Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.mft
File:                     oYM1MM41ev8SGjHmyY4f6RM7sCM.mft (raw, json)
Hash identifier:          4VLLrfrL2mbYjsIBItfW7G/OD/AuGA4QVTisY2kfej0=
Subject key identifier:   8E:D5:98:C8:62:19:3D:7C:01:51:53:47:CB:ED:1D:20:F3:41:79:37
Authority key identifier: A1:83:35:30:CE:35:7A:FF:12:1A:31:E6:C9:8E:1F:E9:13:3B:B0:23
Certificate issuer:       /CN=a1833530ce357aff121a31e6c98e1fe9133bb023
Certificate serial:       01A16A91959A066E95C792B3E335EAEDD8D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oYM1MM41ev8SGjHmyY4f6RM7sCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.mft
Manifest number:          0135
Signing time:             Fri 23 Oct 2026 21:01:28 +0000
Manifest this update:     Fri 23 Oct 2026 21:01:28 +0000
Manifest next update:     Sat 24 Oct 2026 21:01:28 +0000
Files and hashes:         1: oYM1MM41ev8SGjHmyY4f6RM7sCM.crl (hash: GQLVVjPHe2y4Rk4hOqvu5/xvy0b2N+Wa94n7E3txIXA=)
                          2: vZuspMqoseBbPHNG2fmOMxJAoRk.roa (hash: O8Akdsdgsu3O3BLQ4nDzeqQ7DRsdv1T4urleIjReCIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oYM1MM41ev8SGjHmyY4f6RM7sCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6a:91:95:9a:06:6e:95:c7:92:b3:e3:35:ea:ed:d8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1833530ce357aff121a31e6c98e1fe9133bb023
        Validity
            Not Before: Oct 23 21:01:28 2026 GMT
            Not After : Oct 24 21:01:28 2026 GMT
        Subject: CN=8ed598c862193d7c01515347cbed1d20f3417937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:30:09:7f:9e:0d:d2:2d:7b:a9:da:fb:10:9f:
                    ae:f1:60:99:ea:b0:4b:7a:29:54:90:f1:57:98:2f:
                    79:1e:1a:61:80:4a:6d:3b:ba:6f:0a:12:6c:81:27:
                    ff:75:93:12:51:d7:74:db:52:8c:d7:76:bb:4d:03:
                    d2:3d:fd:65:da:b6:55:3d:6f:dd:b5:a2:d3:dd:da:
                    c0:73:7e:e0:e1:d3:2c:3f:c1:9c:f1:c8:96:aa:73:
                    a0:6b:93:2b:0d:f4:63:4a:7c:2f:cb:73:0b:5a:2a:
                    13:87:6b:13:3a:8c:dc:4f:64:a4:0c:99:1e:a6:95:
                    92:07:79:d1:a3:62:41:c4:65:a6:75:e4:30:b0:7a:
                    57:fc:eb:fb:32:cf:67:a2:48:4c:87:73:32:7a:7e:
                    de:4f:b1:27:91:70:be:53:9f:79:e3:d8:19:b5:8f:
                    05:99:df:77:90:7e:7a:b3:23:5a:ca:4f:63:c8:3f:
                    b3:72:3e:c4:94:cc:69:51:5e:8c:9e:f5:87:58:69:
                    d9:11:a0:d9:1b:0a:5f:fa:8a:32:ac:33:f5:18:91:
                    58:92:a2:2d:ea:ff:e0:a8:30:6a:ce:2e:83:5b:e1:
                    e0:d7:d4:76:27:e1:76:ab:7b:06:e7:51:e7:f2:a8:
                    b1:9e:8c:f3:79:94:c9:55:2f:ca:83:6d:f7:70:d0:
                    7e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D5:98:C8:62:19:3D:7C:01:51:53:47:CB:ED:1D:20:F3:41:79:37
            X509v3 Authority Key Identifier:
                keyid:A1:83:35:30:CE:35:7A:FF:12:1A:31:E6:C9:8E:1F:E9:13:3B:B0:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYM1MM41ev8SGjHmyY4f6RM7sCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/oYM1MM41ev8SGjHmyY4f6RM7sCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:99:5e:44:74:b0:ae:69:b9:59:0f:09:2c:72:e1:0b:ee:36:
         93:75:5f:f1:5f:f6:3c:5c:86:25:40:f0:ef:35:10:92:7f:85:
         91:7b:5d:95:74:d1:6c:e4:0c:6d:95:db:03:b2:ac:75:c9:02:
         0a:fb:04:e7:1c:ea:f1:2d:94:8c:35:57:e6:7a:f3:67:7d:eb:
         1b:3d:26:ca:60:ed:6c:90:bf:92:d4:e2:04:0b:9b:b8:c6:de:
         67:65:06:fa:73:cd:25:69:c1:ac:46:cc:3e:8b:15:e2:96:14:
         37:72:5a:e0:cc:81:f4:fc:77:bb:40:7a:42:ca:df:4d:1d:be:
         7f:d8:e9:c3:20:30:b4:33:dd:9f:53:82:90:6e:a5:ba:48:14:
         89:d7:ff:0d:0b:81:1d:46:7d:dc:01:6e:de:cc:39:bd:d6:fa:
         5b:cd:87:55:85:7b:40:bd:38:ff:08:78:d6:3b:8d:1d:f9:59:
         82:ca:c9:5b:ce:40:ff:7b:ba:07:7e:a7:28:e8:62:7a:6f:b0:
         c7:87:d2:d4:27:ea:31:0d:b8:ae:67:ce:88:49:f2:02:4b:b9:
         aa:68:45:45:b9:31:24:a0:33:ba:a1:33:a7:ab:25:7a:f4:f2:
         a5:32:04:df:7c:e2:93:d5:b6:68:6b:4d:40:63:c9:dd:99:63:
         bb:b8:08:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 02:45:31 2026 by rpki-client