Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
File:                     OheL_-MM22DhSQ0up-cS9ASb-eU.mft (raw, json)
Hash identifier:          WKxA8IErMeMIJzHYkXqonGu0YeyZgEhTf2wJvPnqCAY=
Subject key identifier:   AE:E5:98:CF:AB:FF:F0:0F:6A:4B:0A:C7:1F:AB:13:E9:8D:64:C3:C7
Authority key identifier: 3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
Certificate issuer:       /CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
Certificate serial:       01A0890C51E364412BC57CF707F8C38787D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
Manifest number:          01A2
Signing time:             Thu 10 Sep 2026 02:01:21 +0000
Manifest this update:     Thu 10 Sep 2026 02:01:21 +0000
Manifest next update:     Fri 11 Sep 2026 02:01:21 +0000
Files and hashes:         1: 3NvQLbl2JPb-Gx07toKt-8TX1FA.roa (hash: DJnggPoVXnYpKJsX86Ol2F0P4IpRyrVC4wg+ZYq8L+A=)
                          2: OheL_-MM22DhSQ0up-cS9ASb-eU.crl (hash: Yy30epjvHU5UBJsqRyj9sUrv6Xji73P1d1mKlnlvkbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:0c:51:e3:64:41:2b:c5:7c:f7:07:f8:c3:87:87:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
        Validity
            Not Before: Sep 10 02:01:21 2026 GMT
            Not After : Sep 11 02:01:21 2026 GMT
        Subject: CN=aee598cfabfff00f6a4b0ac71fab13e98d64c3c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3d:a1:f1:4d:6d:26:85:42:ae:50:6f:78:7f:
                    dd:53:9c:72:e6:34:0b:40:29:0c:61:31:d9:c9:06:
                    da:d8:a4:44:36:dd:47:6e:a9:f0:bf:7a:60:db:c2:
                    5d:e9:de:6c:e4:85:f7:44:d0:87:3d:66:01:b4:6d:
                    3d:ae:e2:85:23:3e:4e:10:2b:82:4a:6f:68:69:0e:
                    70:45:71:95:fa:9b:c3:9d:2f:79:e1:8e:cb:2a:1e:
                    0a:94:41:1e:3e:74:06:e6:fc:82:84:11:1c:b7:c6:
                    28:cb:aa:48:a9:97:ad:2f:49:b5:f5:fd:01:63:4c:
                    79:c1:c0:f5:c4:f4:5e:f3:bf:95:39:75:1e:a2:31:
                    02:d3:da:e1:c7:a9:c6:60:d7:ae:26:7b:71:97:10:
                    15:57:ad:71:9a:07:ad:9a:2f:b3:2c:af:e6:c5:2f:
                    80:1f:f5:90:4c:71:e1:c2:1e:07:03:ef:28:00:b3:
                    fb:a9:05:7f:bc:2c:84:dd:25:d5:7d:fb:4d:06:74:
                    10:4d:07:cd:de:77:87:a2:df:f1:ec:bc:59:b3:6d:
                    df:aa:bc:73:e1:81:ec:ca:98:d1:0d:28:fe:22:65:
                    e2:e5:ab:43:61:af:c1:71:e1:78:ed:88:4c:6d:65:
                    b5:eb:ef:c5:50:61:22:be:d8:2d:41:13:5a:d0:8d:
                    06:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E5:98:CF:AB:FF:F0:0F:6A:4B:0A:C7:1F:AB:13:E9:8D:64:C3:C7
            X509v3 Authority Key Identifier:
                keyid:3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:35:a4:f1:05:da:c7:db:a0:de:84:72:c4:af:94:5c:92:c9:
         94:f0:ab:30:45:d4:5f:a6:53:4f:7f:84:22:7a:c1:2c:e8:14:
         88:b0:8b:28:90:20:c1:a7:33:36:74:45:86:d2:30:54:1e:56:
         96:fd:28:ad:41:8f:32:a1:5f:fc:7f:8a:1a:77:38:7b:ee:fb:
         8b:12:db:b7:79:ec:b4:9c:2f:e0:08:96:a9:31:f1:05:96:eb:
         4e:94:30:46:d9:83:eb:19:aa:0d:7e:2a:25:2c:17:5d:c0:12:
         e1:04:50:1f:28:81:46:86:cf:70:db:72:49:38:ad:da:5f:8b:
         5f:cb:58:b8:9c:a4:3f:02:9e:0c:06:07:b0:f5:76:b2:7b:83:
         e7:88:86:f3:ce:f7:75:21:c8:cf:04:c7:86:cb:93:4b:81:cd:
         be:1d:38:98:5b:5f:4a:1e:15:39:c1:2f:c2:f9:c4:3a:b8:55:
         34:03:23:53:de:61:93:bf:d2:b8:7f:9b:81:eb:3d:d7:29:62:
         23:61:4e:f4:bf:9e:c6:15:2a:93:d6:92:d1:df:fe:fa:8a:93:
         ad:cf:7c:4b:3b:2c:e9:70:cd:b5:06:38:cc:fe:4f:c2:8a:69:
         c5:c0:3b:3a:7f:b1:05:43:1a:f3:c0:b9:72:51:af:c8:28:41:
         77:06:01:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:54:59 2026 by rpki-client