Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
File:                     oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft (raw, json)
Hash identifier:          hMqc4W35Dc79SBKMuGYjM5krk+kXYymDrxHZnbeI5Ms=
Subject key identifier:   A6:7C:68:36:C1:F8:AB:ED:E6:14:76:83:6F:2E:A3:37:3F:F1:04:82
Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
Certificate issuer:       /CN=a16512b8a262bad599a3b023358c5ceccac9e085
Certificate serial:       019EC0DB33194E03DD073A55D0FC3B56012F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
Manifest number:          064D
Signing time:             Sat 13 Jun 2026 12:00:51 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:51 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:51 +0000
Files and hashes:         1: o-XODVf1hZc2qeOEskGvrZ916vI.asa (hash: t+rCBxLchg6lnut9oPzJlegb7IG7iCHZF9SoXwZVIuE=)
                          2: oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl (hash: 3Zo4/13ogcPl06TMQgV1TL18xCLjuaHwrKqS3XnvlGw=)
                          3: rLgcyfnB8tNzYpyiG52yAUCegpk.roa (hash: 9Pa3pX/aD3GvriHAqwyCAXLTpVPiEkOQNy834tS1eLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:33:19:4e:03:dd:07:3a:55:d0:fc:3b:56:01:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085
        Validity
            Not Before: Jun 13 12:00:51 2026 GMT
            Not After : Jun 14 12:00:51 2026 GMT
        Subject: CN=a67c6836c1f8abede61476836f2ea3373ff10482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:96:45:81:7a:b6:09:40:5d:cb:97:80:2e:
                    e5:9e:52:24:c8:73:9e:90:ab:f0:24:a3:4c:21:bb:
                    ae:7b:ca:9d:d3:39:2f:87:f7:40:53:c6:ad:c8:35:
                    a6:b5:b0:82:a7:28:19:94:78:e1:d5:a6:0e:15:52:
                    f9:b8:92:e1:34:46:7f:fe:12:24:6e:e3:46:85:75:
                    f0:ae:00:80:d8:2f:95:8a:85:95:ef:94:02:c5:88:
                    61:cc:d4:95:e0:1a:7d:c8:5d:d2:8a:55:d6:48:55:
                    00:f6:35:76:1e:df:1e:b0:7c:e3:f0:e2:2b:70:d0:
                    ab:b1:5b:d4:af:a7:2e:1a:f1:f9:b7:7d:0a:69:48:
                    94:05:01:76:81:10:ce:bf:c0:bd:27:ea:2d:b2:56:
                    30:9e:b6:f9:5a:ce:56:4b:75:fd:6e:ae:cf:e6:72:
                    ba:09:3e:f3:89:02:71:38:12:48:54:ed:a3:70:19:
                    93:38:f6:77:be:e7:30:3d:bc:63:f4:4d:ec:22:1a:
                    26:7d:c9:4e:d8:32:e8:76:e7:5c:75:64:75:11:31:
                    05:25:a2:9c:fa:89:8f:6d:c4:1e:73:1e:c3:0a:ab:
                    e8:f4:14:45:b3:5f:ee:f7:62:1b:68:53:a4:81:94:
                    72:c7:d0:77:3b:fe:c0:54:96:06:b0:d3:72:65:1e:
                    32:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7C:68:36:C1:F8:AB:ED:E6:14:76:83:6F:2E:A3:37:3F:F1:04:82
            X509v3 Authority Key Identifier:
                keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:0f:b1:cf:92:af:27:4c:71:f3:eb:f9:29:76:35:4b:b6:07:
         3a:e6:99:ec:40:cc:64:ef:ff:16:a6:6b:69:cf:44:f3:1a:68:
         84:6a:ed:03:45:93:82:6f:26:b5:a6:dc:83:30:09:0b:b7:19:
         47:34:d0:11:1b:7e:1a:d3:ae:1d:20:0d:46:43:ae:2d:46:8d:
         d6:0f:fa:3d:0a:72:84:68:50:56:ea:c4:89:19:35:fe:d1:a1:
         82:90:64:1c:76:1a:91:e8:2f:6f:70:3d:2e:73:52:19:ed:cf:
         95:c8:86:77:17:b8:d1:38:c1:31:cb:91:6b:f2:ac:1b:51:06:
         4f:df:3b:cc:bf:8c:f9:53:a6:68:bd:93:d6:cf:ca:d6:34:09:
         16:07:ba:e7:62:2c:bb:25:8d:29:b9:f0:9a:96:89:4b:a9:07:
         ad:53:b0:0e:dd:3b:fb:ee:13:fe:99:43:c7:ac:2c:07:2a:d6:
         de:d9:ca:40:49:d9:db:94:32:65:e1:84:fc:b6:d7:15:c3:4e:
         fc:14:10:60:98:1f:20:15:72:4f:c8:fd:9f:44:55:d5:f5:f0:
         d9:e1:b7:4d:24:a3:cb:fb:8b:b6:90:86:2d:b9:44:ff:44:c4:
         17:d0:91:9d:5b:30:17:51:a1:82:6d:83:bc:58:60:e0:99:01:
         06:24:f3:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2zMZTgPdBzpV0Pw7VgEvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNjUxMmI4YTI2MmJhZDU5OWEzYjAyMzM1OGM1Y2VjY2Fj
OWUwODUwHhcNMjYwNjEzMTIwMDUxWhcNMjYwNjE0MTIwMDUxWjAzMTEwLwYDVQQD
EyhhNjdjNjgzNmMxZjhhYmVkZTYxNDc2ODM2ZjJlYTMzNzNmZjEwNDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqmWRYF6tglAXcuXgC7lnlIkyHOe
kKvwJKNMIbuue8qd0zkvh/dAU8atyDWmtbCCpygZlHjh1aYOFVL5uJLhNEZ//hIk
buNGhXXwrgCA2C+VioWV75QCxYhhzNSV4Bp9yF3SilXWSFUA9jV2Ht8esHzj8OIr
cNCrsVvUr6cuGvH5t30KaUiUBQF2gRDOv8C9J+otslYwnrb5Ws5WS3X9bq7P5nK6
CT7ziQJxOBJIVO2jcBmTOPZ3vucwPbxj9E3sIhomfclO2DLodudcdWR1ETEFJaKc
+omPbcQecx7DCqvo9BRFs1/u92IbaFOkgZRyx9B3O/7AVJYGsNNyZR4yIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZ8aDbB+Kvt5hR2g28uozc/8QSCMB8GA1UdIwQY
MBaAFKFlEriiYrrVmaOwIzWMXOzKyeCFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1dVU3VLSml1dFdabzdBak5ZeGM3TXJKNElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84YWEwODUtY2FkYy00NDZlLWJiZTgt
YzllYzNhOThmOWEzLzEvb1dVU3VLSml1dFdabzdBak5ZeGM3TXJKNElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84YWEwODUtY2FkYy00NDZlLWJiZTgtYzllYzNhOThmOWEz
LzEvb1dVU3VLSml1dFdabzdBak5ZeGM3TXJKNElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdA+xz5Kv
J0xx8+v5KXY1S7YHOuaZ7EDMZO//FqZrac9E8xpohGrtA0WTgm8mtabcgzAJC7cZ
RzTQERt+GtOuHSANRkOuLUaN1g/6PQpyhGhQVurEiRk1/tGhgpBkHHYakegvb3A9
LnNSGe3PlciGdxe40TjBMcuRa/KsG1EGT987zL+M+VOmaL2T1s/K1jQJFge652Is
uyWNKbnwmpaJS6kHrVOwDt07++4T/plDx6wsByrW3tnKQEnZ25QyZeGE/LbXFcNO
/BQQYJgfIBVyT8j9n0RV1fXw2eG3TSSjy/uLtpCGLblE/0TEF9CRnVswF1Ghgm2D
vFhg4JkBBiTzTg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:16:13 2026 by rpki-client