Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/OWaV1J6GRw-alqgbSiQxm_l7x64.mft
File:                     OWaV1J6GRw-alqgbSiQxm_l7x64.mft (raw, json)
Hash identifier:          Mgg6uRCYGHE9L/B7dixq+T2Gc0bLA7buQTMms3YWSww=
Subject key identifier:   86:4B:8D:40:2E:B8:83:7E:DD:96:65:34:C9:D2:01:58:9A:2C:F1:BB
Authority key identifier: 39:66:95:D4:9E:86:47:0F:9A:96:A8:1B:4A:24:31:9B:F9:7B:C7:AE
Certificate issuer:       /CN=396695d49e86470f9a96a81b4a24319bf97bc7ae
Certificate serial:       01A06FF10B85C7184B37DCBC94AD1BA2EF7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWaV1J6GRw-alqgbSiQxm_l7x64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/OWaV1J6GRw-alqgbSiQxm_l7x64.mft
Manifest number:          B3
Signing time:             Sat 05 Sep 2026 05:01:02 +0000
Manifest this update:     Sat 05 Sep 2026 05:01:02 +0000
Manifest next update:     Sun 06 Sep 2026 05:01:02 +0000
Files and hashes:         1: HffM29R42fpCfN2qzwUjeJ-H-S0.roa (hash: PTCqTbI3aQtr5zYX+8hriBPXqPfTgAil3GxXOXcU5Nk=)
                          2: OWaV1J6GRw-alqgbSiQxm_l7x64.crl (hash: FaBvhZJtNlocInA5qkGm1SFdXKcvCf92wu8tbP5SOAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/OWaV1J6GRw-alqgbSiQxm_l7x64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/OWaV1J6GRw-alqgbSiQxm_l7x64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OWaV1J6GRw-alqgbSiQxm_l7x64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:f1:0b:85:c7:18:4b:37:dc:bc:94:ad:1b:a2:ef:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=396695d49e86470f9a96a81b4a24319bf97bc7ae
        Validity
            Not Before: Sep  5 05:01:02 2026 GMT
            Not After : Sep  6 05:01:02 2026 GMT
        Subject: CN=864b8d402eb8837edd966534c9d201589a2cf1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:50:45:67:71:32:47:9c:a5:ad:c2:34:1b:bf:
                    69:24:58:88:dc:f7:89:76:54:ca:22:c1:f2:9c:eb:
                    64:bb:d2:c5:bd:58:3a:d2:28:a9:30:a7:48:66:26:
                    05:ee:91:f8:f6:e2:1d:77:d5:62:a7:1c:30:ff:48:
                    09:f4:30:84:78:93:df:9e:65:2b:54:7a:27:85:d5:
                    44:e4:51:46:52:d5:6a:da:64:81:dd:89:56:04:08:
                    11:94:ad:2e:94:b1:8f:1b:94:98:0e:68:53:7b:aa:
                    db:09:97:a1:f3:af:96:9d:54:da:23:fb:6a:00:50:
                    78:3f:d6:47:a5:8e:be:32:e6:cc:a2:f4:86:67:30:
                    fc:e4:2c:5d:0a:f8:1d:12:b3:5b:76:eb:7f:0a:8e:
                    c3:4a:b0:1b:80:86:05:19:7a:13:f5:35:6d:fa:97:
                    17:54:3a:17:c4:37:1d:49:6e:e4:c5:13:27:00:64:
                    11:b1:15:2b:22:9a:69:bc:56:61:9c:9d:57:e5:ae:
                    6c:42:09:45:9e:06:d7:b2:1f:5a:9c:79:1f:d8:a1:
                    48:c0:fd:22:3a:56:3a:94:9f:f5:c9:6b:d8:45:23:
                    e4:aa:90:dd:3a:c0:02:47:19:62:27:bd:a7:cc:b5:
                    bb:ea:82:60:1b:1f:8f:5c:ff:a2:37:f6:34:47:50:
                    80:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4B:8D:40:2E:B8:83:7E:DD:96:65:34:C9:D2:01:58:9A:2C:F1:BB
            X509v3 Authority Key Identifier:
                keyid:39:66:95:D4:9E:86:47:0F:9A:96:A8:1B:4A:24:31:9B:F9:7B:C7:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWaV1J6GRw-alqgbSiQxm_l7x64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/OWaV1J6GRw-alqgbSiQxm_l7x64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/OWaV1J6GRw-alqgbSiQxm_l7x64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:10:57:dd:ba:c4:4c:a5:4a:5f:fd:a5:f0:53:ad:17:2b:51:
         95:37:3e:0a:3f:8a:aa:1a:55:3d:f3:04:49:20:73:c6:62:4b:
         5e:19:93:41:b9:0a:23:a4:15:2c:ee:28:9a:c4:79:19:47:e0:
         c8:7c:c4:2c:7b:7d:22:91:8a:f7:50:d3:1e:49:a9:1e:5f:c1:
         fd:f9:ec:92:8e:3c:f8:6f:d1:c3:a7:bd:7a:0c:29:04:27:bf:
         ee:6d:c1:74:9b:17:43:10:6c:4c:6f:f6:7e:35:0c:37:86:35:
         e1:d6:2c:44:0f:c5:30:81:a2:63:5e:33:03:57:91:7d:58:3d:
         19:ad:5f:6d:60:e5:c0:ab:ff:0a:2f:77:f2:fb:c6:33:91:1e:
         af:79:d7:cc:69:17:78:57:97:93:da:6d:53:99:9c:c1:88:a2:
         cd:be:18:82:47:08:2f:36:a3:76:ae:f6:b9:16:11:d0:58:61:
         12:aa:a7:20:5a:f5:7f:4a:05:d0:f0:37:52:45:90:ae:23:b3:
         d6:50:91:69:17:cc:00:04:83:49:ce:12:5e:ef:a9:b8:65:8e:
         3f:e0:dd:97:17:e6:7e:b7:f2:3c:48:e4:64:06:2d:9a:14:1e:
         1a:0e:43:86:56:5b:80:12:14:e9:74:2f:56:ef:38:83:73:86:
         dc:c1:1d:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBv8QuFxxhLN9y8lK0bou99MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NjY5NWQ0OWU4NjQ3MGY5YTk2YTgxYjRhMjQzMTliZjk3
YmM3YWUwHhcNMjYwOTA1MDUwMTAyWhcNMjYwOTA2MDUwMTAyWjAzMTEwLwYDVQQD
Eyg4NjRiOGQ0MDJlYjg4MzdlZGQ5NjY1MzRjOWQyMDE1ODlhMmNmMWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVBFZ3EyR5ylrcI0G79pJFiI3PeJ
dlTKIsHynOtku9LFvVg60iipMKdIZiYF7pH49uIdd9Vipxww/0gJ9DCEeJPfnmUr
VHonhdVE5FFGUtVq2mSB3YlWBAgRlK0ulLGPG5SYDmhTe6rbCZeh86+WnVTaI/tq
AFB4P9ZHpY6+MubMovSGZzD85CxdCvgdErNbdut/Co7DSrAbgIYFGXoT9TVt+pcX
VDoXxDcdSW7kxRMnAGQRsRUrIpppvFZhnJ1X5a5sQglFngbXsh9anHkf2KFIwP0i
OlY6lJ/1yWvYRSPkqpDdOsACRxliJ72nzLW76oJgGx+PXP+iN/Y0R1CAcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZLjUAuuIN+3ZZlNMnSAViaLPG7MB8GA1UdIwQY
MBaAFDlmldSehkcPmpaoG0okMZv5e8euMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1dhVjFKNkdSdy1hbHFnYlNpUXhtX2w3eDY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wZGNkM2YtMTc1Mi00MDk3LThmNmUt
YzI0YWJhOGJhMmJiLzEvT1dhVjFKNkdSdy1hbHFnYlNpUXhtX2w3eDY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8wZGNkM2YtMTc1Mi00MDk3LThmNmUtYzI0YWJhOGJhMmJi
LzEvT1dhVjFKNkdSdy1hbHFnYlNpUXhtX2w3eDY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBBX3brE
TKVKX/2l8FOtFytRlTc+Cj+KqhpVPfMESSBzxmJLXhmTQbkKI6QVLO4omsR5GUfg
yHzELHt9IpGK91DTHkmpHl/B/fnsko48+G/Rw6e9egwpBCe/7m3BdJsXQxBsTG/2
fjUMN4Y14dYsRA/FMIGiY14zA1eRfVg9Ga1fbWDlwKv/Ci938vvGM5Eer3nXzGkX
eFeXk9ptU5mcwYiizb4YgkcILzajdq72uRYR0FhhEqqnIFr1f0oF0PA3UkWQriOz
1lCRaRfMAASDSc4SXu+puGWOP+DdlxfmfrfyPEjkZAYtmhQeGg5DhlZbgBIU6XQv
Vu84g3OG3MEdhw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:10:42 2026 by rpki-client