Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
File:                     OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft (raw, json)
Hash identifier:          W7PQuErgbe4gG2jb493/BxOFbLLzao8qOx/uRGHiO5s=
Subject key identifier:   77:C6:08:95:EA:D8:BE:4D:1C:B4:8F:2F:D3:75:B8:C8:75:7E:89:70
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Certificate issuer:       /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial:       019D29CED5B6F0F294B597FDA97D24EAA668
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
Manifest number:          0E1B
Signing time:             Thu 26 Mar 2026 11:01:54 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:54 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:54 +0000
Files and hashes:         1: 1AdLwVTQwnRojaJc6oKg4bE5e10.roa (hash: SmldC7KFTFrB2ovoO23QX0S7PhV2KBqhDfb2PIUZ9dY=)
                          2: OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl (hash: tCCTa6o0i2rECMrzUVQrgS0I1F5AAAqS4Ay3pHHml7M=)
                          3: RYsY-o2i4jJuo5LcGcM8XUCbb9c.roa (hash: Dw7b6pkuG5rO21BY1jXBfmGu/ri7kYZ0iuN6r4DYx0Q=)
                          4: YAzw4t4zF4HrK6DQM0Hi6OJnv_c.roa (hash: Czpsw7Ht+JmwRHsAFUGdIdcpmViWugcfHRbmpORJDMk=)
                          5: i1ce_KCZyzzJnWCLHJltrqd5osU.roa (hash: YFwwgtjx89C2fEmhpNXxjUv1MUQKaMCAp+nvJdfMp5o=)
                          6: qw0bNos2uMNz09JenRAlkTtNmd8.roa (hash: SLKj00aaETL606oUEHzZc3k3yjfYWagWu8LRBWMxnBA=)
                          7: sYth0C5gNTA4Nn0ZVlj2vFu-rcA.roa (hash: YQlDl2GO98hMqxb9t2YAM1lWkbesF46HgOB5GJrP+Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:d5:b6:f0:f2:94:b5:97:fd:a9:7d:24:ea:a6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
        Validity
            Not Before: Mar 26 11:01:54 2026 GMT
            Not After : Mar 27 11:01:54 2026 GMT
        Subject: CN=77c60895ead8be4d1cb48f2fd375b8c8757e8970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:50:67:0f:6d:81:ae:2c:e9:3b:1d:d4:44:
                    f7:ef:a7:24:ce:d4:3d:bd:e4:14:a0:29:ac:2d:1c:
                    f3:fa:1b:a1:cf:6c:cd:73:13:c1:d6:69:e7:b2:e0:
                    34:19:a5:e1:1b:d6:30:4e:a3:d9:76:a6:e7:9c:ac:
                    f1:c8:65:66:d5:8f:af:db:19:17:08:af:f4:04:db:
                    1c:94:1e:6e:d8:dc:57:5a:aa:74:19:44:29:93:44:
                    72:8d:4e:e8:22:98:5b:91:6c:b6:55:da:be:60:cb:
                    df:99:69:13:b2:f0:98:b9:c7:29:a9:f7:fe:d9:81:
                    0f:0f:5a:d6:02:73:ea:62:3e:7e:17:88:49:4f:40:
                    a1:b8:7b:18:9d:13:e4:0e:15:15:fa:39:91:59:45:
                    1b:bd:da:91:57:5c:c4:e8:61:2f:54:f4:3e:96:bf:
                    de:89:d1:c2:b8:34:7c:34:3e:5d:56:c4:35:46:03:
                    07:f3:af:16:49:99:eb:8b:5a:09:b0:09:30:51:47:
                    d7:52:be:04:6f:8f:27:b0:56:11:da:c2:b5:89:39:
                    cc:48:25:ca:f2:b0:d7:e0:0b:ce:cc:25:c1:75:8a:
                    ac:76:d4:6b:a0:9f:ac:bb:62:7a:12:16:3e:70:e6:
                    81:be:0f:2f:26:ce:f6:b6:1e:02:37:a3:cf:49:e1:
                    74:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C6:08:95:EA:D8:BE:4D:1C:B4:8F:2F:D3:75:B8:C8:75:7E:89:70
            X509v3 Authority Key Identifier:
                keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:7a:03:cc:f8:3b:47:ad:92:2c:e1:9f:68:cf:f4:6f:63:00:
         37:92:92:bb:83:65:92:98:36:21:87:ce:2e:af:cd:73:d3:43:
         65:e4:f4:0d:6f:5e:92:28:2b:3f:a6:71:49:99:c8:14:c6:8d:
         6f:33:a2:d5:e8:2c:01:01:72:62:07:39:7b:8e:22:16:b2:0b:
         1c:b7:0a:06:65:63:f7:64:c5:15:0a:62:a2:d6:30:4d:15:a4:
         04:b1:a3:6f:ab:15:01:cc:4d:0c:2a:59:ce:72:85:15:64:3f:
         bd:77:a0:10:55:ce:7e:57:06:b9:33:0a:d7:30:04:ab:a8:72:
         2a:40:7a:b7:fe:92:2b:2f:8d:f2:2c:e0:3d:d2:a0:fc:cd:5f:
         28:57:c3:be:18:fd:ea:df:a0:1b:62:38:7c:bf:9b:65:d9:0e:
         d8:7b:70:47:99:1e:2c:1a:dc:8f:d9:f2:91:93:0d:7e:05:b3:
         20:bd:14:39:4f:c1:80:35:54:4e:c6:9a:94:19:4b:de:af:7c:
         84:82:67:9b:85:bd:9e:e5:eb:df:5b:24:fb:74:b1:66:c9:71:
         54:c5:96:5e:a4:89:03:66:03:8f:87:1f:86:ce:e5:07:ff:b3:
         1e:a0:93:7a:c8:c2:99:2b:58:ec:1e:e6:8c:cf:72:09:f4:72:
         1a:77:9c:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pztW28PKUtZf9qX0k6qZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzI0NWQwNDkyZWVkZTU5YjA0NWI1YmUxZmQ0ZWI5MTYx
YmM0MTcwHhcNMjYwMzI2MTEwMTU0WhcNMjYwMzI3MTEwMTU0WjAzMTEwLwYDVQQD
Eyg3N2M2MDg5NWVhZDhiZTRkMWNiNDhmMmZkMzc1YjhjODc1N2U4OTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLVQZw9tga4s6Tsd1ET376ckztQ9
veQUoCmsLRzz+huhz2zNcxPB1mnnsuA0GaXhG9YwTqPZdqbnnKzxyGVm1Y+v2xkX
CK/0BNsclB5u2NxXWqp0GUQpk0RyjU7oIphbkWy2Vdq+YMvfmWkTsvCYuccpqff+
2YEPD1rWAnPqYj5+F4hJT0ChuHsYnRPkDhUV+jmRWUUbvdqRV1zE6GEvVPQ+lr/e
idHCuDR8ND5dVsQ1RgMH868WSZnri1oJsAkwUUfXUr4Eb48nsFYR2sK1iTnMSCXK
8rDX4AvOzCXBdYqsdtRroJ+su2J6EhY+cOaBvg8vJs72th4CN6PPSeF0XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfGCJXq2L5NHLSPL9N1uMh1folwMB8GA1UdIwQY
MBaAFDlyRdBJLu3lmwRbW+H9TrkWG8QXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEt
YzQ0MmExOGYxZWZjLzEvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEtYzQ0MmExOGYxZWZj
LzEvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXoDzPg7
R62SLOGfaM/0b2MAN5KSu4Nlkpg2IYfOLq/Nc9NDZeT0DW9ekigrP6ZxSZnIFMaN
bzOi1egsAQFyYgc5e44iFrILHLcKBmVj92TFFQpiotYwTRWkBLGjb6sVAcxNDCpZ
znKFFWQ/vXegEFXOflcGuTMK1zAEq6hyKkB6t/6SKy+N8izgPdKg/M1fKFfDvhj9
6t+gG2I4fL+bZdkO2HtwR5keLBrcj9nykZMNfgWzIL0UOU/BgDVUTsaalBlL3q98
hIJnm4W9nuXr31sk+3SxZslxVMWWXqSJA2YDj4cfhs7lB/+zHqCTesjCmStY7B7m
jM9yCfRyGneccQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:52:25 2026 by rpki-client