Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.mft
File:                     O3S5CBUT135Tof8iWzNAD7s5E1U.mft (raw, json)
Hash identifier:          yUCb7gCs45n6c+FOJAr4WSQVhlD7jX1wYq+5Tsw2vMw=
Subject key identifier:   03:EF:B9:BE:C0:0B:3B:FF:07:0A:68:78:F7:CD:C2:DB:ED:84:EF:AF
Authority key identifier: 3B:74:B9:08:15:13:D7:7E:53:A1:FF:22:5B:33:40:0F:BB:39:13:55
Certificate issuer:       /CN=3b74b9081513d77e53a1ff225b33400fbb391355
Certificate serial:       019FA719215A9CE4D3127844F56A9E4F1359
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O3S5CBUT135Tof8iWzNAD7s5E1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.mft
Manifest number:          26
Signing time:             Tue 28 Jul 2026 05:01:09 +0000
Manifest this update:     Tue 28 Jul 2026 05:01:09 +0000
Manifest next update:     Wed 29 Jul 2026 05:01:09 +0000
Files and hashes:         1: O3S5CBUT135Tof8iWzNAD7s5E1U.crl (hash: MwsWxu1ZcduaCiuWrVAFk3HnctwQQF/YYKvrDktemfs=)
                          2: TVGvt-GV-3EVfMvtoUH4tHH1zlI.asa (hash: V32WZ60pl0CbZiR2Xww+WSeiolXx8sZ4RQF4hMAGck8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O3S5CBUT135Tof8iWzNAD7s5E1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 05:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:19:21:5a:9c:e4:d3:12:78:44:f5:6a:9e:4f:13:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b74b9081513d77e53a1ff225b33400fbb391355
        Validity
            Not Before: Jul 28 05:01:09 2026 GMT
            Not After : Jul 29 05:01:09 2026 GMT
        Subject: CN=03efb9bec00b3bff070a6878f7cdc2dbed84efaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:06:0f:96:f4:17:68:80:50:16:1a:4f:f4:13:
                    a1:59:b3:f9:2b:39:7d:2d:10:70:17:e2:91:86:68:
                    82:1c:ec:e8:49:7d:85:02:3f:32:e4:7e:1a:f0:6d:
                    42:7c:7b:2a:11:9c:87:54:f2:25:c6:db:5c:e3:d5:
                    00:0c:2c:2b:b4:87:87:84:6c:bc:91:90:86:59:9f:
                    8a:78:e9:57:70:fd:b7:2c:e6:73:a8:fe:4c:c4:34:
                    4c:98:66:1e:ae:e5:f4:98:d4:2d:8c:5e:b4:c1:26:
                    5d:84:87:85:ff:5f:80:7a:8f:75:01:51:7f:22:f6:
                    5f:1d:65:0a:4b:f5:a7:63:56:6c:14:68:0a:aa:e6:
                    d7:ac:a7:27:dc:66:6d:ce:49:0c:e4:56:1d:f1:ce:
                    1a:b1:c5:41:60:5f:0d:11:d7:52:02:23:77:02:a9:
                    12:d8:74:46:e6:76:51:66:7d:a8:7b:32:dd:55:d6:
                    ca:fa:0b:17:48:7a:1a:9f:14:ea:df:06:76:4b:28:
                    d3:5c:7a:5e:ad:c4:ac:24:c5:39:d9:ea:aa:f2:30:
                    74:2d:47:59:be:88:5a:e0:09:38:c4:19:50:14:e3:
                    12:de:bd:a8:49:6f:1e:af:70:9e:45:8b:1c:59:e7:
                    e7:54:b2:86:6c:d0:e6:18:98:63:4c:b0:e4:dc:1f:
                    93:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EF:B9:BE:C0:0B:3B:FF:07:0A:68:78:F7:CD:C2:DB:ED:84:EF:AF
            X509v3 Authority Key Identifier:
                keyid:3B:74:B9:08:15:13:D7:7E:53:A1:FF:22:5B:33:40:0F:BB:39:13:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3S5CBUT135Tof8iWzNAD7s5E1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:2e:5a:a1:09:60:8a:0c:14:c2:bb:eb:cd:fc:f1:ea:57:52:
         5f:8a:99:c6:d4:e6:cd:a7:ee:4a:d7:15:25:5a:05:6e:33:63:
         c3:bc:46:2c:aa:81:5d:90:56:35:c8:41:35:fb:89:61:86:a1:
         6c:c8:b7:e6:3e:27:cf:4d:2b:04:a2:2d:46:3f:b4:5e:cc:e3:
         3d:46:30:67:55:26:db:90:b8:bf:0a:df:3c:0f:a1:5f:7b:46:
         0c:a0:5b:9f:4f:2d:c1:c3:b8:c3:b2:42:e9:e5:2e:fc:f8:fe:
         9f:11:99:fc:cf:be:cc:f9:29:24:ea:d2:0b:41:41:82:cc:f0:
         e6:6d:89:2a:39:31:bc:5a:a3:a5:d6:de:27:95:69:10:2b:27:
         3f:90:28:14:5f:b2:d2:3c:82:6b:4a:c0:24:70:1c:bc:19:be:
         e8:62:5c:73:0a:8f:2e:60:05:61:6d:76:b0:3b:46:af:f3:1c:
         81:82:39:68:ed:2a:56:be:ab:cb:37:6c:c6:53:a8:a5:5d:2b:
         2d:a0:05:22:39:41:58:cd:ac:64:14:0e:b2:2a:79:be:4f:a0:
         5f:b5:1b:5f:95:c4:76:0b:35:1c:1c:8d:25:72:9b:06:e9:74:
         5f:90:ec:bb:e5:e0:51:c1:35:1e:ff:90:95:cc:84:4d:af:e1:
         78:48:64:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nGSFanOTTEnhE9WqeTxNZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNzRiOTA4MTUxM2Q3N2U1M2ExZmYyMjViMzM0MDBmYmIz
OTEzNTUwHhcNMjYwNzI4MDUwMTA5WhcNMjYwNzI5MDUwMTA5WjAzMTEwLwYDVQQD
EygwM2VmYjliZWMwMGIzYmZmMDcwYTY4NzhmN2NkYzJkYmVkODRlZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwYPlvQXaIBQFhpP9BOhWbP5Kzl9
LRBwF+KRhmiCHOzoSX2FAj8y5H4a8G1CfHsqEZyHVPIlxttc49UADCwrtIeHhGy8
kZCGWZ+KeOlXcP23LOZzqP5MxDRMmGYeruX0mNQtjF60wSZdhIeF/1+Aeo91AVF/
IvZfHWUKS/WnY1ZsFGgKqubXrKcn3GZtzkkM5FYd8c4ascVBYF8NEddSAiN3AqkS
2HRG5nZRZn2oezLdVdbK+gsXSHoanxTq3wZ2SyjTXHpercSsJMU52eqq8jB0LUdZ
voha4Ak4xBlQFOMS3r2oSW8er3CeRYscWefnVLKGbNDmGJhjTLDk3B+TwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPvub7ACzv/BwpoePfNwtvthO+vMB8GA1UdIwQY
MBaAFDt0uQgVE9d+U6H/IlszQA+7ORNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzNTNUNCVVQxMzVUb2Y4aVd6TkFEN3M1RTFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82ZGNkMjItZGQ0ZS00NGRjLThlY2Mt
YWZmYjYwYjI5YTA0LzEvTzNTNUNCVVQxMzVUb2Y4aVd6TkFEN3M1RTFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS82ZGNkMjItZGQ0ZS00NGRjLThlY2MtYWZmYjYwYjI5YTA0
LzEvTzNTNUNCVVQxMzVUb2Y4aVd6TkFEN3M1RTFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmy5aoQlg
igwUwrvrzfzx6ldSX4qZxtTmzafuStcVJVoFbjNjw7xGLKqBXZBWNchBNfuJYYah
bMi35j4nz00rBKItRj+0XszjPUYwZ1Um25C4vwrfPA+hX3tGDKBbn08twcO4w7JC
6eUu/Pj+nxGZ/M++zPkpJOrSC0FBgszw5m2JKjkxvFqjpdbeJ5VpECsnP5AoFF+y
0jyCa0rAJHAcvBm+6GJccwqPLmAFYW12sDtGr/McgYI5aO0qVr6ryzdsxlOopV0r
LaAFIjlBWM2sZBQOsip5vk+gX7UbX5XEdgs1HByNJXKbBul0X5Dsu+XgUcE1Hv+Q
lcyETa/heEhkzg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:59 2026 by rpki-client