Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
File:                     OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json)
Hash identifier:          XijoEBDKXGlz3KpQOMH15ZfsFXusz0UbhVxBdsTgR9Y=
Subject key identifier:   7F:FF:D8:13:7D:4F:E9:3A:15:D2:C5:CA:2C:B4:1C:48:11:E5:34:C8
Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Certificate issuer:       /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Certificate serial:       01A166EB8B68F5147E8AA943D394C82D231A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
Manifest number:          0A30
Signing time:             Fri 23 Oct 2026 04:01:14 +0000
Manifest this update:     Fri 23 Oct 2026 04:01:14 +0000
Manifest next update:     Sat 24 Oct 2026 04:01:14 +0000
Files and hashes:         1: KYeOuPy-sh1SLcoPNXSyZQIU0MI.roa (hash: Sr5K6ccTAcON+APYQXJhtPURh7qUu9XiFdatnlSg6xs=)
                          2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: 7GBkFFjTBbnRB1V7lH7ypQzTmbJPNEWQhQo0r55Hn5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 02:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:66:eb:8b:68:f5:14:7e:8a:a9:43:d3:94:c8:2d:23:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
        Validity
            Not Before: Oct 23 04:01:14 2026 GMT
            Not After : Oct 24 04:01:14 2026 GMT
        Subject: CN=7fffd8137d4fe93a15d2c5ca2cb41c4811e534c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b5:ac:03:1d:36:11:d8:6f:00:9a:20:a1:36:
                    c8:32:f0:ad:35:16:07:61:43:54:f3:57:2e:8f:35:
                    d8:1d:93:07:98:ee:80:43:64:e2:c7:6a:98:dc:1a:
                    1a:eb:c0:20:70:74:2e:52:e9:2f:c9:2a:f1:8f:ce:
                    c1:04:08:83:8d:40:1d:9d:b7:3c:45:24:54:df:9b:
                    39:53:ee:21:10:f7:24:36:17:09:81:df:a3:fd:cd:
                    25:ea:bb:b0:0f:b5:a2:bf:24:0b:71:8a:a0:60:cd:
                    89:92:c2:ea:75:6c:00:35:a7:14:0d:2c:a1:07:8a:
                    54:54:5b:2f:99:1c:d6:83:b3:9f:08:0f:da:bf:40:
                    b5:e1:17:e7:65:1f:09:aa:c5:af:cc:1c:ee:c7:b4:
                    7f:40:4d:7a:d9:90:3b:0e:21:9c:4f:b1:23:ae:30:
                    83:15:48:f3:4c:7b:34:a5:88:dc:38:e4:01:f9:4a:
                    b1:16:73:66:7b:ef:3f:09:de:30:1c:30:fc:39:48:
                    22:88:17:13:bb:fb:e4:b6:b9:a4:cb:68:01:da:2a:
                    ea:5f:b3:a4:bf:91:f4:2e:e3:3e:e7:0c:5c:2a:4a:
                    e2:b0:d2:d6:30:b0:d1:cd:38:d5:a7:c3:be:cd:46:
                    cc:32:81:2d:c7:91:ac:d8:49:6f:ca:7d:37:9e:7e:
                    71:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FF:D8:13:7D:4F:E9:3A:15:D2:C5:CA:2C:B4:1C:48:11:E5:34:C8
            X509v3 Authority Key Identifier:
                keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ac:61:37:c4:c2:6d:b4:29:0d:c2:a4:36:00:62:ac:a1:04:
         68:8c:e3:4b:c2:22:72:72:75:e5:15:53:0b:05:ae:a9:65:26:
         ee:81:71:1d:1f:20:76:6e:be:c0:4d:a0:1c:a4:70:8c:d0:2c:
         56:dc:a5:a5:30:3d:a8:f9:60:69:2c:c1:6d:2c:76:ce:fd:a1:
         d8:6f:83:5a:26:06:e7:24:be:b0:2d:cc:e2:73:b3:0a:10:ca:
         b6:9d:44:63:ef:4d:65:66:3f:1b:10:cf:0d:6b:04:b7:b8:35:
         60:b7:b5:ce:96:46:5a:0a:75:83:df:f8:23:a4:d1:f0:ef:13:
         ab:1c:69:92:a0:ba:59:ed:48:53:7e:dc:3b:ee:46:52:77:dd:
         46:43:79:20:a9:aa:c1:46:21:83:ab:6c:19:3d:20:99:0a:bd:
         b0:02:11:19:d2:dc:75:cb:1b:54:09:07:4b:1a:b9:75:93:41:
         4d:e5:07:09:08:f0:58:84:a0:92:4f:69:1f:53:9c:8b:8a:fa:
         8d:fe:46:b3:5d:be:e2:f6:a7:5c:8c:48:c5:a1:ca:dd:43:d2:
         80:ed:23:9f:93:44:06:a1:98:47:96:30:82:43:ac:2e:55:a9:
         4a:f8:67:45:ed:9e:81:18:8f:49:c7:fe:e0:4e:0b:aa:f3:a6:
         8e:f0:fc:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFm64to9RR+iqlD05TILSMaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NjRjZGVlZTM0NjExNmNiOTY0MWJhNDgwMGY1NWI5OTA2
ZGMzYTUwHhcNMjYxMDIzMDQwMTE0WhcNMjYxMDI0MDQwMTE0WjAzMTEwLwYDVQQD
Eyg3ZmZmZDgxMzdkNGZlOTNhMTVkMmM1Y2EyY2I0MWM0ODExZTUzNGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrWsAx02EdhvAJogoTbIMvCtNRYH
YUNU81cujzXYHZMHmO6AQ2Tix2qY3Boa68AgcHQuUukvySrxj87BBAiDjUAdnbc8
RSRU35s5U+4hEPckNhcJgd+j/c0l6ruwD7WivyQLcYqgYM2JksLqdWwANacUDSyh
B4pUVFsvmRzWg7OfCA/av0C14RfnZR8JqsWvzBzux7R/QE162ZA7DiGcT7EjrjCD
FUjzTHs0pYjcOOQB+UqxFnNme+8/Cd4wHDD8OUgiiBcTu/vktrmky2gB2irqX7Ok
v5H0LuM+5wxcKkrisNLWMLDRzTjVp8O+zUbMMoEtx5Gs2Elvyn03nn5x1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH//2BN9T+k6FdLFyiy0HEgR5TTIMB8GA1UdIwQY
MBaAFDlkze7jRhFsuWQbpIAPVbmQbcOlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hMDE4YTctNmI1Yy00MjM5LTg5Yjct
MmEwMjQ3ZmJiNmQ1LzEvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hMDE4YTctNmI1Yy00MjM5LTg5YjctMmEwMjQ3ZmJiNmQ1
LzEvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhaxhN8TC
bbQpDcKkNgBirKEEaIzjS8IicnJ15RVTCwWuqWUm7oFxHR8gdm6+wE2gHKRwjNAs
VtylpTA9qPlgaSzBbSx2zv2h2G+DWiYG5yS+sC3M4nOzChDKtp1EY+9NZWY/GxDP
DWsEt7g1YLe1zpZGWgp1g9/4I6TR8O8TqxxpkqC6We1IU37cO+5GUnfdRkN5IKmq
wUYhg6tsGT0gmQq9sAIRGdLcdcsbVAkHSxq5dZNBTeUHCQjwWISgkk9pH1Oci4r6
jf5Gs12+4vanXIxIxaHK3UPSgO0jn5NEBqGYR5YwgkOsLlWpSvhnRe2egRiPScf+
4E4LqvOmjvD8uw==
-----END CERTIFICATE-----
Generated at Fri Oct 23 13:13:07 2026 by rpki-client