Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
File:                     PubOz_2bi7oY1HTns5k-Ch0U27M.mft (raw, json)
Hash identifier:          fhwCLVDN5xSeC3JPtQkLSmHPCEJXMfDf05iZ24Ovk34=
Subject key identifier:   54:F0:DF:4E:F1:50:43:D1:2D:90:6C:DC:A4:74:C7:C7:4C:C9:FA:50
Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
Certificate issuer:       /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Certificate serial:       01A123F8583BEA9B4C27E4E00875586656AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
Manifest number:          1A96
Signing time:             Sat 10 Oct 2026 04:00:40 +0000
Manifest this update:     Sat 10 Oct 2026 04:00:40 +0000
Manifest next update:     Sun 11 Oct 2026 04:00:40 +0000
Files and hashes:         1: HgjQlaKjOcxyBGYejwW2nEs1AV4.roa (hash: A/JVdLkAtd7xSgRJY34UCglbvZrgY4rTBx9M0XvHris=)
                          2: KbPCfCpgY4busEPKG3wKIKYL4ts.roa (hash: /r3wKFeByv8IWPnZi01I5rTvuzXRQVBcL8LQjvMalwY=)
                          3: PubOz_2bi7oY1HTns5k-Ch0U27M.crl (hash: aBpatvxmg7DJTTajPPvcmHgQA8qmEiUC9PzUQQ5b9Dg=)
                          4: TR9cohMhMoQQxWhWiR1qGs1BMC8.roa (hash: LYdTaX6pjmd3oJ4vpjV9U20LQlY3HXHKSPGaKNT6k0M=)
                          5: VVHWjLC5gXhkxNQ7IVFDXzmzeZI.roa (hash: xCZynqZw2sX0L0GEOZPMQ2Okzgf6Cs5V0s8Gbvable4=)
                          6: na7v2RTX0iJO5QICr8PmbCw-LUM.roa (hash: jwROABglDlbIBf0fqlrQ82IKxKEdLiyV166j/7Y15oM=)
                          7: ycbxLoTJEDsv40EPKCzklrp5vCU.roa (hash: ik9FtWC2uSrCFeO2vECTjX7gm9PiFa3XhpXGDwO8G94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:23:f8:58:3b:ea:9b:4c:27:e4:e0:08:75:58:66:56:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
        Validity
            Not Before: Oct 10 04:00:40 2026 GMT
            Not After : Oct 11 04:00:40 2026 GMT
        Subject: CN=54f0df4ef15043d12d906cdca474c7c74cc9fa50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:76:8a:04:c1:bc:c9:c5:02:ab:fd:f9:33:
                    b9:27:27:99:ff:d0:19:c7:83:5d:87:9c:3a:07:c2:
                    f4:b4:54:5e:0f:95:c8:3a:96:f0:f4:67:38:af:8f:
                    66:14:74:dd:cc:86:a9:84:48:b1:31:e2:0e:90:23:
                    a2:75:e7:16:d6:58:7a:2f:71:3d:1b:10:97:27:ef:
                    0c:59:b0:87:6d:1b:3e:3e:57:3f:07:b4:8f:80:07:
                    dd:c2:b3:24:72:d0:ad:2f:cb:e2:ca:a9:f6:db:13:
                    53:a1:44:75:30:17:91:3a:50:d6:4d:ea:36:36:88:
                    85:9c:78:0b:43:8b:87:35:57:c1:b8:98:7a:71:a1:
                    7d:9c:71:6c:de:cf:30:bf:5c:e8:61:f4:3a:1d:92:
                    f8:e5:80:b8:17:0e:53:e3:a0:dc:0c:b9:ea:4e:f3:
                    2f:85:55:58:48:69:8f:b4:92:70:3e:62:66:12:ec:
                    e8:3b:71:9c:8c:ad:56:f9:88:6f:31:4c:0c:71:f4:
                    61:68:ca:a2:2a:3f:2c:c1:e5:66:87:3a:0c:44:d6:
                    61:5d:54:e0:ce:7a:ae:1b:49:2d:c6:0b:00:6a:ab:
                    68:8d:ef:65:f8:cd:7e:3f:16:2a:b1:9e:70:b4:e6:
                    f1:dd:f7:2d:f1:58:05:9d:7d:dc:a3:43:c7:07:39:
                    c0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F0:DF:4E:F1:50:43:D1:2D:90:6C:DC:A4:74:C7:C7:4C:C9:FA:50
            X509v3 Authority Key Identifier:
                keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:24:c5:c8:08:d6:79:ee:08:82:e6:b1:6a:88:13:17:3b:96:
         17:01:c8:09:fa:be:66:62:cf:64:1c:a6:60:06:b2:47:77:28:
         ec:34:e5:88:df:57:7f:ac:74:31:78:7f:50:a3:91:48:37:e7:
         1e:da:b1:1e:97:06:62:bb:dd:f0:5b:1e:e8:69:c2:04:9b:96:
         3b:ed:6d:f1:7a:ec:76:c6:cf:3d:f0:77:d4:32:02:d6:da:93:
         5d:d0:2c:7d:2a:2d:13:a4:ca:6b:c8:3a:a6:45:8c:ca:cd:72:
         f3:06:9e:ee:07:25:18:e6:a8:bf:cd:43:6a:27:36:d4:37:63:
         a3:34:b2:57:65:4f:21:d7:17:35:ce:b4:1c:6a:bf:14:37:ed:
         82:a0:a7:da:63:ee:9e:a3:18:e7:df:12:4b:9c:42:0a:32:c6:
         ce:48:19:13:5d:62:5c:7e:28:62:5f:62:49:46:2d:94:3d:c8:
         b5:4e:1b:9a:15:b3:d4:cd:a6:5a:91:6a:88:e6:b0:25:07:9e:
         bd:c5:c9:28:bb:1d:d6:a6:7f:ab:5a:9a:06:5b:2e:96:46:ff:
         73:52:48:d3:8c:bd:ae:f2:1f:20:55:0f:7f:ae:53:0b:19:36:
         c6:1d:e1:dd:f5:dc:5f:00:8a:80:5a:d7:a9:a4:42:a7:d7:28:
         00:9b:4c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:39:01 2026 by rpki-client