Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
File:                     oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft (raw, json)
Hash identifier:          QV1V184Ztw6mhjlN0lPA1R5KybPDz94I6WYjgad38xQ=
Subject key identifier:   81:D5:EF:91:20:2F:BD:73:86:E0:84:1C:0A:6C:46:A7:8E:CB:53:7A
Authority key identifier: A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77
Certificate issuer:       /CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
Certificate serial:       01A0EF9D6FED95B0BF7B8CBFBBBA5068E572
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
Manifest number:          022D
Signing time:             Wed 30 Sep 2026 00:01:07 +0000
Manifest this update:     Wed 30 Sep 2026 00:01:07 +0000
Manifest next update:     Thu 01 Oct 2026 00:01:07 +0000
Files and hashes:         1: WyQBbpbR1AvAKhTsL71x6qgch7U.asa (hash: 043dlMMNEhoWphFwOdB6ptcTMcRQS915TTU2W0PNpeI=)
                          2: oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl (hash: 4LtqQM0n5wYOMuAF5CRlyTUT846GchGen77eFaFADIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ef:9d:6f:ed:95:b0:bf:7b:8c:bf:bb:ba:50:68:e5:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
        Validity
            Not Before: Sep 30 00:01:07 2026 GMT
            Not After : Oct  1 00:01:07 2026 GMT
        Subject: CN=81d5ef91202fbd7386e0841c0a6c46a78ecb537a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:c1:1c:c9:c6:2c:fb:75:a5:e7:3c:6b:90:
                    52:0a:e4:2d:d0:dc:e9:39:96:b3:c8:1d:a9:38:39:
                    72:e5:08:fc:ac:e4:01:1e:ef:f2:d9:2c:f1:75:fe:
                    0c:a9:d3:0f:6e:fa:28:46:fa:31:73:6f:db:4d:a8:
                    b2:7e:f7:62:5d:b0:98:ab:62:81:b8:98:fe:5c:89:
                    35:f5:79:9e:9e:e0:26:91:b4:b2:14:8d:2b:8d:11:
                    78:04:aa:5e:ae:fd:28:54:ff:a2:8c:47:85:19:76:
                    a3:78:5f:73:89:d0:fb:27:77:41:f2:62:c6:ff:e0:
                    09:71:fd:82:02:0e:7e:e4:7c:38:5f:32:fa:04:fd:
                    ae:29:a6:92:b0:85:ea:44:96:bc:88:28:cc:59:fd:
                    64:56:51:ea:97:ec:92:2f:cf:bc:54:5a:76:8c:40:
                    3c:f4:48:b0:5e:c9:64:dd:33:27:23:e2:c7:64:ee:
                    03:04:fb:1f:91:85:49:18:44:b1:33:8e:c1:1b:cc:
                    b5:ba:2a:45:d9:db:cf:55:c7:d5:47:f4:ab:17:b3:
                    10:03:44:97:98:be:32:44:45:8a:cf:0e:dd:bd:46:
                    fd:ff:ed:ae:37:fb:1b:80:10:14:00:52:51:02:fb:
                    13:de:7c:94:4c:da:75:ec:f1:d6:74:7c:ec:75:93:
                    57:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D5:EF:91:20:2F:BD:73:86:E0:84:1C:0A:6C:46:A7:8E:CB:53:7A
            X509v3 Authority Key Identifier:
                keyid:A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:3c:4d:16:79:20:94:c4:ce:a6:6f:08:2d:6d:b0:74:28:85:
         fb:c6:10:c4:46:6e:07:f4:b1:84:a1:8e:8a:d4:5e:ed:b7:da:
         56:c2:54:2e:c5:25:0f:57:67:1a:df:72:65:c5:62:a2:03:65:
         ca:4e:e9:10:10:5c:88:75:14:c3:c6:2b:6d:65:42:17:4d:e8:
         d8:49:85:e9:87:48:0d:4b:ea:c0:ff:30:6d:93:9c:64:03:eb:
         db:86:cd:48:20:b1:20:dc:2e:4a:5c:3d:6b:b8:f6:25:4b:9c:
         21:37:a1:03:7d:b6:27:99:6c:7b:ee:ef:3d:0d:89:e7:13:66:
         2f:05:58:4f:90:b4:4b:0a:44:a0:71:80:73:3c:92:cb:a2:34:
         77:dd:6b:31:3f:2e:c4:1c:49:d6:4f:5b:5e:e0:46:c0:f4:07:
         cf:f8:d5:70:fa:8a:34:c0:ad:74:5e:e0:9d:d9:ce:25:f4:57:
         54:47:ac:ac:80:29:9b:c4:cc:77:8e:c9:db:93:36:c5:66:88:
         a9:9b:b2:f9:d5:ef:06:1a:29:29:45:23:a0:eb:f3:6e:55:72:
         f8:23:05:ff:ca:d6:4b:f1:9e:63:aa:b6:f8:b6:9d:83:5c:72:
         dd:58:0e:ad:1a:f3:47:38:05:ce:ce:cf:14:61:08:0e:10:d7:
         48:dd:1b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:04:47 2026 by rpki-client