Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/oPMwHuU4Tk093ptGqxya37wyOlY.mft
File:                     oPMwHuU4Tk093ptGqxya37wyOlY.mft (raw, json)
Hash identifier:          wSiT4MA8zNzWL9HkRARilOosF/Mkwgesr4aTgBXGapc=
Subject key identifier:   6D:38:F9:28:A4:23:57:E3:3F:5A:BD:43:D3:88:FA:46:54:9D:19:9E
Authority key identifier: A0:F3:30:1E:E5:38:4E:4D:3D:DE:9B:46:AB:1C:9A:DF:BC:32:3A:56
Certificate issuer:       /CN=a0f3301ee5384e4d3dde9b46ab1c9adfbc323a56
Certificate serial:       019EC14973CE69FB871680C44D147CC83689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oPMwHuU4Tk093ptGqxya37wyOlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/oPMwHuU4Tk093ptGqxya37wyOlY.mft
Manifest number:          25
Signing time:             Sat 13 Jun 2026 14:01:16 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:16 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:16 +0000
Files and hashes:         1: Y7vYwAv1LWiRIY-wwmvv3YD0-mI.asa (hash: ogaz1bRuBZLm0ASsA+GLN8jXycjKjEYZFSh3KsHRpsg=)
                          2: oPMwHuU4Tk093ptGqxya37wyOlY.crl (hash: dBaFLGjSLegHfURkSNFOY9zYIdGrW6xFWDgxrPu69uU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/oPMwHuU4Tk093ptGqxya37wyOlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/oPMwHuU4Tk093ptGqxya37wyOlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oPMwHuU4Tk093ptGqxya37wyOlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:73:ce:69:fb:87:16:80:c4:4d:14:7c:c8:36:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f3301ee5384e4d3dde9b46ab1c9adfbc323a56
        Validity
            Not Before: Jun 13 14:01:16 2026 GMT
            Not After : Jun 14 14:01:16 2026 GMT
        Subject: CN=6d38f928a42357e33f5abd43d388fa46549d199e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:98:66:4c:5f:63:2b:7c:b9:af:88:18:e5:
                    da:97:e8:04:fd:4d:b8:03:d4:66:07:da:d6:b2:9f:
                    1c:bf:29:2d:27:b3:7e:aa:0a:6a:00:c8:84:70:16:
                    ee:12:39:58:ea:db:22:75:bc:ec:fc:8a:cc:05:26:
                    8d:07:ba:0d:60:3c:7f:d5:c7:b7:8c:f6:99:62:fc:
                    56:26:4b:e9:90:59:8b:3d:4c:12:d6:b7:98:45:b8:
                    e6:5a:dc:5e:09:c5:73:b2:5c:95:41:95:f9:aa:a7:
                    f5:06:10:a6:57:92:46:fb:9c:75:05:c0:39:f6:dc:
                    66:3f:18:ee:22:02:02:7e:6a:86:00:19:7d:2c:45:
                    e5:12:86:83:d9:b7:0d:97:f8:ce:91:26:ff:8e:6a:
                    df:7b:2b:a5:a2:c6:47:10:b3:93:75:89:87:c3:fa:
                    40:ce:4b:11:98:9a:d8:94:b3:c2:31:15:ef:bc:3e:
                    1f:bd:49:2c:83:e9:12:09:51:50:8a:c4:d7:53:15:
                    77:7b:28:29:a1:ad:4c:1b:92:28:78:f9:6b:67:62:
                    0d:4d:84:50:23:3a:f4:7a:cf:55:cd:02:42:43:8e:
                    e0:57:3f:be:59:7b:ac:44:09:3a:72:bb:e8:ed:30:
                    c3:75:e6:47:93:d1:87:e5:64:3d:70:0a:8a:24:87:
                    a5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:38:F9:28:A4:23:57:E3:3F:5A:BD:43:D3:88:FA:46:54:9D:19:9E
            X509v3 Authority Key Identifier:
                keyid:A0:F3:30:1E:E5:38:4E:4D:3D:DE:9B:46:AB:1C:9A:DF:BC:32:3A:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPMwHuU4Tk093ptGqxya37wyOlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/oPMwHuU4Tk093ptGqxya37wyOlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/oPMwHuU4Tk093ptGqxya37wyOlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:00:e9:b2:74:b4:1a:42:30:f0:3e:8b:79:30:3b:cb:80:c3:
         4d:70:22:c4:4e:f2:51:0e:fb:55:cb:f3:52:82:52:76:b2:e5:
         5d:17:2a:36:b0:2a:78:c3:f5:f7:4f:99:aa:ad:24:74:e4:67:
         0e:3d:83:0b:a6:46:80:ea:f7:fc:29:c2:6f:35:3e:9c:61:8f:
         10:cc:01:87:4e:a0:5c:64:3e:a2:1e:d3:b8:a0:6f:61:47:e5:
         26:8c:f6:1b:bc:a7:3b:ef:a2:43:65:8f:ab:a7:02:23:5a:c4:
         25:7e:1a:6f:f2:22:b6:eb:25:3d:12:7c:8f:ab:29:2c:17:bc:
         5b:b7:46:ec:98:67:15:85:06:1d:b0:b6:f5:ea:7d:d8:c8:a4:
         c3:bb:cf:24:09:fc:d0:45:0c:30:41:7d:21:30:21:47:3d:aa:
         e1:d3:c7:16:e6:5b:93:65:aa:91:96:89:1d:73:ec:f5:45:a7:
         cb:dd:63:91:69:d6:77:5d:53:aa:0e:7f:1d:14:ee:91:2b:c1:
         95:d3:07:39:da:01:31:de:3a:7c:f8:ed:b4:da:4f:96:d0:b4:
         8a:24:c4:e6:b3:1b:34:d5:a0:d2:6f:89:29:99:7b:7e:92:b2:
         a6:ac:0d:e6:d9:84:8a:e3:eb:37:2b:2f:87:19:ba:7c:3c:4d:
         5a:cb:93:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSXPOafuHFoDETRR8yDaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZjMzMDFlZTUzODRlNGQzZGRlOWI0NmFiMWM5YWRmYmMz
MjNhNTYwHhcNMjYwNjEzMTQwMTE2WhcNMjYwNjE0MTQwMTE2WjAzMTEwLwYDVQQD
Eyg2ZDM4ZjkyOGE0MjM1N2UzM2Y1YWJkNDNkMzg4ZmE0NjU0OWQxOTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkWYZkxfYyt8ua+IGOXal+gE/U24
A9RmB9rWsp8cvyktJ7N+qgpqAMiEcBbuEjlY6tsidbzs/IrMBSaNB7oNYDx/1ce3
jPaZYvxWJkvpkFmLPUwS1reYRbjmWtxeCcVzslyVQZX5qqf1BhCmV5JG+5x1BcA5
9txmPxjuIgICfmqGABl9LEXlEoaD2bcNl/jOkSb/jmrfeyulosZHELOTdYmHw/pA
zksRmJrYlLPCMRXvvD4fvUksg+kSCVFQisTXUxV3eygpoa1MG5IoePlrZ2INTYRQ
Izr0es9VzQJCQ47gVz++WXusRAk6crvo7TDDdeZHk9GH5WQ9cAqKJIelwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG04+SikI1fjP1q9Q9OI+kZUnRmeMB8GA1UdIwQY
MBaAFKDzMB7lOE5NPd6bRqscmt+8MjpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1BNd0h1VTRUazA5M3B0R3F4eWEzN3d5T2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMTExNjQtY2ZmMS00YTQ0LTg3M2Qt
ZjI2MzU5ZmJhZjU3LzEvb1BNd0h1VTRUazA5M3B0R3F4eWEzN3d5T2xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iMTExNjQtY2ZmMS00YTQ0LTg3M2QtZjI2MzU5ZmJhZjU3
LzEvb1BNd0h1VTRUazA5M3B0R3F4eWEzN3d5T2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgDpsnS0
GkIw8D6LeTA7y4DDTXAixE7yUQ77VcvzUoJSdrLlXRcqNrAqeMP190+Zqq0kdORn
Dj2DC6ZGgOr3/CnCbzU+nGGPEMwBh06gXGQ+oh7TuKBvYUflJoz2G7ynO++iQ2WP
q6cCI1rEJX4ab/IituslPRJ8j6spLBe8W7dG7JhnFYUGHbC29ep92Mikw7vPJAn8
0EUMMEF9ITAhRz2q4dPHFuZbk2WqkZaJHXPs9UWny91jkWnWd11Tqg5/HRTukSvB
ldMHOdoBMd46fPjttNpPltC0iiTE5rMbNNWg0m+JKZl7fpKypqwN5tmEiuPrNysv
hxm6fDxNWsuT1g==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:48:59 2026 by rpki-client