Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
File:                     oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json)
Hash identifier:          dlPmUwvhigBRGD4t6tI0dijEy3JClYEnWALjo8jEpis=
Subject key identifier:   74:8B:33:F4:31:F7:34:FE:29:78:72:AC:75:8F:66:BF:05:B4:2C:81
Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
Certificate issuer:       /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Certificate serial:       019E205A253BDEBCCA16F55F66AB59BE3919
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
Manifest number:          093E
Signing time:             Wed 13 May 2026 08:00:38 +0000
Manifest this update:     Wed 13 May 2026 08:00:38 +0000
Manifest next update:     Thu 14 May 2026 08:00:38 +0000
Files and hashes:         1: 1-dKs6JiGc-gWNM_u3hT68Z-M9-E.roa (hash: NUuaKTsuVI94pE+iA9XsbEXpRar3w3VZVCIsvU2Qp6M=)
                          2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: cQzditAdkh7wQTtvo0C+wWZlu2tbImHmYxUBn7+oDQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:25:3b:de:bc:ca:16:f5:5f:66:ab:59:be:39:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
        Validity
            Not Before: May 13 08:00:38 2026 GMT
            Not After : May 14 08:00:38 2026 GMT
        Subject: CN=748b33f431f734fe297872ac758f66bf05b42c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ed:6c:ee:1d:02:26:71:c4:c5:c1:b4:04:06:
                    0e:b6:0c:d3:dd:6b:2b:e1:9a:d4:ce:4d:d1:76:91:
                    96:11:7d:76:11:03:3d:86:ba:e3:2b:4a:92:cc:34:
                    4d:59:1e:7c:b5:73:24:57:44:38:08:a7:b8:41:d7:
                    0c:78:f3:68:3e:a4:ee:65:85:72:5a:46:c5:62:25:
                    7b:08:7e:83:0a:41:27:92:17:d6:c4:31:35:51:0b:
                    87:9b:88:c7:cb:65:3d:5d:d7:99:a4:b6:26:fe:ed:
                    08:a5:9b:f5:cd:b6:7b:05:ad:2b:dc:3b:bb:d5:fd:
                    e2:c7:71:e8:93:fe:39:4a:da:b7:91:8d:a9:0a:a9:
                    99:ef:90:18:89:3d:2d:1b:99:76:68:2f:ac:14:48:
                    03:76:75:b4:42:2d:40:37:28:76:c0:53:34:2b:63:
                    85:cc:37:fe:f1:ff:b4:fe:df:7a:af:c6:f3:82:7f:
                    53:9d:1e:bd:b6:a4:09:d2:e8:19:e8:2b:48:d6:05:
                    2a:40:55:5e:62:fb:b3:16:c8:b1:90:f3:d8:54:36:
                    e1:da:98:24:10:28:72:4c:97:05:81:45:64:e6:96:
                    ca:70:18:58:41:ed:91:b2:56:dd:af:f2:3f:e1:00:
                    b4:e7:65:a4:1a:ff:87:76:2a:b7:7d:aa:3e:9d:ff:
                    aa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8B:33:F4:31:F7:34:FE:29:78:72:AC:75:8F:66:BF:05:B4:2C:81
            X509v3 Authority Key Identifier:
                keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e1:99:64:0f:0e:15:2d:f1:d5:86:f3:d5:ec:8b:6d:53:0e:
         d1:c1:91:ee:1b:50:a9:21:42:e0:52:7a:d2:61:79:f4:a4:be:
         68:d0:aa:13:bf:16:4c:98:4c:46:9b:79:32:dd:34:ea:56:d4:
         89:0e:a5:1a:b9:ed:5f:e2:eb:b8:2d:00:5b:b1:38:a6:36:06:
         14:bc:f7:5d:18:72:e2:14:09:5f:90:e3:49:ab:eb:8a:49:d5:
         5e:1d:12:78:db:78:51:c5:f4:af:24:20:82:75:9e:a8:1f:35:
         b5:f0:fa:33:a7:73:07:3a:8c:ed:68:72:b8:f1:b0:56:68:d0:
         f3:b0:c8:e8:44:23:81:5b:b1:a5:e2:d1:30:df:f6:42:ed:27:
         a7:eb:07:28:2b:3f:7f:be:b9:49:35:73:f2:57:05:2c:ff:29:
         4a:98:3c:e6:0c:96:8f:56:a7:0b:95:b9:49:3b:cf:94:a1:84:
         50:2c:ea:ee:3d:f5:8e:47:a2:e1:b1:c4:d0:17:b1:c1:03:42:
         ce:6a:9d:56:d6:7c:0f:d7:dc:ba:b4:8d:30:a6:8b:25:43:75:
         8e:48:0d:27:d8:4d:cf:27:05:f9:2f:30:95:a1:27:9e:74:8e:
         f8:a1:ec:fa:f0:17:6b:f8:52:5d:87:e6:fb:7e:a4:0c:5b:2c:
         dd:db:be:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWiU73rzKFvVfZqtZvjkZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwY2VmMWNhYTM0NTliOGIwMzljMjE3ODEzNjQ4ZGNhYmNl
OGMyZDMwHhcNMjYwNTEzMDgwMDM4WhcNMjYwNTE0MDgwMDM4WjAzMTEwLwYDVQQD
Eyg3NDhiMzNmNDMxZjczNGZlMjk3ODcyYWM3NThmNjZiZjA1YjQyYzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO1s7h0CJnHExcG0BAYOtgzT3Wsr
4ZrUzk3RdpGWEX12EQM9hrrjK0qSzDRNWR58tXMkV0Q4CKe4QdcMePNoPqTuZYVy
WkbFYiV7CH6DCkEnkhfWxDE1UQuHm4jHy2U9XdeZpLYm/u0IpZv1zbZ7Ba0r3Du7
1f3ix3Hok/45Stq3kY2pCqmZ75AYiT0tG5l2aC+sFEgDdnW0Qi1ANyh2wFM0K2OF
zDf+8f+0/t96r8bzgn9TnR69tqQJ0ugZ6CtI1gUqQFVeYvuzFsixkPPYVDbh2pgk
EChyTJcFgUVk5pbKcBhYQe2Rslbdr/I/4QC052WkGv+Hdiq3fao+nf+qKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSLM/Qx9zT+KXhyrHWPZr8FtCyBMB8GA1UdIwQY
MBaAFKDO8cqjRZuLA5wheBNkjcq86MLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84NThlZDgtNzMxYS00NzYxLTgyYzAt
NmIwMTc5ZWUxZGQ5LzEvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84NThlZDgtNzMxYS00NzYxLTgyYzAtNmIwMTc5ZWUxZGQ5
LzEvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+GZZA8O
FS3x1Ybz1eyLbVMO0cGR7htQqSFC4FJ60mF59KS+aNCqE78WTJhMRpt5Mt006lbU
iQ6lGrntX+LruC0AW7E4pjYGFLz3XRhy4hQJX5DjSavriknVXh0SeNt4UcX0ryQg
gnWeqB81tfD6M6dzBzqM7WhyuPGwVmjQ87DI6EQjgVuxpeLRMN/2Qu0np+sHKCs/
f765STVz8lcFLP8pSpg85gyWj1anC5W5STvPlKGEUCzq7j31jkei4bHE0BexwQNC
zmqdVtZ8D9fcurSNMKaLJUN1jkgNJ9hNzycF+S8wlaEnnnSO+KHs+vAXa/hSXYfm
+36kDFss3du+Gw==
-----END CERTIFICATE-----
Generated at Wed May 13 13:15:37 2026 by rpki-client