Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
File:                     O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft (raw, json)
Hash identifier:          OL39GGS6XjgvCIJiGhNKrx7xitGOlj7TJw76X3PP50k=
Subject key identifier:   1D:77:71:BF:C4:39:8C:5F:05:F8:D2:5D:56:C8:2D:63:A2:8C:29:B6
Authority key identifier: 3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
Certificate issuer:       /CN=3b53867284132eeccd56e6b155cf7f627d264f40
Certificate serial:       019F8E6BB95B2D99707FE6A50614575440F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
Manifest number:          01CC
Signing time:             Thu 23 Jul 2026 10:00:52 +0000
Manifest this update:     Thu 23 Jul 2026 10:00:52 +0000
Manifest next update:     Fri 24 Jul 2026 10:00:52 +0000
Files and hashes:         1: 3DUSLYibsJXd_Fv_mFQGMWyoD3E.asa (hash: 217ApHrz+ZFZBxQTuwBPGHegzD2Mli8dYOKOyw3Mk20=)
                          2: 8a6S-UC-PzVNfuKH4VEcSEi_3xs.roa (hash: ggJLncnSKUJfbzTsD0cgxExXtCcR+Y6TnGQ+ZK/8VVg=)
                          3: O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl (hash: oxtiD2IdP8IaLWyuoF/wOPMFrcdIOM4qd6lDZ3EDi+o=)
                          4: Zod6GEOcMGfwO02xipiRUjS5UHo.roa (hash: pJwxMJ8KyAb6ixNPNoNOHcynw+GKshz9SMdlh6JQuFk=)
                          5: bF4AIoJbZesIwX86iDSdyGssluQ.roa (hash: mpdkvKaWVXrslEPSu3+IjnM2tbW2AQwtygmvrWacIvU=)
                          6: hSst--j5VCqGQF-z8DIf_npvY-Y.roa (hash: BqwaIWDOiFPECUGgrwgZoSY04WbWfryAxU75uG2cx4A=)
                          7: y-sWnGP-0hQwy4lYSwzVC6rKYt0.asa (hash: 9jRAa+Up2q3z80Ly9J5h5nlaT4zsmd3d7aVIdsnLuHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 10:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:6b:b9:5b:2d:99:70:7f:e6:a5:06:14:57:54:40:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b53867284132eeccd56e6b155cf7f627d264f40
        Validity
            Not Before: Jul 23 10:00:52 2026 GMT
            Not After : Jul 24 10:00:52 2026 GMT
        Subject: CN=1d7771bfc4398c5f05f8d25d56c82d63a28c29b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:50:44:42:9b:10:a0:5e:f0:95:4c:45:f4:fc:
                    43:ad:51:c5:09:60:3e:92:7a:49:37:7a:89:33:56:
                    dc:37:0f:20:90:dd:4d:2a:1d:23:35:b9:a9:3e:e4:
                    66:f4:d6:66:9a:a8:fd:6d:5f:3b:c4:ac:7f:1e:17:
                    de:67:f9:2c:54:94:0b:de:42:43:bd:40:56:ec:28:
                    33:eb:0e:56:22:2e:11:c5:cb:8e:d2:32:22:57:ca:
                    c5:44:fe:72:ae:61:6a:fb:07:e1:db:a3:32:c1:07:
                    9a:f5:d9:7e:98:f8:28:fb:35:3b:00:96:ce:57:19:
                    50:92:1b:e0:3e:b8:db:45:17:9b:6b:f3:4d:90:dd:
                    b2:05:d4:11:ec:ba:40:9a:f0:b8:e4:90:e3:7e:41:
                    d8:fc:1d:d9:2a:44:f3:4b:c2:a2:cd:8d:3c:b3:8b:
                    e6:42:08:ca:00:0b:07:98:6c:69:37:b1:1b:dd:e6:
                    9d:c2:4b:8e:e7:d7:d4:1b:34:6f:df:ee:5e:4b:5b:
                    18:f6:42:b8:ec:8d:27:c9:be:a6:a3:7b:c7:78:dd:
                    af:a4:f4:f9:dd:c7:c4:0c:41:c7:b3:ed:24:d8:f0:
                    33:6a:0c:a0:4f:09:8a:3f:19:c8:b6:8e:f2:e1:15:
                    1d:23:cd:1d:54:dc:7f:13:85:ae:31:70:0a:b4:04:
                    75:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:77:71:BF:C4:39:8C:5F:05:F8:D2:5D:56:C8:2D:63:A2:8C:29:B6
            X509v3 Authority Key Identifier:
                keyid:3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:8c:a6:06:dd:c3:bd:56:11:1c:ee:6f:f2:48:f1:26:62:12:
         c2:6b:50:f4:f4:f7:b7:20:27:5b:cf:79:45:12:8b:79:b6:91:
         0a:4e:c4:a8:71:e3:86:dc:5e:e3:8a:0a:72:e5:3f:6b:35:f0:
         cb:af:a3:78:d1:d5:c4:fe:83:a5:7a:26:b3:16:51:46:e7:c6:
         98:55:ec:19:21:c9:88:53:58:28:01:02:d0:2b:92:1a:90:ad:
         f8:09:ff:e9:9b:9a:d6:63:b7:74:50:dc:96:ed:1e:40:d0:9a:
         73:3a:cb:47:5f:b8:47:15:b2:e3:e6:8a:b1:8e:1f:be:53:cc:
         01:80:a2:2b:f9:45:2d:13:61:84:fc:34:ff:af:c8:c5:1f:07:
         15:04:04:f1:60:da:0a:db:d0:55:21:2f:ba:af:0d:88:5f:b1:
         09:5f:39:fd:24:de:3c:83:a6:df:c0:21:1b:f0:b4:ca:43:1e:
         7a:02:dd:60:2b:08:a9:7b:20:01:ec:d0:72:6b:32:95:24:33:
         ba:6f:fe:13:42:0b:d9:8e:25:1b:aa:cd:fb:f3:54:d0:1c:eb:
         59:52:ed:35:8b:2b:08:b2:03:7c:da:6b:30:40:fe:9d:bc:ae:
         c1:f3:29:2a:38:29:57:73:5c:f7:ab:53:f3:fe:56:80:49:09:
         db:2d:4a:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Oa7lbLZlwf+alBhRXVEDwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNTM4NjcyODQxMzJlZWNjZDU2ZTZiMTU1Y2Y3ZjYyN2Qy
NjRmNDAwHhcNMjYwNzIzMTAwMDUyWhcNMjYwNzI0MTAwMDUyWjAzMTEwLwYDVQQD
EygxZDc3NzFiZmM0Mzk4YzVmMDVmOGQyNWQ1NmM4MmQ2M2EyOGMyOWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lBEQpsQoF7wlUxF9PxDrVHFCWA+
knpJN3qJM1bcNw8gkN1NKh0jNbmpPuRm9NZmmqj9bV87xKx/HhfeZ/ksVJQL3kJD
vUBW7Cgz6w5WIi4RxcuO0jIiV8rFRP5yrmFq+wfh26MywQea9dl+mPgo+zU7AJbO
VxlQkhvgPrjbRReba/NNkN2yBdQR7LpAmvC45JDjfkHY/B3ZKkTzS8KizY08s4vm
QgjKAAsHmGxpN7Eb3eadwkuO59fUGzRv3+5eS1sY9kK47I0nyb6mo3vHeN2vpPT5
3cfEDEHHs+0k2PAzagygTwmKPxnIto7y4RUdI80dVNx/E4WuMXAKtAR1OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB13cb/EOYxfBfjSXVbILWOijCm2MB8GA1UdIwQY
MBaAFDtThnKEEy7szVbmsVXPf2J9Jk9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzFPR2NvUVRMdXpOVnVheFZjOV9ZbjBtVDBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zYWQ1NTgtNTFhMC00ODAwLWJiZjgt
YjIwODU4ZTI5OTNiLzEvTzFPR2NvUVRMdXpOVnVheFZjOV9ZbjBtVDBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zYWQ1NTgtNTFhMC00ODAwLWJiZjgtYjIwODU4ZTI5OTNi
LzEvTzFPR2NvUVRMdXpOVnVheFZjOV9ZbjBtVDBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAooymBt3D
vVYRHO5v8kjxJmISwmtQ9PT3tyAnW895RRKLebaRCk7EqHHjhtxe44oKcuU/azXw
y6+jeNHVxP6DpXomsxZRRufGmFXsGSHJiFNYKAEC0CuSGpCt+An/6Zua1mO3dFDc
lu0eQNCaczrLR1+4RxWy4+aKsY4fvlPMAYCiK/lFLRNhhPw0/6/IxR8HFQQE8WDa
CtvQVSEvuq8NiF+xCV85/STePIOm38AhG/C0ykMeegLdYCsIqXsgAezQcmsylSQz
um/+E0IL2Y4lG6rN+/NU0BzrWVLtNYsrCLIDfNprMED+nbyuwfMpKjgpV3Nc96tT
8/5WgEkJ2y1KIw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:11:44 2026 by rpki-client