Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
File:                     o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft (raw, json)
Hash identifier:          wFg9fJnWkeA3epSa48IwOVWmOytTb3PX3/acPPepoHw=
Subject key identifier:   00:1D:CB:8A:B4:42:53:F5:98:7E:AC:97:15:4E:DF:6C:60:78:F2:29
Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
Certificate issuer:       /CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Certificate serial:       01A06E39EE717C65C4C6EA3B7A8DB03DB74B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
Manifest number:          0977
Signing time:             Fri 04 Sep 2026 21:01:25 +0000
Manifest this update:     Fri 04 Sep 2026 21:01:25 +0000
Manifest next update:     Sat 05 Sep 2026 21:01:25 +0000
Files and hashes:         1: 3MFj15oSeUJYuJbY2U542UoSXGM.roa (hash: j9Y9LVF9WUhE5Tw8LMdWTvxog1CGJJ1rf8AUNlTnbFI=)
                          2: FGVsTKcXFHABDa_e0HM9Faa7r2M.roa (hash: 2Iqm//83hIlnGhnfsyksmZkIg0tX+MTyrQg6DXUyYdQ=)
                          3: SwB1iAgYjly4csbv4jz0oadyUZk.roa (hash: TuHJEn/9Xw5181UZ/VH/apXlrIOdLQGvmuNms8pxlNU=)
                          4: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl (hash: 8g9UvPjBqYaclebvHSHb8SLfannGeSUl0w66eq4Kk/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:39:ee:71:7c:65:c4:c6:ea:3b:7a:8d:b0:3d:b7:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e
        Validity
            Not Before: Sep  4 21:01:25 2026 GMT
            Not After : Sep  5 21:01:25 2026 GMT
        Subject: CN=001dcb8ab44253f5987eac97154edf6c6078f229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8c:e6:c0:11:24:ce:fe:ed:b6:93:5b:1d:be:
                    46:58:24:2d:0e:b1:27:8b:8c:20:57:46:a2:0c:62:
                    e8:f0:86:12:1f:2e:8a:52:78:cd:c7:24:95:a5:37:
                    98:7c:67:39:c4:9b:12:b9:e2:ac:f2:ec:5a:a3:ae:
                    e9:fa:e0:bc:bc:2a:6a:b6:0f:f7:46:bc:b3:96:08:
                    65:72:18:b6:51:5b:47:77:65:9e:0c:c7:07:ee:56:
                    cb:4e:ee:ad:ed:cc:00:f9:6b:b9:3b:a6:a5:25:26:
                    77:c2:4c:94:76:6e:de:41:0f:97:ea:b3:5c:d9:ef:
                    da:64:f9:3b:d6:1b:fe:9a:40:27:78:35:0f:ce:ae:
                    62:fd:12:33:4d:13:08:9c:7e:30:00:17:75:a3:e6:
                    48:9a:a3:ac:63:88:6d:ee:90:7c:c3:19:99:aa:11:
                    fe:09:04:3d:e4:a0:94:d1:71:d8:10:ac:f1:5a:00:
                    15:c8:e0:5e:0a:ef:ea:17:37:bc:ed:39:ac:c7:1a:
                    d4:c5:32:4f:e6:9f:ee:87:b6:9f:b1:16:98:13:7f:
                    d1:53:1d:5f:b9:87:dc:ed:a2:5c:24:56:04:6a:93:
                    e0:2a:28:d3:78:59:76:ca:e6:6e:e3:dd:9b:f0:7d:
                    e1:dc:b0:7c:9d:b5:0c:90:98:f4:27:a1:a8:da:08:
                    ee:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1D:CB:8A:B4:42:53:F5:98:7E:AC:97:15:4E:DF:6C:60:78:F2:29
            X509v3 Authority Key Identifier:
                keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:bd:d2:79:94:9a:7c:c8:2b:4b:9a:a6:3d:20:ab:39:17:cc:
         1d:ea:86:e7:ab:22:5c:34:a6:c6:c9:4a:f7:55:78:29:5d:6a:
         49:23:12:00:6a:61:89:08:e1:a4:2e:ec:d3:da:5b:e3:96:9c:
         39:6b:4f:f4:d6:7a:68:a6:38:1e:fb:a2:7f:d0:bd:43:5b:92:
         4f:fb:f1:3f:d6:fb:e2:a3:a8:21:9b:34:e7:3d:58:25:a1:47:
         3c:ae:55:ef:b8:da:e6:4e:83:17:95:5c:d2:1d:0e:a5:a0:94:
         1c:5e:9b:5d:15:9d:6f:f3:95:cb:4d:d0:e8:4a:bf:0c:5b:0c:
         50:8d:e7:1c:65:88:08:02:53:e5:42:d7:1e:18:c2:6f:42:9a:
         c4:08:ee:b1:41:51:53:9e:b4:11:27:3d:ec:46:f0:c6:50:56:
         5d:7e:ab:d8:35:67:52:f5:a6:0b:8a:01:18:9c:cc:97:e0:36:
         f7:2f:b9:04:a7:fa:68:35:67:3d:a1:03:be:89:fb:af:f8:cf:
         d8:d2:50:2f:06:7d:45:cf:41:9f:d0:cc:bf:01:4d:c1:36:9e:
         c1:3f:32:9f:6e:7d:75:45:3c:61:76:2d:c3:bf:af:91:e5:8e:
         79:01:88:b5:fa:87:31:f7:5e:2e:58:19:04:80:71:e2:0c:5b:
         75:d9:ec:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:28:24 2026 by rpki-client