Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
File:                     O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json)
Hash identifier:          ipIq7vh/XSPIzD7ul3l74qQwg8/7RRQ/QgAY6X2R0v4=
Subject key identifier:   CB:C3:AC:19:01:F1:8C:45:87:4D:39:E8:C1:78:F5:87:40:8E:56:55
Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
Certificate issuer:       /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Certificate serial:       019CACB57F56C776C7F1B7C60EE9DAF0E34B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
Manifest number:          10C9
Signing time:             Mon 02 Mar 2026 04:01:41 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:41 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:41 +0000
Files and hashes:         1: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: brp1f3QEpEe95RRkdHobZ8fQ3ZEm5m61qUPpNWWsYIw=)
                          2: tRrojmCf6GIHy7rOSc8HEorjdDM.roa (hash: P8uZJNdgJmiR9RNimT+TldXg8dI9zNVaN+cuOggU5GM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:7f:56:c7:76:c7:f1:b7:c6:0e:e9:da:f0:e3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
        Validity
            Not Before: Mar  2 04:01:41 2026 GMT
            Not After : Mar  3 04:01:41 2026 GMT
        Subject: CN=cbc3ac1901f18c45874d39e8c178f587408e5655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5b:0e:35:47:d3:4e:5d:56:07:c0:ea:36:39:
                    9d:24:50:ec:59:85:9d:4b:f9:be:ed:75:a5:a9:ef:
                    4d:b1:1a:0f:83:66:5c:3a:9f:6c:a2:cb:44:5d:41:
                    56:58:7d:55:b5:2f:a1:c4:21:18:56:4c:98:ef:f1:
                    f7:11:ef:7e:df:5a:fd:c1:75:ba:19:bc:86:5f:73:
                    94:5e:d0:15:36:c9:0e:a2:2a:ca:57:2d:2d:a0:62:
                    6d:7d:57:ac:23:a4:5d:99:56:1f:bd:83:b9:6e:22:
                    a8:28:b1:b1:34:10:76:5d:54:a6:f7:a0:55:d9:f7:
                    ab:84:82:2d:bf:2b:26:4d:a6:db:a7:52:d0:c7:03:
                    e6:18:f5:ee:87:d4:88:e2:3e:2b:09:e3:21:8b:5a:
                    60:e7:26:7a:52:5c:c5:da:c3:da:ff:9f:77:cd:62:
                    15:05:8e:5e:fb:c5:c3:4f:2e:bd:b8:2d:41:98:11:
                    07:73:cd:f6:8c:5e:5f:c9:00:b3:af:85:e6:23:51:
                    ff:33:86:d3:4a:ed:9a:a0:0e:7f:61:73:85:48:c9:
                    4b:23:2e:a5:6e:2e:f4:00:cc:89:dc:8e:76:d0:67:
                    3c:46:95:7e:8a:0b:0f:d5:85:f3:91:93:45:dc:6e:
                    dd:f3:48:45:02:3e:d0:72:b4:82:b2:f3:c5:9b:44:
                    4b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C3:AC:19:01:F1:8C:45:87:4D:39:E8:C1:78:F5:87:40:8E:56:55
            X509v3 Authority Key Identifier:
                keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:51:d0:6c:8c:4e:68:f6:81:6a:ae:21:b4:78:23:b6:8a:79:
         7e:29:69:84:9e:45:b4:fe:95:ce:ae:95:ce:84:a8:26:c8:98:
         6f:39:5e:ce:81:d1:5b:43:32:1b:ed:72:98:07:34:84:72:ab:
         ee:3f:55:bb:d7:25:d8:96:dc:44:ed:18:bc:a1:41:d5:9a:da:
         4d:5f:e0:9f:a9:b3:47:6a:cd:55:28:a3:45:5f:32:33:8e:17:
         8e:a1:4b:e6:ed:72:9b:48:f0:e9:38:93:b3:41:50:a9:b2:7d:
         c3:ca:23:7b:5a:77:47:d4:62:42:de:d8:ef:c3:b1:4a:a0:54:
         80:f0:70:5d:b9:01:c4:3d:e2:52:35:e8:33:a7:b2:d9:50:17:
         1a:7d:58:57:28:7a:6a:75:73:18:22:16:90:0e:bd:16:6a:d1:
         3d:fa:78:d6:aa:93:d0:15:ee:e0:39:13:1a:d9:28:f3:e3:21:
         b2:4c:a1:7e:6f:d3:de:b8:49:4c:ad:59:2c:7e:6e:23:5a:03:
         a0:f9:3e:2d:32:a6:88:12:90:07:8b:f4:77:f4:b4:d3:bf:12:
         a8:93:f1:dd:9d:0c:97:c5:39:e2:71:cf:54:1f:e6:19:77:35:
         05:4d:53:06:54:b7:80:f7:a2:37:2d:5e:c4:24:78:83:32:8d:
         ad:ac:31:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystX9Wx3bH8bfGDuna8ONLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZTJlZjA5NzA4YTk0NTlkYTU3NTlmMTQ2ZjY5YTVkMTlj
Y2ZlNzUwHhcNMjYwMzAyMDQwMTQxWhcNMjYwMzAzMDQwMTQxWjAzMTEwLwYDVQQD
EyhjYmMzYWMxOTAxZjE4YzQ1ODc0ZDM5ZThjMTc4ZjU4NzQwOGU1NjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVsONUfTTl1WB8DqNjmdJFDsWYWd
S/m+7XWlqe9NsRoPg2ZcOp9sostEXUFWWH1VtS+hxCEYVkyY7/H3Ee9+31r9wXW6
GbyGX3OUXtAVNskOoirKVy0toGJtfVesI6RdmVYfvYO5biKoKLGxNBB2XVSm96BV
2ferhIItvysmTabbp1LQxwPmGPXuh9SI4j4rCeMhi1pg5yZ6UlzF2sPa/593zWIV
BY5e+8XDTy69uC1BmBEHc832jF5fyQCzr4XmI1H/M4bTSu2aoA5/YXOFSMlLIy6l
bi70AMyJ3I520Gc8RpV+igsP1YXzkZNF3G7d80hFAj7QcrSCsvPFm0RLHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvDrBkB8YxFh0056MF49YdAjlZVMB8GA1UdIwQY
MBaAFDvi7wlwipRZ2ldZ8Ub2ml0ZzP51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDIt
ZDQxZmY4NTg2MThhLzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDItZDQxZmY4NTg2MThh
LzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlHQbIxO
aPaBaq4htHgjtop5filphJ5FtP6Vzq6VzoSoJsiYbzlezoHRW0MyG+1ymAc0hHKr
7j9Vu9cl2JbcRO0YvKFB1ZraTV/gn6mzR2rNVSijRV8yM44XjqFL5u1ym0jw6TiT
s0FQqbJ9w8oje1p3R9RiQt7Y78OxSqBUgPBwXbkBxD3iUjXoM6ey2VAXGn1YVyh6
anVzGCIWkA69FmrRPfp41qqT0BXu4DkTGtko8+Mhskyhfm/T3rhJTK1ZLH5uI1oD
oPk+LTKmiBKQB4v0d/S0078SqJPx3Z0Ml8U54nHPVB/mGXc1BU1TBlS3gPeiNy1e
xCR4gzKNrawxWA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:44 2026 by rpki-client