Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
File:                     oE3odQHH0wgsdmWfTevZQohDtMs.mft (raw, json)
Hash identifier:          Yq85R6eB5fgHVYJ5qKDQxwWyDOaBfEDo1HBw0un/Df8=
Subject key identifier:   4A:D1:3D:30:32:B2:9E:61:AC:41:54:92:28:ED:1C:A9:98:D5:B9:51
Authority key identifier: A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
Certificate issuer:       /CN=a04de87501c7d3082c76659f4debd9428843b4cb
Certificate serial:       01A16E6EC033CEB24116433E182BACC26EEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
Manifest number:          16A0
Signing time:             Sat 24 Oct 2026 15:01:54 +0000
Manifest this update:     Sat 24 Oct 2026 15:01:54 +0000
Manifest next update:     Sun 25 Oct 2026 15:01:54 +0000
Files and hashes:         1: GhCvmgJfuG506WuiaBMBgDUJQZU.roa (hash: I8NuJF/bk5fAsj3b12qVIfzMf7umbiG0VV3yAbXwHJo=)
                          2: oE3odQHH0wgsdmWfTevZQohDtMs.crl (hash: X2jrmIl7ngeLujMUFG74FbzfYdOQXGLwEp3QkfbM0xE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6e:6e:c0:33:ce:b2:41:16:43:3e:18:2b:ac:c2:6e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a04de87501c7d3082c76659f4debd9428843b4cb
        Validity
            Not Before: Oct 24 15:01:54 2026 GMT
            Not After : Oct 25 15:01:54 2026 GMT
        Subject: CN=4ad13d3032b29e61ac41549228ed1ca998d5b951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2b:fc:76:89:d9:25:e7:fc:4d:fb:12:f6:17:
                    63:13:da:29:83:08:b4:c4:f1:b1:c0:60:33:52:fb:
                    4d:94:ed:71:d8:9f:9e:9b:d9:76:85:80:c5:fb:84:
                    74:b8:90:dc:f4:20:79:05:57:e5:cb:a6:bf:29:ab:
                    0c:98:a6:2f:e5:1f:3b:89:47:e5:1e:b2:04:cb:c9:
                    b1:fe:b1:32:8e:b6:b8:13:3b:cd:e0:a4:65:8d:91:
                    7b:9a:e5:72:e8:a5:4c:e6:1b:1d:de:e5:e1:73:0a:
                    eb:3d:17:8b:56:84:dd:1a:3d:86:74:fd:d8:c8:0a:
                    5f:a7:e3:6e:33:07:bd:96:7d:72:75:d8:9f:24:dc:
                    bb:c3:28:36:a3:e6:fa:60:7a:55:29:22:91:ba:16:
                    a5:61:0b:37:c8:ee:a4:03:87:1f:e0:e1:e4:3f:58:
                    83:84:f0:53:9d:f1:f4:e5:56:0b:fb:c3:61:cf:02:
                    8f:63:81:03:f3:e8:29:f1:33:ce:ca:b4:35:f0:b7:
                    54:04:13:9b:a2:e6:8f:ba:31:39:b5:6f:17:0d:22:
                    31:e3:02:52:2e:38:31:c2:71:40:89:ee:28:67:2b:
                    ea:3e:c9:20:89:c4:30:f5:6b:6d:0d:c6:ed:cd:3a:
                    12:07:fc:c1:c8:df:28:8d:0e:f4:c9:ea:c3:89:b8:
                    f6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D1:3D:30:32:B2:9E:61:AC:41:54:92:28:ED:1C:A9:98:D5:B9:51
            X509v3 Authority Key Identifier:
                keyid:A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:65:d2:6a:a3:ff:d9:54:30:40:da:68:8f:ee:a2:fd:5a:8d:
         2b:e1:45:d0:00:59:8c:92:c1:55:70:ae:61:7f:e0:2c:dc:b3:
         a1:bd:10:45:fd:2f:2f:1f:6f:d5:05:48:5c:59:d1:01:e3:9f:
         84:ac:a1:d8:af:5d:18:09:98:f0:79:fb:9e:97:02:1f:50:c9:
         a4:eb:61:53:7b:43:3e:a2:ab:69:33:07:59:04:52:1a:1d:53:
         17:2d:dd:21:df:c7:da:c3:8e:38:27:38:5d:dd:ff:ba:fa:2f:
         22:c5:fe:43:c0:dc:33:53:4d:0a:e7:51:22:ce:d6:74:79:7a:
         5a:58:02:9a:aa:21:10:6d:35:7b:4c:cd:6a:26:bc:a3:9d:ad:
         f8:1b:3a:2e:c4:c3:79:60:a0:04:e5:1c:30:4f:37:43:40:4c:
         56:62:20:7a:c9:21:a3:69:4a:e9:cc:0b:85:5e:4a:7f:d6:18:
         31:0a:48:16:be:1b:91:04:c1:38:26:40:d9:62:05:e3:46:33:
         2a:8e:ff:50:d1:32:9f:5f:c7:1e:09:7a:80:40:d1:44:47:89:
         45:27:46:56:63:a4:fd:44:03:9e:6b:65:a8:9d:5f:ad:01:15:
         90:e2:b3:9d:00:ce:f4:06:46:84:4a:28:74:0d:60:8c:6f:e1:
         4a:14:7b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 00:57:40 2026 by rpki-client