Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
File:                     OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json)
Hash identifier:          H1sTwHQ96k9IT2l/10C+WlU168XalGiqXd5zmPp1Gq8=
Subject key identifier:   DF:66:2C:BF:66:C5:79:6B:9A:F5:E7:0F:43:5C:00:5D:EC:0A:2A:24
Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Certificate issuer:       /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Certificate serial:       019F91A43DD3A29C9A79D6BDB15C2B7406EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
Manifest number:          093D
Signing time:             Fri 24 Jul 2026 01:01:27 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:27 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:27 +0000
Files and hashes:         1: KYeOuPy-sh1SLcoPNXSyZQIU0MI.roa (hash: Sr5K6ccTAcON+APYQXJhtPURh7qUu9XiFdatnlSg6xs=)
                          2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: Wp67VVHyGoyVTlnoc2p3EwtIHZdie12L9MNeCKMK0xs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:3d:d3:a2:9c:9a:79:d6:bd:b1:5c:2b:74:06:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
        Validity
            Not Before: Jul 24 01:01:27 2026 GMT
            Not After : Jul 25 01:01:27 2026 GMT
        Subject: CN=df662cbf66c5796b9af5e70f435c005dec0a2a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d6:66:60:84:29:b3:52:ef:cf:e5:ad:d4:62:
                    3d:b5:62:db:0d:11:a2:ec:9f:b1:f6:0a:26:76:42:
                    04:be:21:e3:ad:91:64:cd:23:6a:56:c9:1e:50:69:
                    a1:b7:21:08:96:7a:2a:e6:50:db:9f:79:c7:b5:60:
                    de:96:95:6a:92:a4:6a:66:63:d9:0c:9d:1b:42:c3:
                    94:fd:d2:d5:e9:6b:f6:c6:0d:f0:ee:75:28:4e:db:
                    ef:96:ec:43:23:9f:0f:52:4f:8f:95:27:9e:f2:4c:
                    f7:01:12:01:60:b3:9e:3c:01:32:fd:ab:94:9c:aa:
                    8e:29:01:5b:57:5c:a5:86:74:25:28:ba:7c:b3:32:
                    8f:5a:39:88:05:9f:0f:6b:6f:7d:90:53:16:f5:05:
                    cb:6d:53:80:84:97:ef:5f:24:fd:b6:87:58:b0:07:
                    3b:b1:23:a8:93:9a:b9:ab:e6:e7:96:3e:7b:f2:79:
                    40:a4:e0:29:0d:0d:80:1e:82:b3:32:18:70:b8:24:
                    db:47:31:ed:b3:80:dd:35:3d:09:27:e7:02:2f:c0:
                    e7:6e:ba:ec:9a:53:ac:6f:a6:8c:77:de:4f:da:d3:
                    7f:8d:bc:c8:c2:80:10:2d:de:32:3e:f1:99:20:a6:
                    95:8e:96:3f:65:e5:3e:87:5f:be:ba:fc:da:a0:77:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:66:2C:BF:66:C5:79:6B:9A:F5:E7:0F:43:5C:00:5D:EC:0A:2A:24
            X509v3 Authority Key Identifier:
                keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:88:d1:cf:f9:db:41:c2:4b:ae:5f:36:ee:d2:4e:8e:d5:9c:
         b3:41:26:be:f5:bf:d6:c7:b2:0b:15:2a:82:56:c9:cd:54:94:
         94:bb:5f:be:f1:b6:36:72:40:f9:9a:3c:21:57:d8:d2:a5:5a:
         7e:d7:9d:d4:9f:45:9f:61:c5:05:44:ed:e7:55:39:95:93:d4:
         af:18:8c:88:ff:b0:54:d5:7d:33:2b:da:d4:a5:c3:86:f9:d5:
         b1:4b:8c:df:94:cf:38:69:ae:9e:98:c6:41:6c:ed:5c:5f:97:
         79:ed:a4:de:1f:f4:df:99:10:50:85:7a:51:0f:4f:36:d8:1c:
         da:42:69:d9:f7:05:11:35:ab:ef:c5:6d:b2:f0:29:31:df:e9:
         b6:b8:6f:5a:72:92:4e:9e:b5:21:02:d5:7e:24:8d:eb:62:f7:
         8f:ce:83:36:8b:ab:c0:22:1e:64:ab:23:c1:ff:5b:74:49:89:
         9a:92:24:4b:eb:e8:ca:26:1d:ca:01:41:9b:18:50:32:2a:0d:
         7f:06:7e:66:fc:ed:14:08:a4:f6:ae:c6:8f:1d:bb:90:49:67:
         20:22:38:cb:26:e9:e8:c7:e4:0d:9b:6c:54:ac:6e:a5:d4:50:
         3c:68:e8:25:0c:a9:0f:96:90:03:b7:36:f2:af:33:88:55:42:
         e4:ab:fc:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RpD3Topyaeda9sVwrdAbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NjRjZGVlZTM0NjExNmNiOTY0MWJhNDgwMGY1NWI5OTA2
ZGMzYTUwHhcNMjYwNzI0MDEwMTI3WhcNMjYwNzI1MDEwMTI3WjAzMTEwLwYDVQQD
EyhkZjY2MmNiZjY2YzU3OTZiOWFmNWU3MGY0MzVjMDA1ZGVjMGEyYTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9ZmYIQps1Lvz+Wt1GI9tWLbDRGi
7J+x9gomdkIEviHjrZFkzSNqVskeUGmhtyEIlnoq5lDbn3nHtWDelpVqkqRqZmPZ
DJ0bQsOU/dLV6Wv2xg3w7nUoTtvvluxDI58PUk+PlSee8kz3ARIBYLOePAEy/auU
nKqOKQFbV1ylhnQlKLp8szKPWjmIBZ8Pa299kFMW9QXLbVOAhJfvXyT9todYsAc7
sSOok5q5q+bnlj578nlApOApDQ2AHoKzMhhwuCTbRzHts4DdNT0JJ+cCL8Dnbrrs
mlOsb6aMd95P2tN/jbzIwoAQLd4yPvGZIKaVjpY/ZeU+h1++uvzaoHfPowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9mLL9mxXlrmvXnD0NcAF3sCiokMB8GA1UdIwQY
MBaAFDlkze7jRhFsuWQbpIAPVbmQbcOlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hMDE4YTctNmI1Yy00MjM5LTg5Yjct
MmEwMjQ3ZmJiNmQ1LzEvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hMDE4YTctNmI1Yy00MjM5LTg5YjctMmEwMjQ3ZmJiNmQ1
LzEvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIjRz/nb
QcJLrl827tJOjtWcs0EmvvW/1seyCxUqglbJzVSUlLtfvvG2NnJA+Zo8IVfY0qVa
fted1J9Fn2HFBUTt51U5lZPUrxiMiP+wVNV9Myva1KXDhvnVsUuM35TPOGmunpjG
QWztXF+Xee2k3h/035kQUIV6UQ9PNtgc2kJp2fcFETWr78VtsvApMd/ptrhvWnKS
Tp61IQLVfiSN62L3j86DNourwCIeZKsjwf9bdEmJmpIkS+voyiYdygFBmxhQMioN
fwZ+ZvztFAik9q7Gjx27kElnICI4yybp6MfkDZtsVKxupdRQPGjoJQypD5aQA7c2
8q8ziFVC5Kv8TQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:47 2026 by rpki-client