Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
File:                     oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json)
Hash identifier:          dmXpz+6arCsLZvyGjXX1pH1pJTZHgD5u0Y9cOyn195g=
Subject key identifier:   F3:02:BF:63:82:14:2C:68:D2:25:E0:5D:84:ED:EA:62:40:DB:8A:BE
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Certificate issuer:       /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial:       01A17FCF82497845219011F252B9A946A11A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
Manifest number:          0A65
Signing time:             Wed 28 Oct 2026 00:01:07 +0000
Manifest this update:     Wed 28 Oct 2026 00:01:07 +0000
Manifest next update:     Thu 29 Oct 2026 00:01:07 +0000
Files and hashes:         1: 3_ICGJ04_o-B78xtxe-BL1771oM.roa (hash: ISb9BZPlnND5DSOlgTsgHag+YAm+Sabx40NlDe58dfY=)
                          2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: 1GKJjSCqRKjfIqhjkfhzHDUMnpRjSSumCgY3v2XMTJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:cf:82:49:78:45:21:90:11:f2:52:b9:a9:46:a1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
        Validity
            Not Before: Oct 28 00:01:07 2026 GMT
            Not After : Oct 29 00:01:07 2026 GMT
        Subject: CN=f302bf6382142c68d225e05d84edea6240db8abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3f:93:8d:9d:17:63:bd:cd:60:9e:e3:e4:c9:
                    9e:ab:c3:71:07:2d:53:df:02:1f:6c:ff:3c:34:58:
                    bb:ac:cd:cc:aa:0c:26:2e:42:b0:a7:ac:7a:a6:0c:
                    87:70:d8:76:0f:b6:b8:be:53:89:02:48:d9:d0:8d:
                    51:af:f9:c3:0c:66:c5:cc:7c:18:f0:da:4a:8c:46:
                    37:8b:a5:5d:cd:05:3b:01:9a:64:53:32:3f:91:f7:
                    da:9f:b8:20:bb:a4:af:45:c5:ff:e8:52:38:b7:53:
                    31:48:37:12:ac:05:18:70:00:6e:ea:e9:a9:90:77:
                    46:9f:c2:d6:19:79:7d:e4:be:3c:b9:e3:15:6c:39:
                    0f:c3:53:81:25:69:dc:e2:f2:aa:57:9f:11:52:89:
                    f8:36:4e:fd:7d:41:b7:57:ef:00:99:c3:2e:ce:0d:
                    b2:31:10:27:3d:c6:71:cd:5e:1a:26:4d:62:cf:70:
                    e9:74:04:90:5c:39:c7:6e:11:7d:14:db:07:bd:79:
                    c2:8e:07:c8:70:95:d0:55:27:7d:0c:0d:51:17:90:
                    98:49:93:25:92:b6:a2:1a:d7:31:e9:ea:39:5b:70:
                    f6:e6:7c:34:d5:be:3c:a6:3b:ec:61:da:16:d3:df:
                    0b:6d:c5:b2:9e:53:07:a2:35:29:2e:d2:bd:86:04:
                    a6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:02:BF:63:82:14:2C:68:D2:25:E0:5D:84:ED:EA:62:40:DB:8A:BE
            X509v3 Authority Key Identifier:
                keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d9:3b:a5:57:f8:b9:1f:a8:8e:de:c7:d6:ab:e1:91:9a:d8:
         aa:66:a9:cd:f7:ed:1b:09:87:67:30:e5:02:4d:b9:17:0c:5a:
         9c:7e:80:1f:50:3b:8f:98:34:8d:25:31:48:e7:7c:57:89:37:
         f7:5e:e9:42:66:e9:2d:bd:ac:a0:2d:6c:04:09:81:10:16:9b:
         94:bd:1c:fc:21:80:7e:d8:75:7e:22:88:4c:3a:24:73:ed:81:
         28:f3:a1:54:f7:3b:95:12:4d:6a:d1:d5:7d:5c:5f:57:bb:ba:
         29:15:f3:66:6b:de:86:76:88:da:2b:e3:ef:5a:4f:2c:2c:89:
         3e:eb:bb:04:86:cd:a9:e2:0e:ae:37:ee:2a:81:da:8f:2b:9d:
         a9:a1:a5:50:bd:d8:bc:b3:31:0b:da:d0:fc:02:73:28:7c:e0:
         81:18:80:7e:a4:8c:85:b9:81:8c:fa:68:92:27:8c:5f:ee:5d:
         fe:4b:ff:88:bd:06:f3:14:9d:44:dc:6a:58:3e:c9:79:8e:a1:
         a3:42:ec:ef:56:fe:48:da:08:a9:7f:f5:0d:a1:cf:27:bb:4e:
         f0:77:55:dd:fc:e1:07:89:b0:04:5a:02:58:2f:ba:79:39:61:
         90:8a:ec:c5:7a:1f:0a:04:e9:c2:1a:4c:54:f4:64:b4:d6:fe:
         5f:26:3e:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/z4JJeEUhkBHyUrmpRqEaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNWIxOTYzODYxMWYzZTFmNzY0NGE3ZTNiYjcxZDBjYTM3
NDkxOWUwHhcNMjYxMDI4MDAwMTA3WhcNMjYxMDI5MDAwMTA3WjAzMTEwLwYDVQQD
EyhmMzAyYmY2MzgyMTQyYzY4ZDIyNWUwNWQ4NGVkZWE2MjQwZGI4YWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D+TjZ0XY73NYJ7j5Mmeq8NxBy1T
3wIfbP88NFi7rM3MqgwmLkKwp6x6pgyHcNh2D7a4vlOJAkjZ0I1Rr/nDDGbFzHwY
8NpKjEY3i6VdzQU7AZpkUzI/kffan7ggu6SvRcX/6FI4t1MxSDcSrAUYcABu6ump
kHdGn8LWGXl95L48ueMVbDkPw1OBJWnc4vKqV58RUon4Nk79fUG3V+8AmcMuzg2y
MRAnPcZxzV4aJk1iz3DpdASQXDnHbhF9FNsHvXnCjgfIcJXQVSd9DA1RF5CYSZMl
kraiGtcx6eo5W3D25nw01b48pjvsYdoW098LbcWynlMHojUpLtK9hgSmMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMCv2OCFCxo0iXgXYTt6mJA24q+MB8GA1UdIwQY
MBaAFKFbGWOGEfPh92RKfju3HQyjdJGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYt
MTI1MTg0MjlmYTYzLzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYtMTI1MTg0MjlmYTYz
LzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtk7pVf4
uR+ojt7H1qvhkZrYqmapzfftGwmHZzDlAk25FwxanH6AH1A7j5g0jSUxSOd8V4k3
917pQmbpLb2soC1sBAmBEBablL0c/CGAfth1fiKITDokc+2BKPOhVPc7lRJNatHV
fVxfV7u6KRXzZmvehnaI2ivj71pPLCyJPuu7BIbNqeIOrjfuKoHajyudqaGlUL3Y
vLMxC9rQ/AJzKHzggRiAfqSMhbmBjPpokieMX+5d/kv/iL0G8xSdRNxqWD7JeY6h
o0Ls71b+SNoIqX/1DaHPJ7tO8HdV3fzhB4mwBFoCWC+6eTlhkIrsxXofCgTpwhpM
VPRktNb+XyY+bg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:15 2026 by rpki-client