Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File:                     Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier:          Rrp7bIkFOIrVp6k5C73C7qkwcCYGoJm2WiZex+uDMVY=
Subject key identifier:   E3:9F:F9:AB:D2:8E:A3:39:3B:66:2B:82:FD:A1:B6:D0:4D:C8:E6:CA
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer:       /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial:       019FAAF53D1406D8AACAD9F187BFCA17DE71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number:          1793
Signing time:             Tue 28 Jul 2026 23:00:26 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:26 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:26 +0000
Files and hashes:         1: OSQYUaSf3gbMxgKVGaSRUtdNHTA.roa (hash: r4nA30trmkd0vBXPfRkmROxsmgpOrH0HeKPaS+ubN0w=)
                          2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: UXwk142TvL3RJegt06mTE57f9KddJUtj0uJ4oAa63lU=)
                          3: pVERtNhFi8FWjU9Y4DiQboSkUcg.roa (hash: zXHM3oZaOO62QcqG4BH7LRDl6S8yZxF21aaBpfwYUVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:3d:14:06:d8:aa:ca:d9:f1:87:bf:ca:17:de:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
        Validity
            Not Before: Jul 28 23:00:26 2026 GMT
            Not After : Jul 29 23:00:26 2026 GMT
        Subject: CN=e39ff9abd28ea3393b662b82fda1b6d04dc8e6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:14:9c:c4:a0:26:a5:f4:22:c2:6d:fe:3c:
                    2e:8a:09:c9:d8:ce:01:de:ef:87:7e:aa:9a:4e:20:
                    fc:57:f5:0b:13:98:db:e5:26:ba:35:3d:c8:44:e5:
                    48:de:60:5a:41:16:34:74:07:a8:44:34:a6:f5:d8:
                    4b:87:ca:a4:0a:b5:e6:4d:61:0a:b9:b9:de:45:16:
                    1b:48:96:cf:ec:4e:2c:8f:17:1a:5b:23:1f:df:72:
                    68:62:7d:a3:a4:36:18:c1:f9:1e:b8:ba:f3:72:af:
                    cd:a3:ca:db:cc:1b:c9:1c:19:8b:5b:26:82:3f:c4:
                    f0:ff:86:fa:02:86:9b:ef:6d:f7:65:e9:49:0e:98:
                    46:a1:3f:b5:7f:68:9f:ca:99:30:73:f2:f6:b2:2b:
                    86:21:7d:4c:87:fd:87:c3:40:1c:c2:6a:e8:c0:b2:
                    ea:07:5e:03:39:10:4f:2c:d2:20:85:a0:98:bb:bb:
                    c1:9a:1f:76:d8:f4:fd:df:6e:ad:9c:03:c0:b9:6d:
                    c8:51:3d:43:81:4c:67:5e:b9:e0:99:ab:78:7d:f0:
                    c5:2e:f5:59:45:4c:2e:73:0f:92:87:7f:3d:5b:62:
                    50:3a:b2:6e:9f:24:d8:60:40:20:d1:5b:8b:0d:6a:
                    c3:18:1e:0c:3c:67:4c:d4:33:9a:c3:6f:63:f8:7a:
                    57:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9F:F9:AB:D2:8E:A3:39:3B:66:2B:82:FD:A1:B6:D0:4D:C8:E6:CA
            X509v3 Authority Key Identifier:
                keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:b0:95:7d:10:f7:d9:97:44:25:62:7f:f9:e1:3f:ad:12:0e:
         b0:f4:d0:05:04:e2:9e:37:11:47:a3:7e:95:14:d0:05:ac:7e:
         db:01:27:11:de:1e:fe:a0:28:46:a4:a2:ea:8f:27:7a:08:80:
         bc:26:ab:d8:50:2f:64:4b:38:7e:55:a2:16:49:8a:82:da:ed:
         12:3a:57:ee:ee:5a:23:11:5c:0f:86:35:5f:4d:eb:05:b3:cc:
         3c:82:7f:6a:cf:95:be:16:f1:3a:fb:a0:9a:10:bd:af:d6:8a:
         39:b5:3e:76:15:b3:78:da:19:62:bd:bf:0a:48:a5:dd:80:1e:
         aa:86:46:1b:69:57:38:8d:ff:55:93:62:c2:50:a2:5e:8b:4a:
         6a:0f:46:49:0d:f0:3b:ab:4c:81:58:9c:5b:7e:ea:6b:31:6c:
         4c:7d:ff:40:8f:93:34:7b:e0:c2:b5:d9:2c:38:0d:24:07:83:
         9d:30:ac:5d:8a:d2:a9:dc:f7:d4:38:91:97:23:b7:f4:da:40:
         b8:a9:27:73:ce:19:a7:b3:80:83:45:34:a1:81:67:38:ba:9f:
         21:b0:dc:6f:bb:31:e0:fd:33:b8:75:7d:90:a3:f3:13:05:13:
         11:c2:ef:93:f0:4b:d9:36:e2:27:dd:e3:65:1e:12:3f:e2:9e:
         ec:c7:cb:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9T0UBtiqytnxh7/KF95xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWViOWU2OTJiYTllOTNkOGI5NWE2NDg4ZDVjODc1NjA5
ZDRhZWMwHhcNMjYwNzI4MjMwMDI2WhcNMjYwNzI5MjMwMDI2WjAzMTEwLwYDVQQD
EyhlMzlmZjlhYmQyOGVhMzM5M2I2NjJiODJmZGExYjZkMDRkYzhlNmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5IUnMSgJqX0IsJt/jwuignJ2M4B
3u+HfqqaTiD8V/ULE5jb5Sa6NT3IROVI3mBaQRY0dAeoRDSm9dhLh8qkCrXmTWEK
ubneRRYbSJbP7E4sjxcaWyMf33JoYn2jpDYYwfkeuLrzcq/No8rbzBvJHBmLWyaC
P8Tw/4b6Aoab7233ZelJDphGoT+1f2ifypkwc/L2siuGIX1Mh/2Hw0AcwmrowLLq
B14DORBPLNIghaCYu7vBmh922PT9326tnAPAuW3IUT1DgUxnXrngmat4ffDFLvVZ
RUwucw+Sh389W2JQOrJunyTYYEAg0VuLDWrDGB4MPGdM1DOaw29j+HpXuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOf+avSjqM5O2Yrgv2httBNyObKMB8GA1UdIwQY
MBaAFDruueaSup6T2LlaZIjVyHVgnUrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zZTI1OWItYjZkYy00Y2Y0LWFjMTkt
NTAzM2Y4ZDc5YmU3LzEvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zZTI1OWItYjZkYy00Y2Y0LWFjMTktNTAzM2Y4ZDc5YmU3
LzEvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0rCVfRD3
2ZdEJWJ/+eE/rRIOsPTQBQTinjcRR6N+lRTQBax+2wEnEd4e/qAoRqSi6o8negiA
vCar2FAvZEs4flWiFkmKgtrtEjpX7u5aIxFcD4Y1X03rBbPMPIJ/as+VvhbxOvug
mhC9r9aKObU+dhWzeNoZYr2/Ckil3YAeqoZGG2lXOI3/VZNiwlCiXotKag9GSQ3w
O6tMgVicW37qazFsTH3/QI+TNHvgwrXZLDgNJAeDnTCsXYrSqdz31DiRlyO39NpA
uKknc84Zp7OAg0U0oYFnOLqfIbDcb7sx4P0zuHV9kKPzEwUTEcLvk/BL2TbiJ93j
ZR4SP+Ke7MfL6A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:39:42 2026 by rpki-client