Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
File:                     PubOz_2bi7oY1HTns5k-Ch0U27M.mft (raw, json)
Hash identifier:          +Sf0KkLU/4zjAYA7zW/WeHpmGLzG60xs8tuyZ+xeXz8=
Subject key identifier:   A9:96:21:45:C4:6E:8E:56:7C:CB:9D:D8:69:46:E7:45:C6:A4:9E:A3
Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
Certificate issuer:       /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Certificate serial:       01A0024ACE8B6AAAFC245E08FB3C14B991F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 22:00:51 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:51 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:51 +0000
Files and hashes:         1: HgjQlaKjOcxyBGYejwW2nEs1AV4.roa (hash: A/JVdLkAtd7xSgRJY34UCglbvZrgY4rTBx9M0XvHris=)
                          2: KbPCfCpgY4busEPKG3wKIKYL4ts.roa (hash: /r3wKFeByv8IWPnZi01I5rTvuzXRQVBcL8LQjvMalwY=)
                          3: PubOz_2bi7oY1HTns5k-Ch0U27M.crl (hash: evDbH4LfcFM+RmKCyipvj28y4wm4qzhr8sVxup5us6M=)
                          4: TR9cohMhMoQQxWhWiR1qGs1BMC8.roa (hash: LYdTaX6pjmd3oJ4vpjV9U20LQlY3HXHKSPGaKNT6k0M=)
                          5: VVHWjLC5gXhkxNQ7IVFDXzmzeZI.roa (hash: xCZynqZw2sX0L0GEOZPMQ2Okzgf6Cs5V0s8Gbvable4=)
                          6: na7v2RTX0iJO5QICr8PmbCw-LUM.roa (hash: jwROABglDlbIBf0fqlrQ82IKxKEdLiyV166j/7Y15oM=)
                          7: ycbxLoTJEDsv40EPKCzklrp5vCU.roa (hash: ik9FtWC2uSrCFeO2vECTjX7gm9PiFa3XhpXGDwO8G94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:ce:8b:6a:aa:fc:24:5e:08:fb:3c:14:b9:91:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
        Validity
            Not Before: Aug 14 22:00:51 2026 GMT
            Not After : Aug 15 22:00:51 2026 GMT
        Subject: CN=a9962145c46e8e567ccb9dd86946e745c6a49ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:94:9c:96:dd:36:f5:c4:02:bd:eb:66:5c:4e:
                    1e:0e:10:ab:90:3c:c4:0c:84:29:a1:91:d0:6d:5a:
                    ac:9c:06:28:6b:40:55:ac:31:ac:a1:d6:f4:f1:d7:
                    59:68:97:f0:ba:2f:a6:b1:75:dc:d6:4f:63:53:cd:
                    f1:c8:7a:1e:cc:79:0d:62:bb:45:48:05:be:03:b2:
                    d0:b6:eb:a9:87:11:2c:16:99:af:41:64:8a:eb:e4:
                    53:05:48:ad:16:3d:f8:9c:61:2a:23:7e:34:ae:2c:
                    b1:4f:c8:f8:29:25:fe:c9:51:3d:03:06:a0:e6:ad:
                    47:74:68:81:d3:31:41:d3:e4:01:a5:2b:1f:17:5c:
                    76:4d:74:1c:b2:c7:d4:54:71:69:38:f6:cf:90:76:
                    28:4f:bb:61:68:6a:6e:cd:91:f2:98:57:33:58:76:
                    e1:25:bc:bd:a0:48:cb:b5:0c:82:da:ec:80:fa:42:
                    12:ad:bc:f2:ac:ed:1b:8e:02:9a:39:4d:78:22:b2:
                    07:f7:84:15:27:3c:45:3f:ca:dd:24:fc:2f:6f:32:
                    14:53:cf:eb:77:76:4c:05:fd:4a:dc:12:6e:5e:c6:
                    9c:83:af:4f:76:aa:5c:37:5a:77:9d:33:f8:8a:0e:
                    67:0e:0b:ab:5f:ed:a7:1a:75:67:95:38:e2:2f:de:
                    44:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:96:21:45:C4:6E:8E:56:7C:CB:9D:D8:69:46:E7:45:C6:A4:9E:A3
            X509v3 Authority Key Identifier:
                keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:5a:b1:65:42:65:e7:9c:6c:f4:fa:08:70:c1:77:85:64:ba:
         46:e9:c0:2f:c8:fb:aa:4e:19:45:0f:a6:c4:b0:fb:84:0c:3f:
         9d:9a:35:c4:5a:80:f7:df:aa:fb:c2:c4:87:1a:59:3f:00:0f:
         48:09:09:f8:de:33:fa:96:75:49:50:bc:f9:51:1e:48:84:12:
         fc:c2:50:33:b9:39:6e:87:1f:4d:8d:8a:38:b1:71:5b:12:fe:
         96:26:7d:55:92:74:bb:bd:61:46:e4:fe:d5:88:61:0a:e0:fb:
         f9:27:ab:4d:91:21:a5:ac:db:75:c0:fa:79:8f:3c:86:52:34:
         43:82:81:b6:f4:1f:e6:d2:49:e0:91:e8:a2:1f:50:d0:5c:b7:
         18:d9:98:97:f9:2f:ba:ba:bd:d2:be:f8:40:79:6f:4d:b8:11:
         c0:f1:20:5a:ed:81:60:c0:2a:be:ee:62:c0:46:da:ee:48:8f:
         39:35:a1:6d:76:89:fb:84:98:6e:fb:5c:96:49:36:c2:f9:65:
         7e:3d:d9:a1:00:a4:39:12:42:fb:cf:dd:0b:1a:e5:b3:55:4e:
         ab:ac:4e:2b:6b:5d:5b:92:e7:4c:0b:e6:70:3c:b8:3f:58:b0:
         8c:8a:fe:6e:7a:8b:f1:84:7a:c3:14:59:68:aa:0e:7b:37:8c:
         10:14:5a:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACSs6Laqr8JF4I+zwUuZHwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZTZjZWNmZmQ5YjhiYmExOGQ0NzRlN2IzOTkzZTBhMWQx
NGRiYjMwHhcNMjYwODE0MjIwMDUxWhcNMjYwODE1MjIwMDUxWjAzMTEwLwYDVQQD
EyhhOTk2MjE0NWM0NmU4ZTU2N2NjYjlkZDg2OTQ2ZTc0NWM2YTQ5ZWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pSclt029cQCvetmXE4eDhCrkDzE
DIQpoZHQbVqsnAYoa0BVrDGsodb08ddZaJfwui+msXXc1k9jU83xyHoezHkNYrtF
SAW+A7LQtuuphxEsFpmvQWSK6+RTBUitFj34nGEqI340riyxT8j4KSX+yVE9Awag
5q1HdGiB0zFB0+QBpSsfF1x2TXQcssfUVHFpOPbPkHYoT7thaGpuzZHymFczWHbh
Jby9oEjLtQyC2uyA+kISrbzyrO0bjgKaOU14IrIH94QVJzxFP8rdJPwvbzIUU8/r
d3ZMBf1K3BJuXsacg69PdqpcN1p3nTP4ig5nDgurX+2nGnVnlTjiL95EkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmWIUXEbo5WfMud2GlG50XGpJ6jMB8GA1UdIwQY
MBaAFD7mzs/9m4u6GNR057OZPgodFNuzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNjFjYWEtMjUwMC00Mzg4LWE5ZmEt
NzMyNDkxMzk3NWQ1LzEvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lNjFjYWEtMjUwMC00Mzg4LWE5ZmEtNzMyNDkxMzk3NWQ1
LzEvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlqxZUJl
55xs9PoIcMF3hWS6RunAL8j7qk4ZRQ+mxLD7hAw/nZo1xFqA99+q+8LEhxpZPwAP
SAkJ+N4z+pZ1SVC8+VEeSIQS/MJQM7k5bocfTY2KOLFxWxL+liZ9VZJ0u71hRuT+
1YhhCuD7+SerTZEhpazbdcD6eY88hlI0Q4KBtvQf5tJJ4JHooh9Q0Fy3GNmYl/kv
urq90r74QHlvTbgRwPEgWu2BYMAqvu5iwEba7kiPOTWhbXaJ+4SYbvtclkk2wvll
fj3ZoQCkORJC+8/dCxrls1VOq6xOK2tdW5LnTAvmcDy4P1iwjIr+bnqL8YR6wxRZ
aKoOezeMEBRaCw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:28:02 2026 by rpki-client