Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
File:                     oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft (raw, json)
Hash identifier:          BovAIbPmSWiBD0jKzsOsgeX23IAQdnCrnggpMhEPz6M=
Subject key identifier:   2C:BA:9B:D6:41:6B:FF:28:43:F0:E1:16:78:17:00:B9:5A:3A:80:74
Authority key identifier: A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77
Certificate issuer:       /CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
Certificate serial:       019FA93E183CC8FD3B284B7409B86857B80A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
Manifest number:          0184
Signing time:             Tue 28 Jul 2026 15:00:46 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:46 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:46 +0000
Files and hashes:         1: WyQBbpbR1AvAKhTsL71x6qgch7U.asa (hash: 043dlMMNEhoWphFwOdB6ptcTMcRQS915TTU2W0PNpeI=)
                          2: oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl (hash: FaWgAICB0H9TFpse/wvHXBkk7WtJma67/s2zOBeNu0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:18:3c:c8:fd:3b:28:4b:74:09:b8:68:57:b8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
        Validity
            Not Before: Jul 28 15:00:46 2026 GMT
            Not After : Jul 29 15:00:46 2026 GMT
        Subject: CN=2cba9bd6416bff2843f0e116781700b95a3a8074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7d:50:6b:d3:b2:68:d1:3b:f7:dd:e8:6c:34:
                    e0:3f:4e:92:a1:cd:f9:10:a9:a6:46:07:03:4f:25:
                    9d:f4:1f:a0:16:61:4a:e1:2d:14:9e:f2:7b:3b:ad:
                    10:60:d3:55:7c:a7:51:7f:83:7e:8c:83:d9:85:ff:
                    e3:df:4d:e8:0e:a0:f2:16:f4:69:93:bb:d7:02:46:
                    30:a6:4a:ca:ae:53:6c:1b:32:a6:d5:27:43:dd:3d:
                    a7:34:34:a3:12:db:75:73:c8:48:88:36:f7:52:ed:
                    39:f0:88:30:4c:6d:a0:00:31:5f:00:5e:ca:4d:f0:
                    8d:a4:68:e4:1d:35:39:27:2f:f9:01:69:62:21:c1:
                    09:93:a8:5b:a5:6b:27:c7:c3:16:58:44:fc:69:9c:
                    a9:cc:78:3b:34:a1:73:c1:5b:ce:da:61:13:b6:27:
                    f0:cf:35:75:8c:c5:0d:38:c0:11:4e:00:bf:87:6d:
                    2b:99:6d:5d:05:02:e3:f0:ac:40:c5:f5:84:1c:a7:
                    fe:e7:23:50:e1:ca:3f:c4:1c:a9:ba:e2:5a:3c:40:
                    a8:e6:64:83:c2:5b:2d:24:9f:fd:32:5d:33:d4:d1:
                    b6:39:fd:76:3a:06:ab:7e:e0:60:b9:10:03:af:b5:
                    75:3d:bf:33:00:49:e5:c2:ba:fe:6b:70:87:19:48:
                    d6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BA:9B:D6:41:6B:FF:28:43:F0:E1:16:78:17:00:B9:5A:3A:80:74
            X509v3 Authority Key Identifier:
                keyid:A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:1f:9a:37:d3:96:81:4b:73:77:4c:03:31:0b:01:c7:ed:b4:
         95:97:d3:d4:47:a3:51:6f:75:85:2d:2e:c7:45:10:d6:d5:98:
         fe:af:ac:e6:d4:70:d8:33:84:46:54:5e:d5:d9:bd:d3:c2:7f:
         32:fd:03:2d:83:a5:42:fc:8c:44:09:f7:e0:f7:35:e7:4a:ff:
         49:fc:c1:9a:74:b8:df:32:8d:f4:b2:d2:17:a7:14:f1:c5:99:
         45:af:b8:34:55:18:a4:37:49:94:06:2d:3e:dd:c6:43:46:fc:
         4c:da:8c:fb:c9:83:b9:1c:6b:8e:56:a9:23:c0:ad:04:62:51:
         70:ca:00:77:12:82:0e:98:5d:5c:41:43:4c:f0:fa:be:9d:1a:
         aa:16:80:20:0c:bf:e3:d4:12:27:12:ea:c2:fe:7f:cb:54:af:
         12:29:29:fd:2e:bb:86:9f:b9:0a:b5:02:b2:15:fc:c6:a5:c8:
         f0:2d:0e:99:7f:26:fd:7e:b4:d6:43:14:ac:47:61:c7:07:77:
         22:ca:49:79:f9:9c:b2:a2:2e:10:ec:69:34:6c:c5:54:ba:6a:
         cf:42:5c:13:6c:dc:2f:0d:6e:0a:08:2d:69:90:5c:a9:f0:46:
         ef:7b:df:86:d3:ff:18:1a:2c:95:dc:75:12:01:d2:e3:ba:80:
         95:90:a5:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPhg8yP07KEt0CbhoV7gKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZTQwODdmZTFlZGRkNmZkNDI2YjE5ZGMyYTM3MWE4NzYy
ODI5NzcwHhcNMjYwNzI4MTUwMDQ2WhcNMjYwNzI5MTUwMDQ2WjAzMTEwLwYDVQQD
EygyY2JhOWJkNjQxNmJmZjI4NDNmMGUxMTY3ODE3MDBiOTVhM2E4MDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5X1Qa9OyaNE7993obDTgP06Soc35
EKmmRgcDTyWd9B+gFmFK4S0UnvJ7O60QYNNVfKdRf4N+jIPZhf/j303oDqDyFvRp
k7vXAkYwpkrKrlNsGzKm1SdD3T2nNDSjEtt1c8hIiDb3Uu058IgwTG2gADFfAF7K
TfCNpGjkHTU5Jy/5AWliIcEJk6hbpWsnx8MWWET8aZypzHg7NKFzwVvO2mETtifw
zzV1jMUNOMARTgC/h20rmW1dBQLj8KxAxfWEHKf+5yNQ4co/xBypuuJaPECo5mSD
wlstJJ/9Ml0z1NG2Of12OgarfuBguRADr7V1Pb8zAEnlwrr+a3CHGUjW6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCy6m9ZBa/8oQ/DhFngXALlaOoB0MB8GA1UdIwQY
MBaAFKDkCH/h7d1v1CaxncKjcah2KCl3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb09RSWYtSHQzV19VSnJHZHdxTnhxSFlvS1hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84YmI1MWEtMTU0Yi00ZDcwLWEyODAt
Nzc3ODJmNDhiZjBjLzEvb09RSWYtSHQzV19VSnJHZHdxTnhxSFlvS1hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy84YmI1MWEtMTU0Yi00ZDcwLWEyODAtNzc3ODJmNDhiZjBj
LzEvb09RSWYtSHQzV19VSnJHZHdxTnhxSFlvS1hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOR+aN9OW
gUtzd0wDMQsBx+20lZfT1EejUW91hS0ux0UQ1tWY/q+s5tRw2DOERlRe1dm908J/
Mv0DLYOlQvyMRAn34Pc150r/SfzBmnS43zKN9LLSF6cU8cWZRa+4NFUYpDdJlAYt
Pt3GQ0b8TNqM+8mDuRxrjlapI8CtBGJRcMoAdxKCDphdXEFDTPD6vp0aqhaAIAy/
49QSJxLqwv5/y1SvEikp/S67hp+5CrUCshX8xqXI8C0OmX8m/X601kMUrEdhxwd3
IspJefmcsqIuEOxpNGzFVLpqz0JcE2zcLw1uCggtaZBcqfBG73vfhtP/GBosldx1
EgHS47qAlZClBg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:40:08 2026 by rpki-client