Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
File:                     oE_JgO38R54EauArEOVyRbuSyLc.mft (raw, json)
Hash identifier:          TFEALtj+ltSmMNznw9FUhvRZwZao12NXtVuoTG10DqU=
Subject key identifier:   B5:CB:44:03:D4:69:84:67:E2:24:19:62:53:92:10:DC:B8:A9:E0:6D
Authority key identifier: A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
Certificate issuer:       /CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Certificate serial:       01A049F625BD57209A622F4660B7423C01CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
Manifest number:          0A2A
Signing time:             Fri 28 Aug 2026 20:01:03 +0000
Manifest this update:     Fri 28 Aug 2026 20:01:03 +0000
Manifest next update:     Sat 29 Aug 2026 20:01:03 +0000
Files and hashes:         1: gXBH-XlgpLuYkohpzvO2FkMoumY.asa (hash: DtMcO3PNIaPFH8mu6H1UmOdsSLwdFJaoWNKN2NFa8cw=)
                          2: oE_JgO38R54EauArEOVyRbuSyLc.crl (hash: OcVqO568rE1clJ5A56AK1UfPqwNtY5yujL1Tq1I4q+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Aug 2026 17:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:49:f6:25:bd:57:20:9a:62:2f:46:60:b7:42:3c:01:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
        Validity
            Not Before: Aug 28 20:01:03 2026 GMT
            Not After : Aug 29 20:01:03 2026 GMT
        Subject: CN=b5cb4403d4698467e2241962539210dcb8a9e06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9a:f9:23:b9:26:77:57:1e:d4:18:87:16:70:
                    91:70:17:0b:63:0e:ec:52:0d:ac:45:80:1f:f8:d7:
                    2f:ac:4d:db:29:18:a3:e0:7a:13:aa:77:5d:27:74:
                    01:dd:0c:80:b4:16:f8:fd:63:d9:d4:73:08:bf:14:
                    17:41:b9:92:70:6c:45:bc:e4:1a:dc:ac:39:18:66:
                    2c:9f:c5:64:37:f4:53:6f:20:d4:d2:a7:3d:ac:99:
                    08:b0:77:4d:d6:31:e3:9e:0c:fc:a5:8d:05:c1:ba:
                    b7:f3:85:58:2c:eb:92:b9:aa:3c:a1:41:ee:28:67:
                    f5:bf:47:b8:94:9d:11:a4:18:a3:61:37:91:b0:70:
                    05:a7:eb:f2:eb:50:db:ad:86:9e:36:3d:4d:a2:82:
                    b3:df:af:2c:23:ee:9a:44:53:b4:1a:20:23:de:9a:
                    a5:27:10:c9:a5:dc:da:03:5a:2b:03:d8:1a:46:df:
                    d7:f1:09:bc:e7:09:ec:58:da:c6:76:13:87:75:0d:
                    a6:76:89:4d:cf:df:92:0b:71:47:0a:ea:87:d5:51:
                    ac:3d:0d:f8:ae:d4:9d:bf:a5:04:02:21:df:0c:4b:
                    21:89:9c:97:a4:60:2f:e1:4d:c9:73:d3:8f:e2:ff:
                    ba:22:46:d6:59:36:ff:33:1f:7e:8d:fa:41:72:ea:
                    27:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CB:44:03:D4:69:84:67:E2:24:19:62:53:92:10:DC:B8:A9:E0:6D
            X509v3 Authority Key Identifier:
                keyid:A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:67:fa:3f:8b:fe:5f:b2:d2:5f:81:01:71:6d:b1:36:bb:b9:
         35:4f:13:13:17:b4:ac:e3:13:fe:92:cc:a5:4f:d5:70:b9:f9:
         57:f4:cc:81:53:dc:3d:59:56:f9:05:b2:c9:80:94:ab:72:d7:
         b6:ab:12:66:0e:c5:0a:88:a9:ca:ba:32:6f:2b:a7:e8:2e:04:
         2e:b6:db:ff:c4:e1:e5:8e:3f:6e:22:89:41:f8:7b:27:fa:b9:
         72:d7:f6:83:2b:fb:12:c8:f4:6b:77:6f:c1:4c:db:4c:96:92:
         a3:cb:7f:47:75:58:56:a4:7f:75:30:23:2b:1a:6f:f5:e8:cf:
         74:a9:2e:4c:dd:d9:26:33:0d:f8:1f:d0:eb:e4:6f:6b:0f:f0:
         d2:b9:07:aa:0e:1f:28:6f:ba:c5:1d:35:c2:e9:aa:e2:b4:8d:
         ff:5b:6e:dc:de:fa:b8:4d:e2:90:2f:c6:be:b7:11:2d:d2:4b:
         1f:5d:86:0c:8d:0c:8c:68:84:60:2f:66:1e:d7:65:e6:2d:96:
         83:ba:bf:e9:39:ca:aa:e2:9e:b9:0a:a9:63:1c:80:d2:97:fc:
         17:44:c5:9d:a2:b9:bb:b1:56:12:7e:ca:f0:82:29:bd:bf:b7:
         d8:c0:4a:2a:88:65:b0:00:66:68:7e:32:5c:25:17:ad:b9:bf:
         97:e8:b7:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBJ9iW9VyCaYi9GYLdCPAHLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNGZjOTgwZWRmYzQ3OWUwNDZhZTAyYjEwZTU3MjQ1YmI5
MmM4YjcwHhcNMjYwODI4MjAwMTAzWhcNMjYwODI5MjAwMTAzWjAzMTEwLwYDVQQD
EyhiNWNiNDQwM2Q0Njk4NDY3ZTIyNDE5NjI1MzkyMTBkY2I4YTllMDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZr5I7kmd1ce1BiHFnCRcBcLYw7s
Ug2sRYAf+NcvrE3bKRij4HoTqnddJ3QB3QyAtBb4/WPZ1HMIvxQXQbmScGxFvOQa
3Kw5GGYsn8VkN/RTbyDU0qc9rJkIsHdN1jHjngz8pY0Fwbq384VYLOuSuao8oUHu
KGf1v0e4lJ0RpBijYTeRsHAFp+vy61DbrYaeNj1NooKz368sI+6aRFO0GiAj3pql
JxDJpdzaA1orA9gaRt/X8Qm85wnsWNrGdhOHdQ2mdolNz9+SC3FHCuqH1VGsPQ34
rtSdv6UEAiHfDEshiZyXpGAv4U3Jc9OP4v+6IkbWWTb/Mx9+jfpBcuonawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXLRAPUaYRn4iQZYlOSENy4qeBtMB8GA1UdIwQY
MBaAFKBPyYDt/EeeBGrgKxDlckW7ksi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNTVkZjEtMGJhNi00MzBmLTgwOWQt
NmIwMzVjZWUxOTgxLzEvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNTVkZjEtMGJhNi00MzBmLTgwOWQtNmIwMzVjZWUxOTgx
LzEvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWf6P4v+
X7LSX4EBcW2xNru5NU8TExe0rOMT/pLMpU/VcLn5V/TMgVPcPVlW+QWyyYCUq3LX
tqsSZg7FCoipyroybyun6C4ELrbb/8Th5Y4/biKJQfh7J/q5ctf2gyv7Esj0a3dv
wUzbTJaSo8t/R3VYVqR/dTAjKxpv9ejPdKkuTN3ZJjMN+B/Q6+Rvaw/w0rkHqg4f
KG+6xR01wumq4rSN/1tu3N76uE3ikC/GvrcRLdJLH12GDI0MjGiEYC9mHtdl5i2W
g7q/6TnKquKeuQqpYxyA0pf8F0TFnaK5u7FWEn7K8IIpvb+32MBKKohlsABmaH4y
XCUXrbm/l+i3eA==
-----END CERTIFICATE-----
Generated at Fri Aug 28 22:08:19 2026 by rpki-client