Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
File:                     oIwpap_lpgUVguWt5HVJhfbxGzE.mft (raw, json)
Hash identifier:          7F0Ttdhvk5WN4MLB5xSUIGWvGDNhANrVHQpoZljj6xA=
Subject key identifier:   F9:0D:CF:75:4C:78:13:C2:9E:9C:29:A4:F5:68:5F:C5:4F:63:C8:B9
Authority key identifier: A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31
Certificate issuer:       /CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
Certificate serial:       019EC06DDB127C8E9B664F859D956DB0B435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
Manifest number:          0184
Signing time:             Sat 13 Jun 2026 10:01:25 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:25 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:25 +0000
Files and hashes:         1: PZKZVJbLIiC-nyKzbha8Q1plbB0.roa (hash: OGaxQzQU67t4LsOvlqtFqnosSDCkJ4cDH47PaItpnpE=)
                          2: oIwpap_lpgUVguWt5HVJhfbxGzE.crl (hash: /4T/nk31xs0D142SpsrMPuiuLD2IIJB09RKoZhC/PqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:db:12:7c:8e:9b:66:4f:85:9d:95:6d:b0:b4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
        Validity
            Not Before: Jun 13 10:01:25 2026 GMT
            Not After : Jun 14 10:01:25 2026 GMT
        Subject: CN=f90dcf754c7813c29e9c29a4f5685fc54f63c8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d1:2c:f4:a2:7c:97:fd:74:27:d7:4f:6e:1c:
                    a3:27:5e:bb:d5:bc:54:4a:60:f7:d3:c1:54:6b:b4:
                    3a:9f:5e:72:80:49:92:3c:ae:cc:38:76:23:f7:f3:
                    5d:23:45:84:95:9f:d9:ef:da:77:7d:89:ab:66:2a:
                    12:91:69:79:73:cd:8e:f7:70:f4:bf:fd:72:89:2f:
                    b4:42:d8:0f:ea:08:d2:b4:85:d9:c1:38:77:ad:6f:
                    77:4b:e8:97:aa:a7:d1:8a:1c:83:67:86:3b:ea:81:
                    21:57:d7:e2:5d:42:f5:6c:38:e5:bb:ec:d6:87:68:
                    27:13:16:fa:69:68:84:d3:99:3d:63:28:c3:fa:9d:
                    f9:cf:5c:cc:a8:4d:22:53:c8:d5:77:6e:cf:7e:09:
                    3c:ab:4d:23:83:c7:f0:6d:3e:c3:92:8d:a5:e8:ba:
                    ec:e7:6e:19:a3:82:44:56:08:f8:45:be:31:38:63:
                    49:df:5b:69:0d:fb:6d:dd:a0:d0:1a:40:6e:00:41:
                    61:09:93:49:6b:22:ab:2b:9f:91:1c:e8:44:24:af:
                    26:9b:e8:7a:98:97:cb:5b:a9:0c:9b:63:f1:6c:70:
                    95:48:11:a0:fd:7f:df:59:80:3a:6a:e7:64:0d:61:
                    a0:ac:dd:81:e1:6a:f8:2a:3b:b3:55:cf:c9:67:9b:
                    59:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0D:CF:75:4C:78:13:C2:9E:9C:29:A4:F5:68:5F:C5:4F:63:C8:B9
            X509v3 Authority Key Identifier:
                keyid:A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:76:0f:b9:2e:fa:0f:48:d1:f5:c0:96:b8:a2:fe:39:e8:90:
         83:78:83:c3:46:6d:60:a2:86:c6:c0:52:0c:bc:e2:f3:e1:f6:
         3d:3f:65:db:bc:29:1f:2c:d1:87:db:cc:e5:a6:15:ff:d2:67:
         01:bf:13:81:a2:95:2d:8c:fa:f9:16:51:6b:64:b8:9d:e8:84:
         5e:4e:ff:22:14:60:60:dc:cb:d8:90:86:28:3a:bf:c6:f9:82:
         ce:53:3e:7c:34:e4:3b:c8:b0:57:c6:ee:e1:d6:76:f9:cf:7a:
         36:f0:34:da:eb:f7:b6:12:82:57:13:ba:64:4b:e6:69:7e:8a:
         a8:48:9b:e8:57:b8:7e:9d:43:31:cb:a7:1b:07:a3:7e:98:e9:
         90:1e:b4:fe:6e:39:7d:7c:0a:3d:e4:b6:c8:a4:52:3b:d2:fe:
         19:74:3f:98:99:02:d6:f6:06:e3:67:7b:05:a4:7b:6e:eb:ce:
         ec:eb:93:bd:63:c6:38:f1:0d:a3:b3:7c:02:db:66:87:4a:64:
         c6:aa:61:c8:80:63:d9:98:27:9e:c9:8b:fa:da:cc:a2:be:ed:
         d5:52:20:64:58:d5:87:f1:10:3e:ed:f6:af:9f:5f:45:a7:69:
         d5:22:b2:90:8e:a8:b7:b7:88:e7:40:71:a7:b1:a3:61:7a:90:
         d0:18:9e:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbdsSfI6bZk+FnZVtsLQ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOGMyOTZhOWZlNWE2MDUxNTgyZTVhZGU0NzU0OTg1ZjZm
MTFiMzEwHhcNMjYwNjEzMTAwMTI1WhcNMjYwNjE0MTAwMTI1WjAzMTEwLwYDVQQD
EyhmOTBkY2Y3NTRjNzgxM2MyOWU5YzI5YTRmNTY4NWZjNTRmNjNjOGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNEs9KJ8l/10J9dPbhyjJ1671bxU
SmD308FUa7Q6n15ygEmSPK7MOHYj9/NdI0WElZ/Z79p3fYmrZioSkWl5c82O93D0
v/1yiS+0QtgP6gjStIXZwTh3rW93S+iXqqfRihyDZ4Y76oEhV9fiXUL1bDjlu+zW
h2gnExb6aWiE05k9YyjD+p35z1zMqE0iU8jVd27Pfgk8q00jg8fwbT7Dko2l6Lrs
524Zo4JEVgj4Rb4xOGNJ31tpDftt3aDQGkBuAEFhCZNJayKrK5+RHOhEJK8mm+h6
mJfLW6kMm2PxbHCVSBGg/X/fWYA6audkDWGgrN2B4Wr4KjuzVc/JZ5tZCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkNz3VMeBPCnpwppPVoX8VPY8i5MB8GA1UdIwQY
MBaAFKCMKWqf5aYFFYLlreR1SYX28RsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0l3cGFwX2xwZ1VWZ3VXdDVIVkpoZmJ4R3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82MDA3ODktZDcxZC00OTY4LThiYTkt
YWZiN2U4ZTczMGNjLzEvb0l3cGFwX2xwZ1VWZ3VXdDVIVkpoZmJ4R3pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82MDA3ODktZDcxZC00OTY4LThiYTktYWZiN2U4ZTczMGNj
LzEvb0l3cGFwX2xwZ1VWZ3VXdDVIVkpoZmJ4R3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3YPuS76
D0jR9cCWuKL+OeiQg3iDw0ZtYKKGxsBSDLzi8+H2PT9l27wpHyzRh9vM5aYV/9Jn
Ab8TgaKVLYz6+RZRa2S4neiEXk7/IhRgYNzL2JCGKDq/xvmCzlM+fDTkO8iwV8bu
4dZ2+c96NvA02uv3thKCVxO6ZEvmaX6KqEib6Fe4fp1DMcunGwejfpjpkB60/m45
fXwKPeS2yKRSO9L+GXQ/mJkC1vYG42d7BaR7buvO7OuTvWPGOPENo7N8Attmh0pk
xqphyIBj2ZgnnsmL+trMor7t1VIgZFjVh/EQPu32r59fRadp1SKykI6ot7eI50Bx
p7GjYXqQ0Bie7w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:08:30 2026 by rpki-client