Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
File:                     C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json)
Hash identifier:          UJo0hbvEli0Co0h5EVgpeIJfFSprME0Jds4hBrEF66s=
Subject key identifier:   53:9F:0E:32:3C:9F:0B:11:E2:F9:F5:AA:A1:CE:4C:F2:AD:5F:DB:E4
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Certificate issuer:       /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial:       019EBF917D437657F718F2C969741366FBBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
Manifest number:          0E1A
Signing time:             Sat 13 Jun 2026 06:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:43 +0000
Files and hashes:         1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: FoouWKpG/B/mvgQ74wKKxiiWqXjmxOmDk5p+AF+j/54=)
                          2: ReyUn6tKBOELp3PqtRdTiZN56xc.roa (hash: o1NTV7KD/4RS51aQo1dWC0QW0kteepHZMeaZiAB8YZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:7d:43:76:57:f7:18:f2:c9:69:74:13:66:fb:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
        Validity
            Not Before: Jun 13 06:00:43 2026 GMT
            Not After : Jun 14 06:00:43 2026 GMT
        Subject: CN=539f0e323c9f0b11e2f9f5aaa1ce4cf2ad5fdbe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5b:bb:e2:45:99:9b:83:f1:43:24:00:92:93:
                    38:98:2f:b8:ee:21:07:95:d5:cc:ca:0c:9b:9d:87:
                    8d:68:13:01:59:13:7a:d1:dc:2c:6e:8c:22:84:aa:
                    21:fc:eb:24:be:26:bb:b4:15:44:7a:c6:e6:56:9f:
                    9e:b4:c9:7a:c6:b5:13:c2:fb:06:28:f1:39:57:10:
                    81:c3:c1:16:3a:a3:e4:42:88:26:c0:83:42:ea:43:
                    53:d5:c6:d9:1b:ed:5a:5b:de:ea:f2:88:ac:eb:90:
                    9c:1e:e0:55:23:ed:50:bd:c4:76:11:39:94:6b:e9:
                    87:2d:1d:e8:3f:4e:35:69:ba:58:d1:d9:d1:a0:94:
                    f2:2f:e7:5e:64:98:64:ba:26:27:39:4d:b2:cb:11:
                    9f:89:05:d3:db:b9:53:84:a3:57:48:b3:20:d9:2c:
                    a3:8d:9a:30:08:2b:72:a3:fe:43:aa:f2:ae:6a:77:
                    bf:12:5c:89:81:ae:09:a0:f5:88:a3:20:2b:f8:01:
                    7a:0c:43:ae:8d:cd:5a:66:cd:21:98:53:12:23:88:
                    de:a4:bb:11:22:52:ad:d5:2c:14:05:a9:3c:e1:82:
                    8b:1e:1b:d3:b4:85:c6:a8:c4:7b:81:db:46:4b:4e:
                    09:c8:67:2d:2b:60:ed:ab:04:4a:e8:e2:07:73:9f:
                    66:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9F:0E:32:3C:9F:0B:11:E2:F9:F5:AA:A1:CE:4C:F2:AD:5F:DB:E4
            X509v3 Authority Key Identifier:
                keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a7:e2:99:c3:62:07:19:18:28:64:c3:2f:60:b1:64:bd:4c:
         53:80:91:8a:de:5b:ac:b6:1f:2b:05:ef:01:d7:06:56:42:f8:
         44:69:18:72:12:80:cf:88:5e:d7:16:56:0f:7b:5d:2f:5f:76:
         ad:cb:c0:d8:14:03:eb:d6:0d:05:8b:97:c1:5d:10:f2:e5:14:
         85:a8:ac:51:bf:8b:e5:d2:25:d5:d7:21:ee:2c:85:fd:e4:65:
         94:ea:85:42:45:78:b2:ec:83:ce:c0:cc:c7:6b:73:60:1c:05:
         b2:41:26:49:9f:d9:4e:23:e2:1e:9b:96:a1:bd:05:2f:d6:0b:
         96:06:45:04:b4:3d:5f:d7:04:bb:94:46:c3:2f:bc:4c:25:fb:
         46:d1:9b:b8:fe:ed:53:67:9b:a8:08:4f:7b:8a:aa:75:7b:db:
         b4:27:c0:a0:df:73:6b:c6:ce:ed:26:bc:df:1e:a1:b2:c3:14:
         f9:fd:85:2b:f4:de:24:c9:c6:2a:1c:3d:97:2e:bd:6f:9e:82:
         97:b0:4f:fa:51:fa:3e:32:96:de:3c:59:32:9c:ba:58:09:5d:
         43:6f:64:2b:88:e4:41:84:6b:7d:28:34:54:0a:f3:ae:a9:fd:
         3f:cd:0d:b3:1d:bb:03:c1:d0:f4:ec:8f:56:fe:12:75:a6:e9:
         01:37:ed:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kX1Ddlf3GPLJaXQTZvu/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZWEwZWNkZDYzNGEzYzA3NWUzNWRiOWRjYTU3NjhlNGY3
NmNkODUwHhcNMjYwNjEzMDYwMDQzWhcNMjYwNjE0MDYwMDQzWjAzMTEwLwYDVQQD
Eyg1MzlmMGUzMjNjOWYwYjExZTJmOWY1YWFhMWNlNGNmMmFkNWZkYmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41u74kWZm4PxQyQAkpM4mC+47iEH
ldXMygybnYeNaBMBWRN60dwsbowihKoh/Oskvia7tBVEesbmVp+etMl6xrUTwvsG
KPE5VxCBw8EWOqPkQogmwINC6kNT1cbZG+1aW97q8ois65CcHuBVI+1QvcR2ETmU
a+mHLR3oP041abpY0dnRoJTyL+deZJhkuiYnOU2yyxGfiQXT27lThKNXSLMg2Syj
jZowCCtyo/5DqvKuane/ElyJga4JoPWIoyAr+AF6DEOujc1aZs0hmFMSI4jepLsR
IlKt1SwUBak84YKLHhvTtIXGqMR7gdtGS04JyGctK2DtqwRK6OIHc59mqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOfDjI8nwsR4vn1qqHOTPKtX9vkMB8GA1UdIwQY
MBaAFAvqDs3WNKPAdeNdudyldo5Pds2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTIt
MjNmY2M1MjRlYTg4LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTItMjNmY2M1MjRlYTg4
LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6fimcNi
BxkYKGTDL2CxZL1MU4CRit5brLYfKwXvAdcGVkL4RGkYchKAz4he1xZWD3tdL192
rcvA2BQD69YNBYuXwV0Q8uUUhaisUb+L5dIl1dch7iyF/eRllOqFQkV4suyDzsDM
x2tzYBwFskEmSZ/ZTiPiHpuWob0FL9YLlgZFBLQ9X9cEu5RGwy+8TCX7RtGbuP7t
U2ebqAhPe4qqdXvbtCfAoN9za8bO7Sa83x6hssMU+f2FK/TeJMnGKhw9ly69b56C
l7BP+lH6PjKW3jxZMpy6WAldQ29kK4jkQYRrfSg0VArzrqn9P80Nsx27A8HQ9OyP
Vv4SdabpATftkw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:02:13 2026 by rpki-client