
                    bd:ef:7f:94:ca:c9:e5:6b:2e:33:6d:72:99:ea:f0:
                    5e:b3:b2:04:0b:3c:cc:64:14:5d:37:69:1e:3d:7a:
                    9a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B9:C5:B5:3A:A4:21:64:4B:9C:98:11:46:71:15:0A:0F:4F:3E:E3
            X509v3 Authority Key Identifier:
                keyid:3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:00:64:57:f4:d5:1e:f3:1d:92:be:88:09:a6:9a:b7:a9:cf:
         94:0c:f6:2c:68:f7:08:d4:dd:60:a8:e2:80:d7:b3:47:00:98:
         b6:4c:55:33:b8:0a:fa:96:fc:0a:ae:50:e2:34:ff:0c:25:fd:
         46:bb:e3:58:cb:2a:e1:53:af:43:03:c3:eb:40:ea:1e:c3:98:
         fe:1b:8c:a5:39:95:b3:3c:13:35:74:1f:b9:bd:72:ba:23:1e:
         36:4f:17:db:81:cd:7c:91:86:d0:d1:c2:06:b5:60:d5:cf:4b:
         26:7d:63:d8:24:3a:91:d6:3a:d8:70:5c:3d:30:6b:52:d3:e3:
         fb:b3:f2:36:2d:66:dc:52:3e:d9:d6:9f:8d:8a:57:87:02:f1:
         2d:19:68:da:23:93:73:8b:a3:1b:e4:28:ed:04:41:1e:a1:b5:
         65:b3:91:b1:8d:39:d6:7a:e2:20:a8:7c:72:5f:bd:ab:97:58:
         36:df:41:1d:88:ac:7a:11:09:60:1b:55:46:26:55:ba:cc:41:
         6b:d2:77:12:35:a5:15:b0:bc:23:1f:9c:72:b4:51:19:8c:61:
         8d:e5:04:54:99:f5:5f:c0:db:b4:99:70:62:40:43:c7:eb:4d:
         a7:db:c2:ef:1f:30:b7:71:70:6b:b7:24:14:a8:42:9b:be:57:
         44:da:c4:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0Vq1gJNRdIkrojHKWx3PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiN2JjNjQ3MmVhNTI1NzVjZTk1YmRjYTc4MjZlOWE1MWZh
YWNlNDkwHhcNMjYwNzI5MDMwMDUxWhcNMjYwNzMwMDMwMDUxWjAzMTEwLwYDVQQD
EyhlYWI5YzViNTNhYTQyMTY0NGI5Yzk4MTE0NjcxMTUwYTBmNGYzZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGUR44qnlhGxiTAH+AUdmgx9sLDn
Rq2fndoUNb/bplk0vDc7YTcCPEy0qc/S0oKfZbynBJkjI+9XYM0HO+muTUlXvwbl
92b1ttxuzYDWycE/0Z2mZat3JI3Q2pvXhcuwxfXpN8G6PhfZqn95PuKb99riHUYL
bVbgZxeMc9jYtK04ok0QtXi76aqTK/hC9mAf6lcyyX5iMirf8/BMjVZoMf5rtnok
pkJkfe+UzF1Ym/TxEbOx8/LzQxRG/7JlB65BPuPpJWzR8Fs8zycWb+1sip6iXXd8
C/+cdQlUBHVwAYu973+Uysnlay4zbXKZ6vBes7IECzzMZBRdN2kePXqa8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOq5xbU6pCFkS5yYEUZxFQoPTz7jMB8GA1UdIwQY
MBaAFDt7xkcupSV1zpW9yngm6aUfqs5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzN2R1J5NmxKWFhPbGIzS2VDYnBwUi1xemtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80OTNkMjktNDdhOS00OWViLTgwODAt
OTIyNmIzYWM0ZTlkLzEvTzN2R1J5NmxKWFhPbGIzS2VDYnBwUi1xemtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80OTNkMjktNDdhOS00OWViLTgwODAtOTIyNmIzYWM0ZTlk
LzEvTzN2R1J5NmxKWFhPbGIzS2VDYnBwUi1xemtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwBkV/TV
HvMdkr6ICaaat6nPlAz2LGj3CNTdYKjigNezRwCYtkxVM7gK+pb8Cq5Q4jT/DCX9
RrvjWMsq4VOvQwPD60DqHsOY/huMpTmVszwTNXQfub1yuiMeNk8X24HNfJGG0NHC
BrVg1c9LJn1j2CQ6kdY62HBcPTBrUtPj+7PyNi1m3FI+2dafjYpXhwLxLRlo2iOT
c4ujG+Qo7QRBHqG1ZbORsY051nriIKh8cl+9q5dYNt9BHYisehEJYBtVRiZVusxB
a9J3EjWlFbC8Ix+ccrRRGYxhjeUEVJn1X8DbtJlwYkBDx+tNp9vC7x8wt3Fwa7ck
FKhCm75XRNrEEA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:02:39 2026 by rpki-client