Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
File:                     OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft (raw, json)
Hash identifier:          H8Ml4N2/cR5sh69xQAlqHA78ww5ZOCtzV05tT0D+LIk=
Subject key identifier:   1A:9E:AB:6D:49:14:BA:26:19:0A:9F:90:05:98:BD:B6:5D:FA:CA:A6
Authority key identifier: 38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
Certificate issuer:       /CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Certificate serial:       01A1201BA4D2C3DB0598D291ACBE4B45AA8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
Manifest number:          10D2
Signing time:             Fri 09 Oct 2026 10:00:44 +0000
Manifest this update:     Fri 09 Oct 2026 10:00:44 +0000
Manifest next update:     Sat 10 Oct 2026 10:00:44 +0000
Files and hashes:         1: O4mhqRGKIoCKcIMKacGidJQTeig.roa (hash: o44fh95pYU44LJ84noRE8s+3KorVfsnK8XoKEFDXt+c=)
                          2: OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl (hash: xSqoWFAZXr1nSg3zZI8HIri7w9PUox5ZybjsXlPIL0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:20:1b:a4:d2:c3:db:05:98:d2:91:ac:be:4b:45:aa:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
        Validity
            Not Before: Oct  9 10:00:44 2026 GMT
            Not After : Oct 10 10:00:44 2026 GMT
        Subject: CN=1a9eab6d4914ba26190a9f900598bdb65dfacaa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6a:71:4b:55:73:9e:43:53:9d:4c:fc:33:9c:
                    32:b0:dc:dd:43:08:49:85:a6:d6:bd:22:a0:1d:bf:
                    cf:f8:d9:08:40:43:2a:58:5b:e5:82:67:de:89:88:
                    3d:db:44:1e:b2:f5:06:c8:83:fc:a8:e7:df:d0:69:
                    ce:73:50:90:3e:d1:30:69:ee:45:d9:d5:61:87:92:
                    a2:ec:57:62:ae:5e:11:01:bf:a3:ff:dc:35:89:74:
                    95:92:7a:2b:91:32:e3:bb:5d:02:12:f9:59:2e:79:
                    e2:16:c4:09:ab:71:99:7d:a0:af:a5:f9:4e:53:a6:
                    38:3a:40:99:d0:14:27:2a:71:c8:9d:fa:fb:61:e1:
                    b2:b8:d2:17:41:d4:1b:3d:87:ae:b6:71:98:44:ef:
                    19:92:fb:99:1c:e5:92:50:36:eb:e9:cc:e6:b1:3d:
                    4f:e6:de:4c:30:7e:c5:ac:34:20:9e:73:65:49:39:
                    52:e5:a1:2e:e3:f7:bf:5c:f4:f3:9f:33:a6:b3:80:
                    cb:29:32:09:97:fd:a3:87:3b:33:6d:28:db:ad:30:
                    c1:72:66:b6:46:5d:3e:5b:36:05:c0:42:eb:2d:da:
                    16:41:4c:d0:48:c4:4f:53:ad:d0:7c:a4:1f:81:c2:
                    c5:63:a5:be:6a:f5:1d:33:71:4a:00:3e:e6:18:24:
                    e2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9E:AB:6D:49:14:BA:26:19:0A:9F:90:05:98:BD:B6:5D:FA:CA:A6
            X509v3 Authority Key Identifier:
                keyid:38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:8f:e2:e1:76:37:68:00:63:42:14:41:23:20:c7:c2:65:65:
         3d:21:85:92:f1:be:f7:3f:47:f0:38:45:f0:05:af:c4:c3:e3:
         e6:b7:da:10:5d:03:e7:3e:d1:bd:ad:49:d3:be:bf:92:41:9f:
         e6:ab:1a:13:19:3d:a2:b1:41:01:96:2d:95:af:98:a0:67:ab:
         2d:dc:40:fe:e5:bb:d5:58:ea:52:15:81:e0:3c:1d:8c:84:a1:
         fc:fa:8d:db:14:cf:3b:da:2a:3b:64:d5:20:d3:01:dc:37:60:
         8e:ff:c3:bf:ee:cb:fa:27:25:84:44:a6:69:d9:0c:ca:b4:c7:
         d8:d4:df:95:49:ec:f5:90:26:85:f4:f2:7b:72:c2:61:7e:a2:
         f3:3f:46:1a:86:7f:c8:ec:36:15:26:8f:10:ff:34:a4:be:8c:
         91:65:77:78:fc:bb:62:fa:c5:22:7a:39:c9:05:a1:44:3f:ae:
         03:a9:f9:fb:82:ac:46:99:66:98:d0:3b:38:a7:fb:07:59:64:
         92:61:b2:b4:f9:3f:56:e4:ef:15:54:34:be:cc:5b:78:fe:44:
         27:a4:d1:b5:24:85:d4:85:b5:08:38:72:84:57:0c:39:dd:0c:
         1c:1b:d1:c7:93:56:40:fc:3c:1f:25:49:d5:80:61:8a:48:c5:
         7c:d8:47:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:52:32 2026 by rpki-client