Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
File:                     oKzKnE_pv57fO8blyrxSg42TyxM.mft (raw, json)
Hash identifier:          TiBCo51WgWpvR2YSRAzpzpWDl3JAi3D1ixWBgKi87WE=
Subject key identifier:   5E:21:E6:48:F3:E8:62:7F:FC:AB:A5:91:47:8D:2F:A1:30:4D:91:5C
Authority key identifier: A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
Certificate issuer:       /CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
Certificate serial:       019E1F119A41F540804D5831AC6AF4E12D05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
Manifest number:          024F
Signing time:             Wed 13 May 2026 02:01:47 +0000
Manifest this update:     Wed 13 May 2026 02:01:47 +0000
Manifest next update:     Thu 14 May 2026 02:01:47 +0000
Files and hashes:         1: 4pI4a8-tsvH-3VDbaKXuIvjNMz8.roa (hash: f0CZY2S4Rcr1NYYNDzp2PZIOWVKIDfe5fbwBQKjurLE=)
                          2: Q3eIp9baoUXgGx7jMp7Mfn7uqX4.roa (hash: q1dXe35IoMpEAZcG9cyPr1eAH6iDIpKmxS9VDxb5LkE=)
                          3: UJmrzzmZkriiyqqLqg-H4VtX7kg.roa (hash: WDuI1Ev3hKiEKyqljuPHG/axZuaiMi/BKngrm5HtvP8=)
                          4: cDxC5PpD7MD4ru_6B5or7odQkzY.roa (hash: hDp5+cUx75dVaYsE3sJ55sHIF6z5d4S4CHAEo4z8EZc=)
                          5: oKzKnE_pv57fO8blyrxSg42TyxM.crl (hash: TFahYwq22jZAr4c4jaGkntOYwJhqIkTkkd2WRkM79Bo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:9a:41:f5:40:80:4d:58:31:ac:6a:f4:e1:2d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
        Validity
            Not Before: May 13 02:01:47 2026 GMT
            Not After : May 14 02:01:47 2026 GMT
        Subject: CN=5e21e648f3e8627ffcaba591478d2fa1304d915c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c4:2c:17:a9:9f:36:ee:1c:56:5b:21:c4:63:
                    9d:4c:b9:1b:84:01:ac:aa:61:d9:53:f8:5a:1e:18:
                    52:7f:f0:7c:a2:84:c0:5c:ff:73:8e:ad:f0:11:b6:
                    40:2c:dc:76:c2:40:6e:59:a5:57:93:70:09:4c:f2:
                    3a:1c:7b:67:3b:66:cb:33:d7:84:86:f7:f5:93:7d:
                    69:b2:87:49:56:d3:22:fa:de:cd:2a:52:0b:ba:25:
                    48:15:b3:8f:73:05:f2:f9:e5:fa:34:01:2b:c6:75:
                    69:e4:11:e2:79:06:cf:1a:17:ff:b3:dd:74:97:26:
                    02:a5:b9:a1:9c:ba:5d:1e:8f:72:b0:f5:f4:0f:23:
                    29:49:6a:d2:12:45:4a:60:84:10:91:ba:1f:7b:2b:
                    45:49:05:a3:23:03:95:ec:6e:bc:bc:09:8d:09:85:
                    8b:bb:bb:d2:dc:37:45:cb:1a:db:c0:bc:5d:8c:43:
                    f0:06:3f:92:bf:c3:06:cc:68:7a:b9:5b:e2:95:f7:
                    e7:9e:08:bb:c5:0c:a2:f9:2e:8c:1f:cf:1f:07:d6:
                    38:d2:62:7e:1b:9f:f3:78:dd:9a:30:11:43:7a:16:
                    41:2d:80:bf:73:59:c8:b2:1a:02:f9:b6:b2:e1:a3:
                    e5:b1:f4:31:d7:a3:ec:54:e2:84:77:87:c4:31:ab:
                    c4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:21:E6:48:F3:E8:62:7F:FC:AB:A5:91:47:8D:2F:A1:30:4D:91:5C
            X509v3 Authority Key Identifier:
                keyid:A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:16:f8:e6:d0:40:20:af:94:ee:67:c3:f3:58:9f:ef:41:0f:
         59:4a:be:82:b7:fc:33:e7:48:0c:17:82:b7:6d:55:d2:54:03:
         2d:c4:46:ae:4a:fc:7d:9d:27:6b:9c:b8:be:1b:89:df:a0:c3:
         b3:da:61:91:5f:65:b4:1e:80:8d:73:b1:8f:a2:99:9c:cc:6d:
         a5:70:dc:77:6f:34:df:e6:97:b7:ce:ff:72:e0:d9:fe:c6:07:
         f0:e7:fa:12:5c:63:d5:8b:b5:f9:7d:d4:8a:d5:92:69:75:88:
         be:1f:78:b5:e3:b4:bf:d0:1e:3e:fc:50:68:fa:d1:c4:d8:8a:
         43:00:4b:a9:5c:1e:6d:01:7c:77:10:00:cb:5f:62:ed:a1:5c:
         56:80:89:25:88:4f:bb:ca:53:b4:fb:8e:d4:00:4b:01:a8:69:
         bf:62:c6:23:9b:18:64:ef:b8:f8:b4:aa:66:7b:d3:35:f2:a1:
         d5:65:c1:9f:ae:c8:f3:4b:b7:37:a9:e2:42:2b:1c:a2:b2:b2:
         47:9e:51:d7:ce:1c:e6:18:2c:94:c0:77:17:01:f5:a3:4f:e5:
         d3:a9:5b:88:5d:12:a9:cf:af:5d:84:1f:04:49:e9:68:a8:7a:
         bf:5a:5a:39:04:16:bc:17:6b:19:0d:95:ea:3a:e1:75:d5:28:
         55:7e:a1:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEZpB9UCATVgxrGr04S0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYWNjYTljNGZlOWJmOWVkZjNiYzZlNWNhYmM1MjgzOGQ5
M2NiMTMwHhcNMjYwNTEzMDIwMTQ3WhcNMjYwNTE0MDIwMTQ3WjAzMTEwLwYDVQQD
Eyg1ZTIxZTY0OGYzZTg2MjdmZmNhYmE1OTE0NzhkMmZhMTMwNGQ5MTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8QsF6mfNu4cVlshxGOdTLkbhAGs
qmHZU/haHhhSf/B8ooTAXP9zjq3wEbZALNx2wkBuWaVXk3AJTPI6HHtnO2bLM9eE
hvf1k31psodJVtMi+t7NKlILuiVIFbOPcwXy+eX6NAErxnVp5BHieQbPGhf/s910
lyYCpbmhnLpdHo9ysPX0DyMpSWrSEkVKYIQQkbofeytFSQWjIwOV7G68vAmNCYWL
u7vS3DdFyxrbwLxdjEPwBj+Sv8MGzGh6uVvilffnngi7xQyi+S6MH88fB9Y40mJ+
G5/zeN2aMBFDehZBLYC/c1nIshoC+bay4aPlsfQx16PsVOKEd4fEMavEJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4h5kjz6GJ//KulkUeNL6EwTZFcMB8GA1UdIwQY
MBaAFKCsypxP6b+e3zvG5cq8UoONk8sTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0t6S25FX3B2NTdmTzhibHlyeFNnNDJUeXhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83YjYxMTAtOGM0Yi00YWY2LWE3Y2Et
MmVkZmUyNWJiNThhLzEvb0t6S25FX3B2NTdmTzhibHlyeFNnNDJUeXhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni83YjYxMTAtOGM0Yi00YWY2LWE3Y2EtMmVkZmUyNWJiNThh
LzEvb0t6S25FX3B2NTdmTzhibHlyeFNnNDJUeXhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxb45tBA
IK+U7mfD81if70EPWUq+grf8M+dIDBeCt21V0lQDLcRGrkr8fZ0na5y4vhuJ36DD
s9phkV9ltB6AjXOxj6KZnMxtpXDcd2803+aXt87/cuDZ/sYH8Of6Elxj1Yu1+X3U
itWSaXWIvh94teO0v9AePvxQaPrRxNiKQwBLqVwebQF8dxAAy19i7aFcVoCJJYhP
u8pTtPuO1ABLAahpv2LGI5sYZO+4+LSqZnvTNfKh1WXBn67I80u3N6niQiscorKy
R55R184c5hgslMB3FwH1o0/l06lbiF0Sqc+vXYQfBEnpaKh6v1paOQQWvBdrGQ2V
6jrhddUoVX6h3A==
-----END CERTIFICATE-----
Generated at Wed May 13 06:23:09 2026 by rpki-client