Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
File:                     OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft (raw, json)
Hash identifier:          8BvOe1Ks10kQ23yeGWVr4V2tf9/WEzMuMWA6EWTsMkc=
Subject key identifier:   07:31:46:4E:94:7B:D2:47:45:CE:0F:75:5F:3A:17:02:56:54:45:7E
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Certificate issuer:       /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial:       01A1084B122FBD4631A1F51ACA19900B7897
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
Manifest number:          159F
Signing time:             Sun 04 Oct 2026 19:01:39 +0000
Manifest this update:     Sun 04 Oct 2026 19:01:39 +0000
Manifest next update:     Mon 05 Oct 2026 19:01:39 +0000
Files and hashes:         1: 8YjfuQgdLCvL-Jpmwk6qtizfv_I.roa (hash: brAMlNDL72wfdOjb6ddjdyt7eJo3B0Foc3PWILSQa/8=)
                          2: 9n4VcJdW8qnQyuWz0vME2QO1fbA.roa (hash: S37EYsMTrmOyNa0qB2TT/fhsEUbmtLIrd9epgXzmCws=)
                          3: GZDzHGbDx7dfkoatOEujE-QeXX0.roa (hash: rp5gMVM6d0QMtfUx8hE8lYmJBJMynSH2EW1XEZUY1fk=)
                          4: NzRF1KMW-RjrnCQ45Ns__CGotH0.roa (hash: vgtU60XykZYUOdD/K3o47xgLUs91d2y5R24TZ2aLcb4=)
                          5: OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl (hash: zILkuPmBS2DMmB53hCLY/2jNeYZrem+eb8gtsB09e+0=)
                          6: hHhTehEBjNf1KtA383HryRHP5GU.roa (hash: 553Jp1J+2Jv+MXIIihnE80X01/4/KUBqAe/MNZh5Kwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 19:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:08:4b:12:2f:bd:46:31:a1:f5:1a:ca:19:90:0b:78:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
        Validity
            Not Before: Oct  4 19:01:39 2026 GMT
            Not After : Oct  5 19:01:39 2026 GMT
        Subject: CN=0731464e947bd24745ce0f755f3a17025654457e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:85:87:27:21:0f:46:88:19:36:2d:96:31:
                    13:6a:72:7f:f2:67:26:0f:08:e3:28:b3:4b:36:64:
                    56:47:d5:32:54:3d:7c:12:c2:d8:f1:f5:39:a4:2a:
                    b5:c5:2e:19:a6:5f:8b:bf:47:16:e1:8d:ec:80:30:
                    b9:5b:f6:41:63:6e:7d:68:ab:ab:5e:47:72:7e:16:
                    d6:d5:26:93:da:24:cd:06:04:09:94:af:b9:de:3d:
                    e7:c5:a7:d8:c9:52:72:8f:af:b4:4c:62:ad:7e:58:
                    af:97:00:11:ee:a8:58:20:be:56:f4:06:ef:37:03:
                    b2:63:dc:dd:97:78:14:f8:41:69:db:2a:96:e3:34:
                    eb:0b:2b:9b:e2:a3:c1:39:32:0f:35:15:91:d2:25:
                    9a:b2:1b:d7:c1:f1:8c:c8:63:e8:00:5d:6c:52:3f:
                    6a:c6:42:e1:74:2b:69:b3:60:47:73:a8:28:ab:99:
                    ed:6d:d5:73:72:09:28:a3:ca:a7:30:0d:d8:dc:97:
                    cf:2f:a3:6f:fb:4f:df:2a:97:ca:04:2d:51:1f:9c:
                    85:7d:6f:18:6f:14:49:48:3a:eb:cb:c6:72:81:37:
                    a4:a2:f1:42:49:27:26:eb:3b:43:33:c3:d4:91:58:
                    aa:8d:18:b2:ae:54:a2:4c:49:63:3b:0f:6c:97:df:
                    fa:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:31:46:4E:94:7B:D2:47:45:CE:0F:75:5F:3A:17:02:56:54:45:7E
            X509v3 Authority Key Identifier:
                keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:1d:cd:e1:7c:a1:b3:4b:0e:24:78:0a:bc:e0:09:df:8b:67:
         48:f8:64:16:4a:79:cc:3b:83:51:c3:53:b3:17:ec:fd:21:3d:
         f5:c2:0b:5e:30:af:d7:92:31:d1:92:86:41:fe:73:af:71:8f:
         00:6e:e6:7c:e1:e1:a8:24:6d:f3:83:7b:35:c6:18:3a:dd:cf:
         5c:fa:f4:48:4f:0b:c1:4e:93:f5:44:d2:f1:4a:2f:a5:ed:79:
         c1:2b:6b:a8:d5:5f:b3:cc:51:06:97:d9:4f:fe:c1:85:00:59:
         50:e1:6a:a3:7c:36:62:23:54:ca:23:c9:4b:60:62:23:6f:9c:
         c2:b6:15:5e:c2:4d:c2:4b:64:62:11:a7:d9:9f:61:a5:d4:79:
         aa:11:d8:97:8a:f0:a1:6e:dd:12:12:65:27:c1:b9:94:09:d4:
         38:8e:7e:d6:41:f3:a2:12:41:e6:8e:d9:34:dd:9e:7f:39:77:
         f2:79:23:9c:67:ba:ed:46:eb:22:16:ca:35:64:a3:f0:c4:d5:
         b8:57:13:d8:32:23:1c:5f:7b:3e:d2:c7:35:80:6e:9e:4b:d7:
         86:48:6a:23:80:8c:32:65:82:fd:ec:3f:26:ab:5b:95:2c:fc:
         0b:d2:a0:f4:ad:05:c6:95:6f:61:0f:ce:f1:98:e9:65:03:59:
         8a:2f:69:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:41:40 2026 by rpki-client