Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
File:                     oE_JgO38R54EauArEOVyRbuSyLc.mft (raw, json)
Hash identifier:          /x2aixGEhLFx5B91bRYqzQVVb3kAkt/YtLj2arYSSso=
Subject key identifier:   BD:28:23:8D:15:0D:90:20:BA:04:66:DA:B2:5D:D8:24:7F:77:50:8B
Authority key identifier: A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
Certificate issuer:       /CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Certificate serial:       01A13F3973337E2B07B9838A439B512ED501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
Manifest number:          0AA9
Signing time:             Thu 15 Oct 2026 11:01:32 +0000
Manifest this update:     Thu 15 Oct 2026 11:01:32 +0000
Manifest next update:     Fri 16 Oct 2026 11:01:32 +0000
Files and hashes:         1: gXBH-XlgpLuYkohpzvO2FkMoumY.asa (hash: DtMcO3PNIaPFH8mu6H1UmOdsSLwdFJaoWNKN2NFa8cw=)
                          2: oE_JgO38R54EauArEOVyRbuSyLc.crl (hash: 4wLPtItOhPEkTkV0fhfWgPL7+PJwl51xNFo6MqpPwKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:39:73:33:7e:2b:07:b9:83:8a:43:9b:51:2e:d5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
        Validity
            Not Before: Oct 15 11:01:32 2026 GMT
            Not After : Oct 16 11:01:32 2026 GMT
        Subject: CN=bd28238d150d9020ba0466dab25dd8247f77508b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4b:8f:7e:4e:6f:f0:d4:56:61:be:f2:c1:03:
                    ce:97:92:c1:4c:8b:03:64:42:96:e0:ca:7a:92:e8:
                    12:a9:dc:ec:ca:83:dd:4c:d7:a0:db:c6:66:74:2b:
                    44:cb:9c:14:c9:6f:01:ef:9f:46:e8:a6:3c:89:78:
                    80:1c:b1:fa:25:52:25:4b:72:bf:55:fc:10:22:15:
                    f0:71:c5:9d:fe:85:cf:b2:29:32:86:f4:bb:9f:fb:
                    9b:b7:c4:fc:0c:86:be:99:f4:6c:c5:b1:e8:37:d2:
                    93:e8:82:89:37:85:92:7b:b0:51:5f:ce:8a:96:46:
                    86:4d:8d:5c:97:a1:d9:55:db:f8:0b:12:e3:ae:0a:
                    1a:63:9d:52:cf:2b:a8:87:df:1f:a6:e5:de:79:dd:
                    ba:98:40:34:c4:1e:cf:74:7f:60:36:c0:5f:78:17:
                    d6:69:7b:aa:6a:ef:0f:44:3a:08:b2:a9:92:6c:54:
                    0f:9a:0f:68:fe:8a:b9:af:ac:53:d4:75:e7:0d:1d:
                    86:96:bd:ec:87:bd:57:e9:cf:b8:e1:71:04:9d:5a:
                    9a:f7:2d:70:30:c3:50:6e:c1:01:4d:d6:e4:cd:a7:
                    08:82:73:0d:aa:5a:b3:6d:f2:9e:e7:41:84:e5:17:
                    f0:05:18:50:bb:4d:10:41:6b:c8:5d:5f:ae:92:0e:
                    b3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:28:23:8D:15:0D:90:20:BA:04:66:DA:B2:5D:D8:24:7F:77:50:8B
            X509v3 Authority Key Identifier:
                keyid:A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:26:26:d3:61:74:53:47:dd:09:f2:3f:4c:e6:88:d7:60:d3:
         01:a7:80:fe:c8:62:18:02:05:6a:19:29:08:85:d7:ee:25:00:
         5a:be:c3:3f:f1:7c:5d:49:b3:2e:45:03:ec:c3:18:06:17:d5:
         af:c4:b9:d7:e9:bc:70:6d:57:14:6c:dc:e7:47:fb:a0:53:d7:
         01:60:d1:95:e6:bb:06:8e:5b:93:1f:0c:bb:ef:00:71:40:c4:
         bf:08:20:5b:cc:5b:c8:2d:72:f9:3c:8e:fa:95:37:93:a0:5a:
         e0:9a:a9:c7:8f:f4:60:ea:b4:df:cc:8e:21:73:e3:a1:1b:80:
         0b:09:c6:a3:fb:25:f4:87:56:1b:0f:21:0d:92:91:3b:93:e8:
         c1:fc:d8:f6:45:cd:3b:cf:72:3f:25:3b:94:da:b1:af:a9:2e:
         7c:eb:0f:a3:c6:5e:ce:6f:18:4a:c4:10:97:2e:08:3b:70:fc:
         7a:de:9c:46:f0:b2:12:28:bc:5d:79:9e:e7:e0:81:7d:9f:e8:
         c5:19:fa:9f:4f:ad:dc:c0:48:ee:83:79:a0:ae:f6:9d:2d:05:
         ea:68:4c:44:0b:3c:7c:ff:98:e9:e9:8b:62:50:48:bb:fd:31:
         78:c7:47:54:9c:f3:a5:54:6f:ea:ce:c3:a8:09:9d:f1:d8:75:
         e8:c9:24:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/OXMzfisHuYOKQ5tRLtUBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNGZjOTgwZWRmYzQ3OWUwNDZhZTAyYjEwZTU3MjQ1YmI5
MmM4YjcwHhcNMjYxMDE1MTEwMTMyWhcNMjYxMDE2MTEwMTMyWjAzMTEwLwYDVQQD
EyhiZDI4MjM4ZDE1MGQ5MDIwYmEwNDY2ZGFiMjVkZDgyNDdmNzc1MDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkuPfk5v8NRWYb7ywQPOl5LBTIsD
ZEKW4Mp6kugSqdzsyoPdTNeg28ZmdCtEy5wUyW8B759G6KY8iXiAHLH6JVIlS3K/
VfwQIhXwccWd/oXPsikyhvS7n/ubt8T8DIa+mfRsxbHoN9KT6IKJN4WSe7BRX86K
lkaGTY1cl6HZVdv4CxLjrgoaY51Szyuoh98fpuXeed26mEA0xB7PdH9gNsBfeBfW
aXuqau8PRDoIsqmSbFQPmg9o/oq5r6xT1HXnDR2Glr3sh71X6c+44XEEnVqa9y1w
MMNQbsEBTdbkzacIgnMNqlqzbfKe50GE5RfwBRhQu00QQWvIXV+ukg6zhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0oI40VDZAgugRm2rJd2CR/d1CLMB8GA1UdIwQY
MBaAFKBPyYDt/EeeBGrgKxDlckW7ksi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNTVkZjEtMGJhNi00MzBmLTgwOWQt
NmIwMzVjZWUxOTgxLzEvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNTVkZjEtMGJhNi00MzBmLTgwOWQtNmIwMzVjZWUxOTgx
LzEvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATSYm02F0
U0fdCfI/TOaI12DTAaeA/shiGAIFahkpCIXX7iUAWr7DP/F8XUmzLkUD7MMYBhfV
r8S51+m8cG1XFGzc50f7oFPXAWDRlea7Bo5bkx8Mu+8AcUDEvwggW8xbyC1y+TyO
+pU3k6Ba4Jqpx4/0YOq038yOIXPjoRuACwnGo/sl9IdWGw8hDZKRO5PowfzY9kXN
O89yPyU7lNqxr6kufOsPo8Zezm8YSsQQly4IO3D8et6cRvCyEii8XXme5+CBfZ/o
xRn6n0+t3MBI7oN5oK72nS0F6mhMRAs8fP+Y6emLYlBIu/0xeMdHVJzzpVRv6s7D
qAmd8dh16MkkYQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:12 2026 by rpki-client