Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
File:                     oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft (raw, json)
Hash identifier:          jJZ6DvORdaEnzoD5UIe++Ge+Af6zR8e0OYOH8DDAb1s=
Subject key identifier:   67:66:5E:81:62:2D:33:28:1C:C0:85:C1:CB:96:FB:3A:26:07:73:5D
Authority key identifier: A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
Certificate issuer:       /CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Certificate serial:       019EC1B78D1C1305390CCCD6BD32796D0F86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
Manifest number:          1289
Signing time:             Sat 13 Jun 2026 16:01:32 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:32 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:32 +0000
Files and hashes:         1: E_iRTXv34ZqZD3pIYO9UjKGuMZM.roa (hash: i1fiJO0e9H9m1mOdq45mO4/oIY+M6L6ueaw+taXDZdY=)
                          2: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl (hash: XpaEgECV6t0X63MxY1h21vnN4o8f+c+rFpS+kYioA0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:8d:1c:13:05:39:0c:cc:d6:bd:32:79:6d:0f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
        Validity
            Not Before: Jun 13 16:01:32 2026 GMT
            Not After : Jun 14 16:01:32 2026 GMT
        Subject: CN=67665e81622d33281cc085c1cb96fb3a2607735d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:40:20:cb:f2:2d:36:5c:8e:da:43:81:0b:
                    7b:79:52:5d:08:ba:93:60:03:09:6c:3e:67:c2:4d:
                    51:b6:b6:b4:35:94:a9:7e:4d:8b:fc:45:d9:d5:3b:
                    10:28:47:0e:0f:54:b7:23:25:c8:ca:8e:4c:1e:13:
                    0c:4f:3e:2f:cd:af:b9:62:f2:d8:5a:b8:36:ec:b7:
                    55:6f:b7:da:d5:12:43:75:9f:f7:46:12:ec:2b:87:
                    7e:5b:fa:32:31:f3:e1:60:78:d7:77:b6:e4:d2:7d:
                    7c:65:88:30:8d:61:3a:ca:b1:29:55:40:c8:9b:05:
                    5b:9d:32:63:e4:ca:0a:fc:7e:1d:77:32:09:0c:52:
                    0c:b0:55:7a:59:9d:93:4d:72:6e:2c:f3:57:7b:b8:
                    3f:12:cf:a2:e9:08:10:9d:89:4c:c8:e3:fc:3d:23:
                    dc:68:2b:67:ad:6e:3b:1d:78:15:9b:8f:c6:6f:57:
                    91:45:ea:72:8c:a0:b1:d6:b0:cf:67:db:a4:ba:b0:
                    4f:e8:53:5b:ab:65:98:d3:e7:2d:47:85:5f:81:6b:
                    a3:3a:0f:73:e8:7b:fc:8c:4e:b7:85:9d:61:3c:1a:
                    38:3d:d3:a9:7d:d4:a2:11:e3:df:74:18:00:c4:58:
                    c3:fa:72:22:26:14:26:bf:d8:41:e9:b3:bb:e1:03:
                    88:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:66:5E:81:62:2D:33:28:1C:C0:85:C1:CB:96:FB:3A:26:07:73:5D
            X509v3 Authority Key Identifier:
                keyid:A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:bc:32:96:3e:f9:80:ee:90:d1:bb:97:62:eb:01:6d:c4:af:
         5b:6e:48:c9:62:78:19:3a:40:37:4f:93:90:7a:72:2f:8c:d8:
         4e:e0:c2:11:ac:88:74:44:88:54:a4:1e:38:24:b1:c2:6a:ab:
         6e:04:73:2f:b1:77:ea:87:16:c8:81:54:d9:35:1d:80:fd:24:
         f2:b5:02:eb:06:28:c4:5a:7c:b4:73:0a:ed:62:ea:76:b5:59:
         5d:62:46:82:82:0b:31:9d:2f:27:dd:32:b8:50:e6:15:f1:23:
         5c:a3:c5:ef:0f:78:77:ac:98:01:6b:15:86:03:e2:88:0a:ac:
         36:d8:93:fb:37:53:4c:37:e0:4a:c8:88:48:a8:7c:10:30:f9:
         9c:13:49:16:e7:6f:5e:21:66:64:e9:75:fc:1d:f1:2a:aa:c9:
         ae:f3:28:55:a1:c8:4c:be:1d:cd:6e:ac:96:85:7b:62:97:11:
         53:9b:36:8a:db:b2:ca:3d:6a:77:b1:c8:50:8e:9d:ca:cc:ff:
         5b:83:30:69:9e:70:d1:63:d1:cc:64:d6:f7:00:aa:1f:20:af:
         9a:0d:14:ae:05:97:85:dc:80:2d:da:e7:97:2c:16:24:82:dd:
         e2:4e:4f:fd:cc:f9:f5:2c:1a:f7:49:07:1a:33:d9:9d:e1:30:
         f4:af:d1:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bt40cEwU5DMzWvTJ5bQ+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMDk5NWE4N2JmNjRkYzQ5NDliODE5ZGZlMDJmOGE1ODZh
YWE0ZGUwHhcNMjYwNjEzMTYwMTMyWhcNMjYwNjE0MTYwMTMyWjAzMTEwLwYDVQQD
Eyg2NzY2NWU4MTYyMmQzMzI4MWNjMDg1YzFjYjk2ZmIzYTI2MDc3MzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuBAIMvyLTZcjtpDgQt7eVJdCLqT
YAMJbD5nwk1Rtra0NZSpfk2L/EXZ1TsQKEcOD1S3IyXIyo5MHhMMTz4vza+5YvLY
Wrg27LdVb7fa1RJDdZ/3RhLsK4d+W/oyMfPhYHjXd7bk0n18ZYgwjWE6yrEpVUDI
mwVbnTJj5MoK/H4ddzIJDFIMsFV6WZ2TTXJuLPNXe7g/Es+i6QgQnYlMyOP8PSPc
aCtnrW47HXgVm4/Gb1eRRepyjKCx1rDPZ9ukurBP6FNbq2WY0+ctR4VfgWujOg9z
6Hv8jE63hZ1hPBo4PdOpfdSiEePfdBgAxFjD+nIiJhQmv9hB6bO74QOI/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdmXoFiLTMoHMCFwcuW+zomB3NdMB8GA1UdIwQY
MBaAFKAJlah79k3ElJuBnf4C+KWGqqTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0FtVnFIdjJUY1NVbTRHZF9nTDRwWWFxcE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mZWE1YzQtZGRlMS00NTQ4LWE1OGIt
ODkzOGU5NTU2MzQyLzEvb0FtVnFIdjJUY1NVbTRHZF9nTDRwWWFxcE40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mZWE1YzQtZGRlMS00NTQ4LWE1OGItODkzOGU5NTU2MzQy
LzEvb0FtVnFIdjJUY1NVbTRHZF9nTDRwWWFxcE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7wylj75
gO6Q0buXYusBbcSvW25IyWJ4GTpAN0+TkHpyL4zYTuDCEayIdESIVKQeOCSxwmqr
bgRzL7F36ocWyIFU2TUdgP0k8rUC6wYoxFp8tHMK7WLqdrVZXWJGgoILMZ0vJ90y
uFDmFfEjXKPF7w94d6yYAWsVhgPiiAqsNtiT+zdTTDfgSsiISKh8EDD5nBNJFudv
XiFmZOl1/B3xKqrJrvMoVaHITL4dzW6sloV7YpcRU5s2ituyyj1qd7HIUI6dysz/
W4MwaZ5w0WPRzGTW9wCqHyCvmg0UrgWXhdyALdrnlywWJILd4k5P/cz59Swa90kH
GjPZneEw9K/R4A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:55:17 2026 by rpki-client