Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
File:                     OXBHadCH2f6PeQplVctPvvzSTTg.mft (raw, json)
Hash identifier:          9Fws5toSkScH6wjqilsAwnCulNRKPsZ3GbOVJYv78rU=
Subject key identifier:   87:06:83:67:1A:FC:80:9D:81:4A:79:C8:E7:CB:83:69:5B:D1:B2:3F
Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
Certificate issuer:       /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Certificate serial:       019E1C7E05D997CDDEADD592C7BBE7860EF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
Manifest number:          05BC
Signing time:             Tue 12 May 2026 14:01:21 +0000
Manifest this update:     Tue 12 May 2026 14:01:21 +0000
Manifest next update:     Wed 13 May 2026 14:01:21 +0000
Files and hashes:         1: AgJDjffcx13iFGg7O-6BTWa5Mi8.roa (hash: F0nKF0WSY8oAZJYmoA/vzmlCpRXcrLqKk16YPUwPz6o=)
                          2: CUqZc8hec0Ms-egOcTLYoCv3kIM.roa (hash: ZlTiAUnMG4BkW/1TEjOoZRHb8X1Pe28FH9YpKcWqV/8=)
                          3: OXBHadCH2f6PeQplVctPvvzSTTg.crl (hash: km5dv6IY0OFZN/Jz01S112FeUqbdd3FGXSlQXimZpz8=)
                          4: hiaLRXvZEWJHbVSfrWH639IpyGY.asa (hash: NEonAO1XE9fHfE9rdEUMWD5j05luJAvYlzVQQMAchnY=)
                          5: xiMdBnBAVbzMONM7bWyZSTHXags.roa (hash: R9sPzPBlp0RJe+m5WxmViRNBW2hNOa0kbVaZ9zt/4VA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7e:05:d9:97:cd:de:ad:d5:92:c7:bb:e7:86:0e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
        Validity
            Not Before: May 12 14:01:21 2026 GMT
            Not After : May 13 14:01:21 2026 GMT
        Subject: CN=870683671afc809d814a79c8e7cb83695bd1b23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a8:6c:e5:2d:e7:fd:fd:ba:c7:a4:24:e1:86:
                    c5:a8:19:09:e8:a3:e7:c2:4d:89:d2:c0:73:02:8f:
                    e4:18:1f:ba:fb:85:88:ee:f4:3e:b9:66:7a:8b:d0:
                    f4:85:73:fd:44:9a:52:fb:e8:8a:a7:c9:5c:80:b9:
                    f8:c2:8e:39:c9:a8:ad:d2:95:c8:aa:c5:9e:4f:b7:
                    6a:41:c3:e9:a4:f8:c9:cd:12:d9:10:5d:c5:c8:2d:
                    1f:76:73:9d:1a:ba:25:41:99:b2:c7:00:21:a5:74:
                    ce:66:6d:63:1e:b5:b1:b3:2c:82:f5:3b:6f:18:34:
                    40:f8:63:18:71:0f:d7:74:7d:33:3a:6e:29:25:cf:
                    e2:26:be:62:5c:bb:36:b3:b5:99:9d:4e:d3:0b:8b:
                    2c:7e:e0:d2:3c:25:86:1c:c8:df:24:e2:de:4e:da:
                    8c:cd:da:c2:f7:cb:fd:d5:2f:66:22:d2:01:77:42:
                    c3:1e:ce:39:bc:58:d8:dd:52:96:90:16:b6:b9:e2:
                    b9:58:a6:cf:04:79:ce:78:fb:a2:46:de:98:d8:e0:
                    19:23:ea:41:8d:fd:ca:64:eb:2a:0a:6e:79:e4:25:
                    9d:d7:1f:d9:35:06:0d:4b:21:2a:49:5a:4a:59:59:
                    45:78:3e:d7:66:f8:a9:04:27:86:d7:bb:65:74:6c:
                    37:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:06:83:67:1A:FC:80:9D:81:4A:79:C8:E7:CB:83:69:5B:D1:B2:3F
            X509v3 Authority Key Identifier:
                keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:34:23:1e:c6:8f:a8:a3:69:6b:56:b9:d4:4a:51:32:7d:b7:
         80:23:c9:e3:4d:85:d4:68:13:96:6e:f7:db:21:6d:17:e2:c7:
         7f:65:94:31:07:c2:26:6f:b6:3b:b7:cf:b6:19:df:04:1b:b1:
         3e:94:f8:c8:96:b2:c9:2b:12:e6:cd:db:b8:f8:8e:9b:03:83:
         3f:9a:1e:3f:af:f8:ab:97:e9:ba:1e:d0:8c:84:66:92:ad:61:
         e1:f7:22:8d:2a:33:ed:99:7b:e4:74:60:cf:a2:b0:90:67:b8:
         41:5c:c6:b4:43:6b:a8:e4:07:a3:90:cb:b5:bb:0f:b7:7a:98:
         e7:80:c1:1f:d3:d4:c2:4c:da:ca:9c:47:fc:b2:02:30:93:2d:
         f9:64:9c:1e:dd:c4:89:f7:17:27:aa:8a:38:11:af:fc:f2:76:
         90:70:41:08:40:f9:50:30:e4:94:ce:a0:ff:a0:01:af:44:62:
         1b:09:5d:38:ff:38:06:d1:c8:61:2f:93:69:d7:f4:80:b4:69:
         fe:61:63:df:ab:9e:dc:24:3f:37:d7:0b:71:0b:08:37:3d:22:
         07:96:40:27:d1:91:00:e2:f4:7c:e5:29:7e:ba:21:d0:ea:46:
         75:09:83:c2:9a:66:66:88:84:4e:f5:69:3f:f1:fc:41:9d:03:
         65:8d:1f:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfgXZl83erdWSx7vnhg7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzA0NzY5ZDA4N2Q5ZmU4Zjc5MGE2NTU1Y2I0ZmJlZmNk
MjRkMzgwHhcNMjYwNTEyMTQwMTIxWhcNMjYwNTEzMTQwMTIxWjAzMTEwLwYDVQQD
Eyg4NzA2ODM2NzFhZmM4MDlkODE0YTc5YzhlN2NiODM2OTViZDFiMjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Khs5S3n/f26x6Qk4YbFqBkJ6KPn
wk2J0sBzAo/kGB+6+4WI7vQ+uWZ6i9D0hXP9RJpS++iKp8lcgLn4wo45yait0pXI
qsWeT7dqQcPppPjJzRLZEF3FyC0fdnOdGrolQZmyxwAhpXTOZm1jHrWxsyyC9Ttv
GDRA+GMYcQ/XdH0zOm4pJc/iJr5iXLs2s7WZnU7TC4ssfuDSPCWGHMjfJOLeTtqM
zdrC98v91S9mItIBd0LDHs45vFjY3VKWkBa2ueK5WKbPBHnOePuiRt6Y2OAZI+pB
jf3KZOsqCm555CWd1x/ZNQYNSyEqSVpKWVlFeD7XZvipBCeG17tldGw3MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcGg2ca/ICdgUp5yOfLg2lb0bI/MB8GA1UdIwQY
MBaAFDlwR2nQh9n+j3kKZVXLT7780k04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjIt
ZTQ1MzUwNDE0ZGRmLzEvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjItZTQ1MzUwNDE0ZGRm
LzEvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzQjHsaP
qKNpa1a51EpRMn23gCPJ402F1GgTlm732yFtF+LHf2WUMQfCJm+2O7fPthnfBBux
PpT4yJayySsS5s3buPiOmwODP5oeP6/4q5fpuh7QjIRmkq1h4fcijSoz7Zl75HRg
z6KwkGe4QVzGtENrqOQHo5DLtbsPt3qY54DBH9PUwkzaypxH/LICMJMt+WScHt3E
ifcXJ6qKOBGv/PJ2kHBBCED5UDDklM6g/6ABr0RiGwldOP84BtHIYS+Tadf0gLRp
/mFj36ue3CQ/N9cLcQsINz0iB5ZAJ9GRAOL0fOUpfroh0OpGdQmDwppmZoiETvVp
P/H8QZ0DZY0f4w==
-----END CERTIFICATE-----
Generated at Tue May 12 21:49:01 2026 by rpki-client