Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
File:                     OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json)
Hash identifier:          0Ojb+Om3qTx2+govPyloZ/Q19Uze/XbeORHViw05tqg=
Subject key identifier:   E5:2A:58:35:85:45:7C:67:9A:AF:03:58:B3:BC:96:7C:F6:F2:92:AD
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Certificate issuer:       /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial:       01A174DE08B776867A88F3FFD8B5358FB3B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
Manifest number:          1AD3
Signing time:             Sun 25 Oct 2026 21:01:10 +0000
Manifest this update:     Sun 25 Oct 2026 21:01:10 +0000
Manifest next update:     Mon 26 Oct 2026 21:01:10 +0000
Files and hashes:         1: 0Bk51Mjn6qErtAhOivvm_I8c0aE.roa (hash: aq3ZMEYBOh/rpC3SYBAxrvfX3FzvIksQARIozff4ffc=)
                          2: 3l3JwyRn9LUMsz8MYG14zOnBHdc.roa (hash: 2A1HY2h9Phgu+RFmc7588XfC02kPw7N3ZbQ8wc/kW84=)
                          3: 8bVGqU-tjWPnIG8sBYrZvrrahKI.roa (hash: IFFyNQvZAT+Bna1YbPC14TW6c3lxt7eZvL1L0yVl4NA=)
                          4: 8cAZRJhTLPqKsm4TAUR87r4-9JA.roa (hash: sx3g13vfM7xaU8g2AQwyXKrMTuN6j6YaMqFMPUpyTc0=)
                          5: CQTXAg4uTXvVTudN5hFeeXkNvkQ.roa (hash: MvXWyNfB+L1JsnBDH+iw0vhodg+qR3E3YtxwCLlLcLM=)
                          6: H_ZqL6RkECdFkORWPkQHZkQLmTw.roa (hash: iJ7KZIZmr4InzppQ2C7K5GIf14/i+7a4DnEB+2Vcn7s=)
                          7: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: voZt2zELNhJ6UDDxqRePqJIX8uaEzsEtOvKeabb08To=)
                          8: PZJni5TxpYn092_2LgQ4TzNg1Vk.roa (hash: KAnI/w7Z4z73b7zbsNexFN30a6Ok+1UWHYIM1LyRw7A=)
                          9: TZUj41Zk_a4ctgh6bkXXZRSBnwo.roa (hash: SlDdEwpdjEtSII8TXEBDIBic9lrt5T7OD2GqENaMep4=)
                          10: dc8BS5CRu-zycD-wNYY8YKfw4Cw.roa (hash: 2OEK8MCyAYfbPpIXmNvUjGE5NLgSoSESlZhOHxxGtOM=)
                          11: g96pKLe6ZF1dh195VH6q_6jtDKE.roa (hash: GXl5Z35Jg4C6xTmicgl5RWGF0PIPfwr7nEkhMgfzcrU=)
                          12: iKkbPcQ4WIJAurPfzrtorCYjeJc.roa (hash: t+1uw36Adk7Pip1XNPSev194m4wMZgCV8f3gz9/3gjg=)
                          13: jT0g8lVx3dcAMaKxYxMOa3DkEIY.roa (hash: m3BcVFDXlnD1YdMRwzlLYT9pFM0ZGvuCdz2ltBkF8AA=)
                          14: n-mejQ3q29BELhma3oWoUOm-iuQ.roa (hash: NGJx12o2aUAcKnv8G9XcrR/xbQgpGxsRftcm0M1WRmc=)
                          15: oQGGdDTaNSA17PKm44IDHYFop2E.roa (hash: zwBhRxHLQ9o3LHpah+oy4Xr0d2WLdIvePEERXND5wzs=)
                          16: xXkiOHP5GPVKZFmsEyZEMy5ArTU.roa (hash: xeH/fFNJIFUXQ3IjYea8XVk8nJ8Z09onGn+NwK+Mb24=)
                          17: yVcflys92CzAxU-EuN_3N-w3nlE.roa (hash: zUTtMpuZxFGygRwVxvfWbYqYKDMVT6hU9O37iMaFGcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 21:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:74:de:08:b7:76:86:7a:88:f3:ff:d8:b5:35:8f:b3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
        Validity
            Not Before: Oct 25 21:01:10 2026 GMT
            Not After : Oct 26 21:01:10 2026 GMT
        Subject: CN=e52a583585457c679aaf0358b3bc967cf6f292ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:51:11:1f:4e:41:b6:bf:9e:43:6a:ba:23:25:
                    bd:de:38:6d:74:bf:a3:b8:b9:23:ed:85:33:57:31:
                    01:29:bf:5f:7e:0c:48:c1:b9:89:8f:f3:3c:fb:81:
                    33:16:a4:4a:f3:fa:f9:d9:f4:91:64:8f:3e:08:8e:
                    03:a4:18:00:f0:17:1c:35:6e:38:11:95:b8:57:30:
                    05:62:f4:f5:b6:de:75:0e:7c:0c:48:b4:2c:14:9f:
                    bb:7a:6a:e3:af:97:3f:6b:66:8c:a1:97:04:fc:d3:
                    3b:0b:6c:f7:e3:39:d4:a0:46:9c:9e:aa:f2:97:cd:
                    5d:f8:b1:8a:af:89:37:b7:ea:95:4a:ae:40:ad:79:
                    49:b9:47:18:35:13:09:73:64:1e:ba:aa:a8:66:1e:
                    35:3e:99:74:a8:91:9f:5b:88:9d:fb:f7:ef:14:01:
                    61:81:a5:7a:62:28:8d:90:ce:ba:08:72:54:25:8c:
                    60:e5:54:b4:44:79:eb:d0:4e:8e:aa:8b:b3:e0:45:
                    e9:0e:34:c1:63:ed:a6:0e:b6:bf:86:1e:52:a3:ca:
                    9f:58:1c:c4:89:55:69:91:95:50:f9:67:b2:c2:91:
                    d4:19:4c:1f:a1:93:0d:4c:66:13:d3:8c:f8:16:41:
                    72:f1:77:85:d7:25:d5:8e:ea:3c:0c:84:de:4a:54:
                    36:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2A:58:35:85:45:7C:67:9A:AF:03:58:B3:BC:96:7C:F6:F2:92:AD
            X509v3 Authority Key Identifier:
                keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:64:2e:0a:67:8b:c4:66:5a:d7:59:5a:8e:7c:60:20:f3:65:
         81:96:36:74:20:77:fb:37:71:6d:17:bc:b1:6f:45:4d:36:7d:
         e3:cb:b9:85:95:80:4d:b2:cd:f4:81:82:2d:47:c9:1a:da:74:
         d1:f9:66:e2:03:34:f9:3f:bf:7d:2d:2b:72:b2:5a:3a:55:39:
         a3:49:ea:be:b8:99:4c:15:e8:03:e6:f3:8c:68:a0:78:7d:b2:
         4e:c4:ba:f3:b2:4d:e4:04:e3:9a:0d:6f:b2:b5:d3:93:e8:fc:
         0d:ad:a6:15:1f:eb:03:4e:4e:40:d3:63:04:6d:db:ec:e8:47:
         2d:c8:52:de:fd:5d:e8:95:b8:80:5d:2f:74:19:64:eb:87:6b:
         ae:e9:6b:d3:13:af:31:c8:3c:5f:39:61:52:9c:db:9d:81:0b:
         fa:7f:12:3a:6b:95:30:bc:91:b1:a3:da:89:e4:79:2a:a1:12:
         90:ea:d6:11:c1:8c:6e:ea:aa:bc:30:30:78:ef:01:0a:e1:b3:
         54:cc:8e:af:e8:e3:36:84:ca:d1:ec:fc:fd:82:34:ca:ea:42:
         2f:ce:0a:8d:fc:49:9a:f7:ea:17:a9:27:26:f0:ef:78:34:cf:
         04:51:d8:8f:76:5a:c0:d4:33:5e:d5:74:fe:cf:8f:05:a2:b3:
         1f:d3:2d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:32:46 2026 by rpki-client