Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
File:                     o3F-pUuVlC-tgalD7bHBD535Svs.mft (raw, json)
Hash identifier:          RIUppCoied68gE0O4VwfMbPsSEdGid1GrRmXB69oayA=
Subject key identifier:   76:19:7A:7A:2E:8A:57:64:77:13:08:04:E0:C2:BE:A6:EF:43:50:E6
Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
Certificate issuer:       /CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Certificate serial:       019F93C91742B3F264D5829E460B06EB5ECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
Manifest number:          194F
Signing time:             Fri 24 Jul 2026 11:00:57 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:57 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:57 +0000
Files and hashes:         1: QR6JCvg_yJC5a7s73DyQnmCM4I0.roa (hash: s2aQJ0ionOhGA/bORwEZg/xbj2CgaA7Pt0VzSP4Fylw=)
                          2: o3F-pUuVlC-tgalD7bHBD535Svs.crl (hash: TJr0dWwmQEzZ5VSwFDXWf/X+eRQN6oh35MmBfEOgu2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:17:42:b3:f2:64:d5:82:9e:46:0b:06:eb:5e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb
        Validity
            Not Before: Jul 24 11:00:57 2026 GMT
            Not After : Jul 25 11:00:57 2026 GMT
        Subject: CN=76197a7a2e8a576477130804e0c2bea6ef4350e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:cf:aa:2d:ed:45:d7:83:f5:8c:5c:b6:e8:
                    73:0e:f2:ea:ea:4b:42:8e:f5:32:94:73:ed:df:f0:
                    7e:f2:73:0f:7a:4d:52:8e:55:b9:3f:73:7e:3d:6d:
                    3a:b7:2f:aa:7f:19:cf:bb:85:68:bf:49:a3:e6:9e:
                    ad:d8:3a:26:d0:ee:bc:f5:ac:a6:cc:0d:ac:1f:24:
                    92:5a:03:6c:7e:3f:57:db:ee:2a:fd:cc:b3:b1:f8:
                    09:67:b4:91:b4:11:7a:cd:21:55:62:25:ad:8d:d2:
                    79:88:b4:7b:83:50:35:34:a6:21:c9:c3:7a:8e:92:
                    bb:24:49:f5:73:11:a4:45:c8:a9:d4:c6:5c:27:6e:
                    1f:ab:ef:50:81:80:7a:86:f6:89:36:fe:47:20:a6:
                    f5:02:c5:ac:ba:22:96:48:ec:5f:ea:8e:92:bb:56:
                    50:64:dd:98:25:f3:96:b9:05:b0:0c:2b:7f:68:05:
                    8f:aa:40:32:43:c0:6f:ec:5c:bc:df:4b:d0:35:5c:
                    ba:a2:a8:41:da:e6:ea:56:5a:3f:22:e7:5b:4d:cc:
                    75:e0:dd:bb:79:c4:86:3e:e3:80:50:62:af:95:bf:
                    ce:21:44:f9:3e:47:c2:4a:eb:57:d6:c7:8c:72:6c:
                    77:7c:26:f6:b1:8d:9e:10:a5:a6:6b:a5:e6:17:92:
                    8d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:19:7A:7A:2E:8A:57:64:77:13:08:04:E0:C2:BE:A6:EF:43:50:E6
            X509v3 Authority Key Identifier:
                keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d4:72:cd:53:b3:bd:59:d7:d8:de:75:0f:74:e2:58:da:74:
         14:d2:88:11:d4:3e:e2:5c:20:0d:6d:22:d6:d0:75:e8:bf:fb:
         08:5e:b3:75:1e:93:2c:d1:f5:03:1f:99:96:6d:31:48:e3:72:
         f2:62:1e:fa:12:92:04:a7:65:7e:58:61:8f:ed:b3:0b:68:b5:
         0a:05:8e:89:ad:47:39:f6:dc:cd:38:40:2d:f7:78:a8:b0:f2:
         a1:3d:37:f4:3c:ce:3e:dc:52:51:7a:02:b9:43:ef:f6:29:94:
         e7:94:b2:e3:37:2c:d6:ae:4e:6c:6b:8c:91:63:38:48:1d:a5:
         5e:3a:4c:b0:0c:34:62:0e:53:be:74:0e:96:14:c2:68:a6:f9:
         38:71:dc:d1:8d:06:bf:73:be:23:2e:55:dc:68:40:bc:79:a6:
         37:c7:1e:5b:a5:30:ab:bd:4b:d0:2a:d8:93:ec:d6:67:90:03:
         6a:56:9b:11:e5:bc:08:d6:81:d7:aa:bd:e4:0f:21:af:9a:4c:
         b8:94:d2:4b:96:41:44:99:eb:ad:1d:69:d8:91:fb:61:9c:a6:
         ff:da:87:6d:05:0e:c0:a1:70:56:8d:76:43:ce:5b:68:76:f0:
         a7:f5:69:0f:94:54:5a:3a:54:17:1d:c2:27:11:08:09:96:37:
         6f:91:3c:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyRdCs/Jk1YKeRgsG617LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNzE3ZWE1NGI5NTk0MmZhZDgxYTk0M2VkYjFjMTBmOWRm
OTRhZmIwHhcNMjYwNzI0MTEwMDU3WhcNMjYwNzI1MTEwMDU3WjAzMTEwLwYDVQQD
Eyg3NjE5N2E3YTJlOGE1NzY0NzcxMzA4MDRlMGMyYmVhNmVmNDM1MGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPLPqi3tRdeD9YxctuhzDvLq6ktC
jvUylHPt3/B+8nMPek1SjlW5P3N+PW06ty+qfxnPu4Vov0mj5p6t2Dom0O689aym
zA2sHySSWgNsfj9X2+4q/cyzsfgJZ7SRtBF6zSFVYiWtjdJ5iLR7g1A1NKYhycN6
jpK7JEn1cxGkRcip1MZcJ24fq+9QgYB6hvaJNv5HIKb1AsWsuiKWSOxf6o6Su1ZQ
ZN2YJfOWuQWwDCt/aAWPqkAyQ8Bv7Fy830vQNVy6oqhB2ubqVlo/IudbTcx14N27
ecSGPuOAUGKvlb/OIUT5PkfCSutX1seMcmx3fCb2sY2eEKWma6XmF5KN5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYZenouildkdxMIBODCvqbvQ1DmMB8GA1UdIwQY
MBaAFKNxfqVLlZQvrYGpQ+2xwQ+d+Ur7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNGLXBVdVZsQy10Z2FsRDdiSEJENTM1U3ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9iNTQ4ZDUtODJmZS00NmMyLWI5OTct
MTU3YWQwYWM1MjBhLzEvbzNGLXBVdVZsQy10Z2FsRDdiSEJENTM1U3ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9iNTQ4ZDUtODJmZS00NmMyLWI5OTctMTU3YWQwYWM1MjBh
LzEvbzNGLXBVdVZsQy10Z2FsRDdiSEJENTM1U3ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdRyzVOz
vVnX2N51D3TiWNp0FNKIEdQ+4lwgDW0i1tB16L/7CF6zdR6TLNH1Ax+Zlm0xSONy
8mIe+hKSBKdlflhhj+2zC2i1CgWOia1HOfbczThALfd4qLDyoT039DzOPtxSUXoC
uUPv9imU55Sy4zcs1q5ObGuMkWM4SB2lXjpMsAw0Yg5TvnQOlhTCaKb5OHHc0Y0G
v3O+Iy5V3GhAvHmmN8ceW6Uwq71L0CrYk+zWZ5ADalabEeW8CNaB16q95A8hr5pM
uJTSS5ZBRJnrrR1p2JH7YZym/9qHbQUOwKFwVo12Q85baHbwp/VpD5RUWjpUFx3C
JxEICZY3b5E8wg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:00:02 2026 by rpki-client