Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft
File:                     obUnWAWCwH8MZ29bQj57p9A0mvM.mft (raw, json)
Hash identifier:          R/O4UXlVxfNukqh4g3aX9iX0vnptdHOVYlCGsJAy0UU=
Subject key identifier:   3B:2F:0D:A2:A3:E9:39:6C:10:39:E3:52:40:14:D6:C0:F4:5F:14:76
Authority key identifier: A1:B5:27:58:05:82:C0:7F:0C:67:6F:5B:42:3E:7B:A7:D0:34:9A:F3
Certificate issuer:       /CN=a1b527580582c07f0c676f5b423e7ba7d0349af3
Certificate serial:       019E1D59A6437D0CA1E76F73D9DF3E03B40D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obUnWAWCwH8MZ29bQj57p9A0mvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft
Manifest number:          AB
Signing time:             Tue 12 May 2026 18:01:15 +0000
Manifest this update:     Tue 12 May 2026 18:01:15 +0000
Manifest next update:     Wed 13 May 2026 18:01:15 +0000
Files and hashes:         1: obUnWAWCwH8MZ29bQj57p9A0mvM.crl (hash: MtV5PEdnLk3376uFf7/+yOHO9qx657Yx8pymtI2IYwI=)
                          2: t_ByAeaBQNIrFb5bhmau53EuKWA.roa (hash: AwzAqExXrWOFnUsxmRE0E2eT/V7WcGMDYvuPQOqWltg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obUnWAWCwH8MZ29bQj57p9A0mvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:a6:43:7d:0c:a1:e7:6f:73:d9:df:3e:03:b4:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b527580582c07f0c676f5b423e7ba7d0349af3
        Validity
            Not Before: May 12 18:01:15 2026 GMT
            Not After : May 13 18:01:15 2026 GMT
        Subject: CN=3b2f0da2a3e9396c1039e3524014d6c0f45f1476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d9:ef:c7:e1:bc:a7:c9:6e:e5:af:d1:69:45:
                    00:b0:1f:56:5e:1d:0d:af:dd:d0:af:98:79:61:f7:
                    5b:29:23:c0:7e:86:2c:24:dc:ed:81:09:40:c1:a7:
                    e5:07:2e:a4:24:33:75:a9:99:e5:ec:7c:ce:e6:03:
                    09:03:bd:e8:d2:0a:47:92:58:de:b8:6f:9f:91:24:
                    7e:f4:14:86:99:67:56:ef:a4:7b:a9:37:cf:1f:8d:
                    24:29:96:5c:ea:a6:92:3a:8c:c5:84:04:01:82:1c:
                    4c:1e:b4:b5:b5:8e:44:05:e0:10:db:c2:39:aa:48:
                    c7:61:48:ff:a2:58:fc:e5:e5:90:82:30:8b:7b:84:
                    d0:f6:b9:a2:81:b5:ff:6f:f2:57:22:51:73:1a:6c:
                    bd:18:24:05:6d:a2:54:d5:77:8a:d0:e0:30:30:ca:
                    8d:e7:01:db:db:8c:5e:bd:a0:f5:88:fa:f0:71:36:
                    d7:96:47:05:d1:1d:aa:92:fe:0b:78:e8:8e:f4:06:
                    ab:81:b3:e1:c1:c4:ae:c0:d3:cb:3d:a9:a7:05:4d:
                    19:bc:86:ce:62:27:19:da:b7:ce:98:a1:ad:46:1e:
                    d1:69:bc:f6:0f:f5:a4:6f:bb:1d:6c:b4:89:4d:48:
                    96:bc:51:da:1d:f8:be:51:cc:a6:43:34:8a:a1:40:
                    5a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2F:0D:A2:A3:E9:39:6C:10:39:E3:52:40:14:D6:C0:F4:5F:14:76
            X509v3 Authority Key Identifier:
                keyid:A1:B5:27:58:05:82:C0:7F:0C:67:6F:5B:42:3E:7B:A7:D0:34:9A:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obUnWAWCwH8MZ29bQj57p9A0mvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:e3:4d:7b:bc:ef:f2:f8:e2:79:58:e5:25:ce:0c:58:e8:8a:
         a8:ae:d3:2f:01:7b:e9:04:31:aa:2b:2e:aa:69:d2:f2:23:55:
         4e:74:7b:20:06:e2:2a:36:59:e0:39:5d:9f:52:90:c7:87:4d:
         18:18:a6:6e:82:c7:01:c6:97:15:af:f8:1d:da:ac:77:be:86:
         35:85:31:34:34:4e:b3:59:be:bc:2a:00:0d:de:7b:2e:9e:3f:
         62:70:32:be:e1:66:4b:81:ae:23:23:5d:4d:45:57:19:cc:37:
         09:60:fd:0c:c3:b2:35:b5:4f:4f:db:90:83:e7:af:97:bd:4f:
         87:9a:8c:c3:3e:1c:05:b5:64:a7:88:7c:87:fe:4e:b8:97:ca:
         c9:81:89:c6:dc:c4:68:14:ad:dc:0c:e7:13:b2:ef:e2:96:c2:
         e1:f7:23:a2:46:f4:dd:df:2b:fd:2e:70:d4:5f:5e:c6:37:2b:
         2b:ce:02:ca:93:17:2b:99:00:ab:84:f9:76:a9:3a:4f:31:b2:
         1e:36:2b:4e:1a:40:d5:ef:be:4d:28:b8:fe:c0:74:10:34:2b:
         63:4e:f8:d9:68:57:89:47:06:39:aa:f4:4b:79:c9:66:b1:5a:
         d5:75:86:98:19:02:4a:43:ff:71:8f:8d:9c:b3:cc:88:9a:30:
         69:be:7f:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWaZDfQyh529z2d8+A7QNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjUyNzU4MDU4MmMwN2YwYzY3NmY1YjQyM2U3YmE3ZDAz
NDlhZjMwHhcNMjYwNTEyMTgwMTE1WhcNMjYwNTEzMTgwMTE1WjAzMTEwLwYDVQQD
EygzYjJmMGRhMmEzZTkzOTZjMTAzOWUzNTI0MDE0ZDZjMGY0NWYxNDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9nvx+G8p8lu5a/RaUUAsB9WXh0N
r93Qr5h5YfdbKSPAfoYsJNztgQlAwaflBy6kJDN1qZnl7HzO5gMJA73o0gpHklje
uG+fkSR+9BSGmWdW76R7qTfPH40kKZZc6qaSOozFhAQBghxMHrS1tY5EBeAQ28I5
qkjHYUj/olj85eWQgjCLe4TQ9rmigbX/b/JXIlFzGmy9GCQFbaJU1XeK0OAwMMqN
5wHb24xevaD1iPrwcTbXlkcF0R2qkv4LeOiO9AargbPhwcSuwNPLPamnBU0ZvIbO
YicZ2rfOmKGtRh7Rabz2D/Wkb7sdbLSJTUiWvFHaHfi+UcymQzSKoUBaKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsvDaKj6TlsEDnjUkAU1sD0XxR2MB8GA1UdIwQY
MBaAFKG1J1gFgsB/DGdvW0I+e6fQNJrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JVbldBV0N3SDhNWjI5YlFqNTdwOUEwbXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82YjMxZWUtMjRmYi00YzAzLWJlMmUt
Mzc3NmZkNDdkYzY1LzEvb2JVbldBV0N3SDhNWjI5YlFqNTdwOUEwbXZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82YjMxZWUtMjRmYi00YzAzLWJlMmUtMzc3NmZkNDdkYzY1
LzEvb2JVbldBV0N3SDhNWjI5YlFqNTdwOUEwbXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzeNNe7zv
8vjieVjlJc4MWOiKqK7TLwF76QQxqisuqmnS8iNVTnR7IAbiKjZZ4Dldn1KQx4dN
GBimboLHAcaXFa/4Hdqsd76GNYUxNDROs1m+vCoADd57Lp4/YnAyvuFmS4GuIyNd
TUVXGcw3CWD9DMOyNbVPT9uQg+evl71Ph5qMwz4cBbVkp4h8h/5OuJfKyYGJxtzE
aBSt3AznE7Lv4pbC4fcjokb03d8r/S5w1F9exjcrK84CypMXK5kAq4T5dqk6TzGy
HjYrThpA1e++TSi4/sB0EDQrY0742WhXiUcGOar0S3nJZrFa1XWGmBkCSkP/cY+N
nLPMiJowab5/bA==
-----END CERTIFICATE-----
Generated at Wed May 13 00:03:02 2026 by rpki-client