Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/1d12b5-4de2-4c98-818c-a9af75762ece/1/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.mft
File:                     o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.mft (raw, json)
Hash identifier:          /fe8r/p0dg+FLM60ODdxMIVxOcgfF1ylp0y+MmXdF2g=
Subject key identifier:   08:C0:AE:90:95:BD:E0:00:D6:27:B0:CF:54:6B:5F:0B:6F:6E:FB:13
Authority key identifier: A3:A2:6F:DD:E1:2C:38:9F:64:F8:CF:5D:9A:66:92:E1:27:84:10:05
Certificate issuer:       /CN=a3a26fdde12c389f64f8cf5d9a6692e127841005
Certificate serial:       01A0F29EB4FCFFFE75F3A69A86669C53E826
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/1d12b5-4de2-4c98-818c-a9af75762ece/1/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.mft
Manifest number:          60
Signing time:             Wed 30 Sep 2026 14:01:22 +0000
Manifest this update:     Wed 30 Sep 2026 14:01:22 +0000
Manifest next update:     Thu 01 Oct 2026 14:01:22 +0000
Files and hashes:         1: PCeTg-z2IkY5v03LlV2q4LDGBsw.asa (hash: Xos5iSf0n6j9TVZXRw51i0DoEWOWAs+fRxhRWuUB430=)
                          2: o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.crl (hash: aXG4bvwuy03/cla3BhiRWn03uaVDGI6CrFH4jJuIth4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/1d12b5-4de2-4c98-818c-a9af75762ece/1/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/1d12b5-4de2-4c98-818c-a9af75762ece/1/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f2:9e:b4:fc:ff:fe:75:f3:a6:9a:86:66:9c:53:e8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3a26fdde12c389f64f8cf5d9a6692e127841005
        Validity
            Not Before: Sep 30 14:01:22 2026 GMT
            Not After : Oct  1 14:01:22 2026 GMT
        Subject: CN=08c0ae9095bde000d627b0cf546b5f0b6f6efb13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:22:dd:69:18:31:58:be:fa:fb:79:da:76:f2:
                    ad:76:1e:3b:78:58:f7:f4:0f:a0:02:8b:62:f9:56:
                    9f:07:49:e7:c8:54:af:db:d0:81:ed:80:da:0a:62:
                    db:29:3e:b3:9f:aa:3b:0f:d7:9f:df:21:5d:2e:c6:
                    6d:60:46:88:34:06:70:5c:64:f3:e9:ca:08:79:fd:
                    e6:58:97:26:c6:f8:99:9b:51:4b:bb:ea:a2:02:e8:
                    55:da:3b:e1:da:dc:93:fa:29:0e:54:5a:c1:dd:79:
                    fa:a6:e9:11:9c:d4:c0:c7:93:e2:97:db:51:a3:58:
                    1b:34:f4:99:03:92:ef:09:ad:c4:86:b3:7f:5a:a7:
                    35:79:9f:43:23:7c:82:f5:f7:a8:65:22:8d:d6:81:
                    af:31:4e:4d:5c:44:a6:43:c6:dd:9f:79:34:b6:0e:
                    a8:c8:6b:7c:38:da:d5:cc:d5:08:4b:35:3a:97:3d:
                    94:75:f9:6d:01:bf:94:f9:f9:37:3d:fa:09:b5:1e:
                    b0:dc:20:85:8b:9f:8e:6c:97:20:47:3d:5f:e4:ec:
                    e9:bd:57:47:fb:a1:e6:96:24:e8:a2:f0:44:52:1d:
                    ae:d6:16:8e:27:4b:51:ce:87:6b:6a:6a:8d:d7:92:
                    8d:86:7a:f5:f5:d3:6e:37:67:bc:df:7e:54:57:1f:
                    ed:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C0:AE:90:95:BD:E0:00:D6:27:B0:CF:54:6B:5F:0B:6F:6E:FB:13
            X509v3 Authority Key Identifier:
                keyid:A3:A2:6F:DD:E1:2C:38:9F:64:F8:CF:5D:9A:66:92:E1:27:84:10:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/1d12b5-4de2-4c98-818c-a9af75762ece/1/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/1d12b5-4de2-4c98-818c-a9af75762ece/1/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:51:51:a1:0e:a9:a7:d3:40:a3:75:f1:79:70:05:18:45:22:
         46:b9:77:fe:9e:c7:85:bf:a1:a7:45:1e:b9:66:79:d5:c3:45:
         8f:30:e8:6f:e5:d5:19:3c:8c:f6:7c:3a:19:80:82:2e:b3:f1:
         e7:74:62:20:e5:2f:2f:f9:73:af:80:7c:65:39:0f:67:d6:95:
         1b:11:d1:22:64:3b:b5:93:b3:be:d3:07:08:86:4d:f1:1d:2c:
         a2:70:cb:cb:46:7a:dc:60:12:6b:99:66:d8:6d:6f:4b:e0:76:
         4b:b3:24:17:bd:d8:a8:67:57:90:c0:e1:d9:f4:75:2f:30:90:
         a3:77:39:7b:d2:15:72:af:fe:f1:c3:94:d8:7a:fc:3a:73:50:
         6b:ce:93:bf:ba:30:05:de:c3:82:f7:55:bf:61:dc:53:c1:76:
         5c:a9:26:8e:76:3a:ad:d3:6d:5c:32:e2:7e:73:85:27:44:db:
         5f:3d:89:5f:3c:62:a9:09:60:6a:37:2c:00:56:58:31:c1:60:
         d9:4a:bc:5c:d3:2d:ee:26:25:1f:8c:8a:b0:64:8a:8d:b0:a4:
         7c:4e:2c:d4:62:ca:f5:5f:ba:8d:3a:e6:b1:1e:29:15:06:41:
         e5:dc:a9:1f:40:80:0d:86:2c:22:d8:69:28:6b:90:43:bc:20:
         9f:de:3c:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDynrT8//5186aahmacU+gmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYTI2ZmRkZTEyYzM4OWY2NGY4Y2Y1ZDlhNjY5MmUxMjc4
NDEwMDUwHhcNMjYwOTMwMTQwMTIyWhcNMjYxMDAxMTQwMTIyWjAzMTEwLwYDVQQD
EygwOGMwYWU5MDk1YmRlMDAwZDYyN2IwY2Y1NDZiNWYwYjZmNmVmYjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yLdaRgxWL76+3nadvKtdh47eFj3
9A+gAoti+VafB0nnyFSv29CB7YDaCmLbKT6zn6o7D9ef3yFdLsZtYEaINAZwXGTz
6coIef3mWJcmxviZm1FLu+qiAuhV2jvh2tyT+ikOVFrB3Xn6pukRnNTAx5Pil9tR
o1gbNPSZA5LvCa3EhrN/Wqc1eZ9DI3yC9feoZSKN1oGvMU5NXESmQ8bdn3k0tg6o
yGt8ONrVzNUISzU6lz2UdfltAb+U+fk3PfoJtR6w3CCFi5+ObJcgRz1f5OzpvVdH
+6HmliToovBEUh2u1haOJ0tRzodramqN15KNhnr19dNuN2e8335UVx/twwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjArpCVveAA1iewz1RrXwtvbvsTMB8GA1UdIwQY
MBaAFKOib93hLDifZPjPXZpmkuEnhBAFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZKdjNlRXNPSjlrLU05ZG1tYVM0U2VFRUFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xZDEyYjUtNGRlMi00Yzk4LTgxOGMt
YTlhZjc1NzYyZWNlLzEvbzZKdjNlRXNPSjlrLU05ZG1tYVM0U2VFRUFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8xZDEyYjUtNGRlMi00Yzk4LTgxOGMtYTlhZjc1NzYyZWNl
LzEvbzZKdjNlRXNPSjlrLU05ZG1tYVM0U2VFRUFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlFRoQ6p
p9NAo3XxeXAFGEUiRrl3/p7Hhb+hp0UeuWZ51cNFjzDob+XVGTyM9nw6GYCCLrPx
53RiIOUvL/lzr4B8ZTkPZ9aVGxHRImQ7tZOzvtMHCIZN8R0sonDLy0Z63GASa5lm
2G1vS+B2S7MkF73YqGdXkMDh2fR1LzCQo3c5e9IVcq/+8cOU2Hr8OnNQa86Tv7ow
Bd7DgvdVv2HcU8F2XKkmjnY6rdNtXDLifnOFJ0TbXz2JXzxiqQlgajcsAFZYMcFg
2Uq8XNMt7iYlH4yKsGSKjbCkfE4s1GLK9V+6jTrmsR4pFQZB5dypH0CADYYsIthp
KGuQQ7wgn948/w==
-----END CERTIFICATE-----
Generated at Wed Sep 30 18:35:39 2026 by rpki-client