Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
File:                     oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft (raw, json)
Hash identifier:          0Dq9E8capL30qrb9+X5mBOg2UN/PZGU8ms7S+POTIis=
Subject key identifier:   97:C0:18:27:3C:D5:2B:1A:40:AB:47:99:00:2D:7B:72:84:CF:61:13
Authority key identifier: A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46
Certificate issuer:       /CN=a122d6d21bd04c46224653a49be029e3c024b846
Certificate serial:       01A19D6BD7E80047D47EB04B25671EBEAD47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
Manifest number:          06DD
Signing time:             Mon 02 Nov 2026 18:00:52 +0000
Manifest this update:     Mon 02 Nov 2026 18:00:52 +0000
Manifest next update:     Tue 03 Nov 2026 18:00:52 +0000
Files and hashes:         1: 3VvlIVLD8nV-Kprr00nGUqwlEG0.roa (hash: ueTtVv9Izvar/a32kf0F4hmGSZUFBIbcRRQsZSddarI=)
                          2: 5UiQgSKV-0r5R-g0qGD-DGRklEo.roa (hash: 8l38pHXayturuSA+ystfuhpDtM4gylkEmHjyutVuWjI=)
                          3: bWHUQLOQ3q7dhV99gX_XSnKAhlY.asa (hash: W/uuX2PgQWIkkFMFl//9mi/AeUMxrTyEyI4uGCFVLAI=)
                          4: cBS-3HpC_a4rHcbd8xWkU8ryqAo.roa (hash: BFwk1ZVFsJ92QmF6WqyS8lrea+ZBvLbcAz/u0+3fQLc=)
                          5: oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl (hash: 5s1Iz1Eijd8feTmHIiR2rwpwk9QZ4PcIN0WOY++EP0I=)
                          6: wpoL_iSupuiaeUF0rSK5oTJDYgk.roa (hash: tmpMUF0ltyMmfrFAPsjl7BnWO5nUIh5IyWezk54S+Pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Nov 2026 18:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:9d:6b:d7:e8:00:47:d4:7e:b0:4b:25:67:1e:be:ad:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a122d6d21bd04c46224653a49be029e3c024b846
        Validity
            Not Before: Nov  2 18:00:52 2026 GMT
            Not After : Nov  3 18:00:52 2026 GMT
        Subject: CN=97c018273cd52b1a40ab4799002d7b7284cf6113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6a:ee:22:71:47:a1:02:61:4a:e0:3d:8d:79:
                    e1:33:6c:32:b8:f4:a6:b0:ff:69:89:7a:61:2c:0f:
                    6b:67:a8:55:cf:ff:4a:e8:d0:ee:37:ca:3c:c4:da:
                    8e:af:37:1d:3c:1b:f0:21:00:82:86:13:3f:81:60:
                    fa:c5:fb:13:6c:55:35:60:98:cf:e7:c4:e8:80:6a:
                    95:fc:27:0c:d7:22:3f:35:d2:4e:27:49:9f:2f:c0:
                    95:d9:19:9b:09:c7:e4:31:e7:02:14:e2:32:4c:6d:
                    eb:a4:f6:a7:85:1a:33:cc:bc:c2:b5:49:08:21:57:
                    4b:2c:37:69:cc:cc:46:8c:59:41:72:2a:aa:ee:81:
                    6a:9d:fa:f0:94:0d:26:49:2a:e8:f1:ac:30:a8:dc:
                    38:87:25:4c:05:ec:f1:c1:fc:ad:cf:2d:a8:a2:0a:
                    5b:07:eb:3c:fa:00:cc:ce:7e:23:75:5a:82:8b:cc:
                    17:24:76:c2:60:8a:ad:40:93:1c:bd:55:ae:ff:0b:
                    66:43:e3:5c:c0:e7:de:e4:7f:33:cc:8c:38:c8:b3:
                    3c:ae:b2:36:5c:7f:f4:34:c1:b9:94:97:c5:07:08:
                    8d:0b:67:81:a5:fe:27:cd:98:1a:6e:88:b4:31:9e:
                    eb:5b:67:d4:2c:03:1a:5e:fd:00:12:e8:4e:8c:b0:
                    a6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C0:18:27:3C:D5:2B:1A:40:AB:47:99:00:2D:7B:72:84:CF:61:13
            X509v3 Authority Key Identifier:
                keyid:A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:63:3d:71:df:42:48:de:d3:3e:cc:6f:bd:59:20:12:62:47:
         da:92:3d:2b:a9:ac:00:d7:46:43:81:c4:b6:da:a8:3d:e6:58:
         59:5d:60:4b:e5:11:56:55:ed:85:7b:6d:16:00:ee:02:98:6f:
         09:4b:33:47:95:13:f7:a4:12:48:db:3e:00:b5:cf:20:30:c1:
         01:13:d3:e5:32:5a:06:af:bb:1c:4c:53:70:96:c9:ea:42:b3:
         e3:74:d8:fd:7c:ea:b1:65:7d:21:02:b8:5b:ff:88:f7:4a:f5:
         7e:d2:e5:af:11:45:43:50:51:90:2e:1f:92:8f:f9:db:a8:d0:
         9a:13:cc:92:31:29:69:db:f7:b7:a7:66:a4:13:bd:8f:0d:53:
         b1:0a:e1:f0:54:60:43:92:9b:aa:c0:45:2a:e9:3c:63:a2:8e:
         e2:7d:93:8b:f8:73:8a:b0:55:13:9e:18:a1:c6:96:94:a0:ae:
         83:84:3c:f1:c8:16:b6:66:f6:5f:5d:d1:89:c9:4d:16:53:22:
         64:2e:49:80:a8:b5:fd:62:03:28:d6:56:e8:74:a5:67:b9:ea:
         64:c9:10:9a:8e:d7:8c:31:7c:19:1e:09:8a:41:fa:60:71:96:
         1c:81:cf:73:7e:25:c8:5e:8f:57:7f:dd:d2:77:8d:40:da:55:
         50:db:8d:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGda9foAEfUfrBLJWcevq1HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMjJkNmQyMWJkMDRjNDYyMjQ2NTNhNDliZTAyOWUzYzAy
NGI4NDYwHhcNMjYxMTAyMTgwMDUyWhcNMjYxMTAzMTgwMDUyWjAzMTEwLwYDVQQD
Eyg5N2MwMTgyNzNjZDUyYjFhNDBhYjQ3OTkwMDJkN2I3Mjg0Y2Y2MTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2ruInFHoQJhSuA9jXnhM2wyuPSm
sP9piXphLA9rZ6hVz/9K6NDuN8o8xNqOrzcdPBvwIQCChhM/gWD6xfsTbFU1YJjP
58TogGqV/CcM1yI/NdJOJ0mfL8CV2RmbCcfkMecCFOIyTG3rpPanhRozzLzCtUkI
IVdLLDdpzMxGjFlBciqq7oFqnfrwlA0mSSro8awwqNw4hyVMBezxwfytzy2oogpb
B+s8+gDMzn4jdVqCi8wXJHbCYIqtQJMcvVWu/wtmQ+NcwOfe5H8zzIw4yLM8rrI2
XH/0NMG5lJfFBwiNC2eBpf4nzZgaboi0MZ7rW2fULAMaXv0AEuhOjLCmwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfAGCc81SsaQKtHmQAte3KEz2ETMB8GA1UdIwQY
MBaAFKEi1tIb0ExGIkZTpJvgKePAJLhGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1NMVzBodlFURVlpUmxPa20tQXA0OEFrdUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wNDhhZmMtZDJjYy00ZTMzLTg2MDct
NWYyNTFhMDNmYTJiLzEvb1NMVzBodlFURVlpUmxPa20tQXA0OEFrdUVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wNDhhZmMtZDJjYy00ZTMzLTg2MDctNWYyNTFhMDNmYTJi
LzEvb1NMVzBodlFURVlpUmxPa20tQXA0OEFrdUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmM9cd9C
SN7TPsxvvVkgEmJH2pI9K6msANdGQ4HEttqoPeZYWV1gS+URVlXthXttFgDuAphv
CUszR5UT96QSSNs+ALXPIDDBARPT5TJaBq+7HExTcJbJ6kKz43TY/XzqsWV9IQK4
W/+I90r1ftLlrxFFQ1BRkC4fko/526jQmhPMkjEpadv3t6dmpBO9jw1TsQrh8FRg
Q5KbqsBFKuk8Y6KO4n2Ti/hzirBVE54YocaWlKCug4Q88cgWtmb2X13RiclNFlMi
ZC5JgKi1/WIDKNZW6HSlZ7nqZMkQmo7XjDF8GR4JikH6YHGWHIHPc34lyF6PV3/d
0neNQNpVUNuN4Q==
-----END CERTIFICATE-----
Generated at Tue Nov 3 04:28:17 2026 by rpki-client