Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
File:                     xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json)
Hash identifier:          VORvAZ0W7BZ13OAuLLsfIajnnRG/wkhc2XvXFa8zvFc=
Subject key identifier:   D2:A6:61:76:57:B8:71:25:7D:6D:23:2B:01:12:99:46:30:D3:8A:D2
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Certificate issuer:       /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial:       01A09A6D399DE13D26F464418FF5BA5EB771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
Manifest number:          139A
Signing time:             Sun 13 Sep 2026 11:00:44 +0000
Manifest this update:     Sun 13 Sep 2026 11:00:44 +0000
Manifest next update:     Mon 14 Sep 2026 11:00:44 +0000
Files and hashes:         1: AGGhluGFEICw55ju4TycffudhH8.roa (hash: tJcRE21n7ilMJT0RZ9e1adylptP6kCgkq842wuhhP6M=)
                          2: ATFqvKQfCzg1eIhHj9ilysnZYnE.roa (hash: 9xWvqqO+irmFSgWZgkDiVyOSk6AqF02qWQdfh9GrCc8=)
                          3: HRIhwEGo9k5MDZh2v0iMwSG0qac.roa (hash: cbBWsRzGijvkkbsuZLFU/wPbUMhwo+cAOpoz/z5OCD8=)
                          4: NIt5HAEHP3eGIkRaRfmU_TQEUio.roa (hash: kNqtp8gVzKVPwqTczsFvU1xgIi6B9Z0PZaQgvs2xN6o=)
                          5: _lfdoiLagSclQFLhRG9TZSert0s.roa (hash: BzO/SBnCrjXko5DW8YSZkFc4F4C9Udpc0JMuFJcr16U=)
                          6: gtTwRDBJR-BbMiRZiF0UkREdrNI.roa (hash: EYI6Dc616oG3PdcronQ8IrDd6TturvsbVQq4J3V4p+w=)
                          7: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: c3X2v5dsztWfJFnuwvrpEswbIi/QfbkCtv09r4X/VM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Sep 2026 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:9a:6d:39:9d:e1:3d:26:f4:64:41:8f:f5:ba:5e:b7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
        Validity
            Not Before: Sep 13 11:00:44 2026 GMT
            Not After : Sep 14 11:00:44 2026 GMT
        Subject: CN=d2a6617657b871257d6d232b0112994630d38ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:21:bb:5a:e3:be:1d:e1:15:00:a0:15:f6:
                    79:83:de:af:4f:d9:58:e3:fb:20:2b:ab:17:7a:75:
                    3b:47:e1:cf:6f:5e:59:e3:c3:fe:4c:44:17:d0:15:
                    88:28:1a:77:71:64:98:a7:88:bf:f5:04:6c:3c:22:
                    ef:12:fd:18:78:60:7b:23:24:df:b7:48:cd:27:ba:
                    2f:2a:b5:cd:97:3b:ca:46:87:5f:fa:19:f4:3b:ff:
                    67:b5:68:49:94:d6:61:39:28:c7:13:d1:3d:04:0b:
                    e0:6e:72:aa:46:99:7a:78:6f:2b:49:3d:c5:ec:02:
                    59:53:76:43:81:c4:12:f0:56:8d:e3:47:8b:7d:17:
                    a6:cc:ce:0c:d1:0a:a2:e3:8c:61:01:71:15:af:b1:
                    2a:3a:a1:6d:ff:f4:b1:cc:eb:57:ed:ef:62:ba:6e:
                    e3:3a:7d:2f:10:1c:b6:a8:8d:8d:6e:c1:c6:eb:7a:
                    cd:d8:4c:4e:9c:a9:8d:59:14:55:0f:6b:56:fb:30:
                    9f:78:d4:75:fc:28:86:c2:20:ca:7d:48:8a:93:51:
                    e2:bf:a1:28:c7:88:e7:eb:e5:6e:d9:c0:47:51:bb:
                    30:f1:b6:98:dc:2b:6a:12:dd:eb:49:b4:a0:37:4b:
                    36:56:f5:a6:ab:55:54:04:f9:ab:ac:80:f9:94:af:
                    25:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A6:61:76:57:B8:71:25:7D:6D:23:2B:01:12:99:46:30:D3:8A:D2
            X509v3 Authority Key Identifier:
                keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c8:b5:79:dc:9c:ab:07:62:ad:70:b0:3b:37:50:e4:7d:f6:
         72:a9:aa:43:a1:7d:86:b6:ac:1e:99:6c:79:e7:c8:e7:d7:29:
         c8:3a:87:34:22:7c:3d:26:2f:6b:f2:d3:e5:71:04:dd:c0:6a:
         6f:be:19:16:2b:7e:94:7b:f2:ef:4e:0f:cb:eb:b0:85:87:ba:
         52:ef:5f:fb:5c:dc:68:06:86:53:5f:b9:1b:da:67:a2:6f:be:
         1b:2d:78:92:6a:6c:7d:e1:99:a2:c4:9b:cc:83:c9:c4:20:c3:
         c4:ba:f1:7d:0d:60:a3:38:b7:6d:e7:b8:c7:51:fd:eb:12:93:
         86:38:99:31:39:ca:02:f5:22:56:3a:98:a0:80:48:8c:fc:d3:
         b2:c6:95:f0:c1:2a:31:b3:81:dc:9f:70:be:ab:3a:61:66:86:
         73:49:e6:18:19:fc:81:7a:0d:7d:97:e7:85:5d:5d:a5:6f:ff:
         e9:bf:53:9d:25:0e:8a:dd:c9:2f:1e:04:1e:41:81:20:d1:f9:
         62:08:f9:fb:42:22:b0:fd:44:ca:b5:85:ab:ce:57:e1:86:20:
         b2:73:4c:d8:2b:50:55:aa:e3:84:cb:21:d7:56:9a:88:bf:9b:
         c3:b3:81:75:29:b1:5a:c1:64:1f:53:f5:63:26:c6:7e:40:ca:
         9d:84:31:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCabTmd4T0m9GRBj/W6XrdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZWIzNGRkYTJmODA5NDk2ODQ5NDg5MjA2MzM1MWVlMGYx
MGU5MWEwHhcNMjYwOTEzMTEwMDQ0WhcNMjYwOTE0MTEwMDQ0WjAzMTEwLwYDVQQD
EyhkMmE2NjE3NjU3Yjg3MTI1N2Q2ZDIzMmIwMTEyOTk0NjMwZDM4YWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBkhu1rjvh3hFQCgFfZ5g96vT9lY
4/sgK6sXenU7R+HPb15Z48P+TEQX0BWIKBp3cWSYp4i/9QRsPCLvEv0YeGB7IyTf
t0jNJ7ovKrXNlzvKRodf+hn0O/9ntWhJlNZhOSjHE9E9BAvgbnKqRpl6eG8rST3F
7AJZU3ZDgcQS8FaN40eLfRemzM4M0Qqi44xhAXEVr7EqOqFt//SxzOtX7e9ium7j
On0vEBy2qI2NbsHG63rN2ExOnKmNWRRVD2tW+zCfeNR1/CiGwiDKfUiKk1Hiv6Eo
x4jn6+Vu2cBHUbsw8baY3CtqEt3rSbSgN0s2VvWmq1VUBPmrrID5lK8lMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKmYXZXuHElfW0jKwESmUYw04rSMB8GA1UdIwQY
MBaAFMTrNN2i+AlJaElIkgYzUe4PEOkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEt
YTM0N2I1NmYzYjlhLzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEtYTM0N2I1NmYzYjlh
LzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8i1edyc
qwdirXCwOzdQ5H32cqmqQ6F9hrasHplseefI59cpyDqHNCJ8PSYva/LT5XEE3cBq
b74ZFit+lHvy704Py+uwhYe6Uu9f+1zcaAaGU1+5G9pnom++Gy14kmpsfeGZosSb
zIPJxCDDxLrxfQ1gozi3bee4x1H96xKThjiZMTnKAvUiVjqYoIBIjPzTssaV8MEq
MbOB3J9wvqs6YWaGc0nmGBn8gXoNfZfnhV1dpW//6b9TnSUOit3JLx4EHkGBINH5
Ygj5+0IisP1EyrWFq85X4YYgsnNM2CtQVarjhMsh11aaiL+bw7OBdSmxWsFkH1P1
YybGfkDKnYQxEg==
-----END CERTIFICATE-----
Generated at Sun Sep 13 15:47:38 2026 by rpki-client