Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
File:                     C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json)
Hash identifier:          HgtB1khzhOTP8ahbeGbEENx77/RtIHAxW7x+B99Szd8=
Subject key identifier:   8C:0D:E8:BB:0E:9E:9A:6C:55:C7:8D:77:56:0C:00:34:1C:A0:3C:45
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Certificate issuer:       /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial:       019F90232919253904037E5F05905D6F93E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
Manifest number:          0E86
Signing time:             Thu 23 Jul 2026 18:00:50 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:50 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:50 +0000
Files and hashes:         1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: iM+6cAx3Vy2jFv4E55ST/ETirKyZRRcNG6eBMOle46I=)
                          2: ReyUn6tKBOELp3PqtRdTiZN56xc.roa (hash: o1NTV7KD/4RS51aQo1dWC0QW0kteepHZMeaZiAB8YZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:29:19:25:39:04:03:7e:5f:05:90:5d:6f:93:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
        Validity
            Not Before: Jul 23 18:00:50 2026 GMT
            Not After : Jul 24 18:00:50 2026 GMT
        Subject: CN=8c0de8bb0e9e9a6c55c78d77560c00341ca03c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:cd:f1:df:40:ac:d9:ba:a6:2a:60:81:7e:3d:
                    9f:88:6d:0d:45:d4:9d:3c:61:68:fc:58:6e:5e:e8:
                    a1:0b:ad:27:d0:c7:8a:8c:99:9c:a7:5e:1c:ae:d4:
                    42:ab:b8:9e:ae:5f:8c:75:ca:b5:7c:41:6a:e0:42:
                    22:98:66:ab:6e:7f:65:dc:81:c5:8d:cc:e8:c2:f7:
                    ff:ee:04:93:e7:fb:81:38:91:39:1a:1c:63:d7:ed:
                    c6:35:c8:4f:5c:28:2c:8c:38:05:1f:be:1a:89:75:
                    9e:52:d9:35:c9:16:91:88:6a:43:f5:4c:5d:7f:4d:
                    9c:f5:3f:3d:4d:5b:a4:90:95:0a:76:99:b1:30:72:
                    02:ff:2c:a3:5f:cd:5b:4b:88:74:9c:90:2e:6b:00:
                    1d:01:35:c5:2f:2c:ea:02:19:ab:78:ac:ff:b4:37:
                    3d:60:0a:f2:e2:d4:98:e2:da:e0:e3:00:99:c8:fd:
                    1b:1d:3c:a9:d4:33:74:a3:41:8c:c5:26:6b:d1:29:
                    e1:d6:fa:0c:67:42:89:8b:fd:ad:c7:31:ce:45:93:
                    9d:e9:d5:66:12:2c:c3:a9:b6:f8:06:03:f2:3e:87:
                    f1:ca:02:8c:79:0a:62:b3:47:16:08:89:3c:b7:8b:
                    c5:96:c7:cc:80:ed:9e:84:44:1a:d6:b4:f4:a8:9c:
                    64:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0D:E8:BB:0E:9E:9A:6C:55:C7:8D:77:56:0C:00:34:1C:A0:3C:45
            X509v3 Authority Key Identifier:
                keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:5a:a7:9d:cf:94:64:2d:98:f6:ff:d7:b0:8c:a0:ba:61:db:
         58:ae:01:ef:9b:9a:13:52:0c:d0:46:c1:0f:bf:92:f4:c7:16:
         14:7e:8e:6b:6b:48:8d:7b:9e:bd:16:12:33:8e:5e:8a:05:a9:
         83:89:18:75:9d:a0:b6:88:5d:db:f0:db:f7:e0:69:4d:ea:a7:
         89:17:fe:d5:4e:98:d0:a3:66:7c:b1:c4:51:a6:a5:8f:3e:43:
         e7:42:05:2e:48:81:71:2c:b7:c7:63:95:53:1d:13:2c:02:a5:
         e4:b9:9b:b9:a8:16:71:a7:b5:e2:1f:50:c2:d6:fb:82:3a:6b:
         f7:2d:49:4f:cd:a0:79:17:1c:d0:e8:a4:00:09:49:95:f0:a6:
         22:e8:c3:7d:52:4a:f3:b4:bd:0b:f2:6e:84:3d:32:29:75:65:
         45:ce:25:74:d8:4d:61:7e:e0:23:21:39:62:88:1c:24:c4:1b:
         4b:fd:d4:96:c0:f9:df:df:e9:86:7c:44:61:61:1b:96:0c:c0:
         b2:ae:6c:8b:f6:0d:90:aa:c0:41:a2:db:9f:3a:60:22:ec:fe:
         70:d6:8d:43:ce:3d:34:57:bb:49:30:de:44:b4:0a:fd:c8:d6:
         f6:bf:8c:a9:6b:c5:f9:17:bc:05:81:c1:ba:ac:8e:d0:3c:ac:
         b3:9f:ac:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIykZJTkEA35fBZBdb5PmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZWEwZWNkZDYzNGEzYzA3NWUzNWRiOWRjYTU3NjhlNGY3
NmNkODUwHhcNMjYwNzIzMTgwMDUwWhcNMjYwNzI0MTgwMDUwWjAzMTEwLwYDVQQD
Eyg4YzBkZThiYjBlOWU5YTZjNTVjNzhkNzc1NjBjMDAzNDFjYTAzYzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7M3x30Cs2bqmKmCBfj2fiG0NRdSd
PGFo/FhuXuihC60n0MeKjJmcp14crtRCq7ierl+Mdcq1fEFq4EIimGarbn9l3IHF
jczowvf/7gST5/uBOJE5Ghxj1+3GNchPXCgsjDgFH74aiXWeUtk1yRaRiGpD9Uxd
f02c9T89TVukkJUKdpmxMHIC/yyjX81bS4h0nJAuawAdATXFLyzqAhmreKz/tDc9
YAry4tSY4trg4wCZyP0bHTyp1DN0o0GMxSZr0Snh1voMZ0KJi/2txzHORZOd6dVm
EizDqbb4BgPyPofxygKMeQpis0cWCIk8t4vFlsfMgO2ehEQa1rT0qJxkyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwN6LsOnppsVceNd1YMADQcoDxFMB8GA1UdIwQY
MBaAFAvqDs3WNKPAdeNdudyldo5Pds2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTIt
MjNmY2M1MjRlYTg4LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTItMjNmY2M1MjRlYTg4
LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVqnnc+U
ZC2Y9v/XsIygumHbWK4B75uaE1IM0EbBD7+S9McWFH6Oa2tIjXuevRYSM45eigWp
g4kYdZ2gtohd2/Db9+BpTeqniRf+1U6Y0KNmfLHEUaaljz5D50IFLkiBcSy3x2OV
Ux0TLAKl5LmbuagWcae14h9Qwtb7gjpr9y1JT82geRcc0OikAAlJlfCmIujDfVJK
87S9C/JuhD0yKXVlRc4ldNhNYX7gIyE5YogcJMQbS/3UlsD539/phnxEYWEblgzA
sq5si/YNkKrAQaLbnzpgIuz+cNaNQ849NFe7STDeRLQK/cjW9r+MqWvF+Re8BYHB
uqyO0Dyss5+sOg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:53:03 2026 by rpki-client