Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
File:                     g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json)
Hash identifier:          RNFfd9b45qWY7SRbTkW6DAGk0Z6wjxTK2M5nQKKGLMo=
Subject key identifier:   FE:B8:88:23:D8:91:F2:E7:41:C1:75:BA:2D:17:E6:97:17:94:A5:9E
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Certificate issuer:       /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial:       01A08A8D4C6E33745841ACC12D3FA7F43C3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
Manifest number:          1761
Signing time:             Thu 10 Sep 2026 09:01:50 +0000
Manifest this update:     Thu 10 Sep 2026 09:01:50 +0000
Manifest next update:     Fri 11 Sep 2026 09:01:50 +0000
Files and hashes:         1: INXHJDHDB1ukzYRaA3EidD_0aQ4.roa (hash: Z2x4wj/CdGVnD9ySadsV++WZwVQOZWizFudROy88bRQ=)
                          2: KJMJ77kQuoG9cpUlP7ImSAxxrC8.roa (hash: K2EGS70mhDKfj9roByjDWB46Ks+HmqgyJLsqPE6aR0s=)
                          3: KKPvuphxl-jCXx-t6E5TKLh7ouE.roa (hash: ghQPL+5j3H9Pp1Ju//l14r1R97GRHHIGE3fwtOKGTjA=)
                          4: Lyc7L5ENNnNmeFFiP13mgBm-teQ.roa (hash: gtEddttCg6evm5ZoDlDkaU8NOuk0QknemDaWTdJCohQ=)
                          5: PIctaaq8hYam_9VAPrVCYf9AqiI.roa (hash: M1/1hfWtMFwKSAcTSdndXFN4Ntl5XmVjhTvpw61hDG0=)
                          6: diWdBr8Lw6nPV-tMvOf0Cna3ipc.roa (hash: iWodsL01tWCHUx+C3pbxQzDdBQEdtQ4RhYGFNEL8TgE=)
                          7: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: b8ka0/MADMRaCojXibs5NGiUsenpLUbHDgZnI08gb6k=)
                          8: kDHc3reVMJPLgu58itw4ZupB-4Q.roa (hash: QwLu7BES2xuFPZdD76Beo2u1lAJTYierBEEu5vEPTTo=)
                          9: o-lwE03BQjuSCoHPvrungn8RW5E.roa (hash: 6jhTwsjRV3a0rHOssSDB/4JB3N1eJdRGn/9ePaST8TM=)
                          10: polvb4mWJFtYlmCnCQgjC3KNjFM.roa (hash: ok6ZqIcHmI5POEVYtqUr4M7uhrPkkTSbl73JjPBOL34=)
                          11: tnYABoJMY7Wi-wWcLi2d_oJP6jQ.roa (hash: GWuYZQOsyi/Kep+VibmM7lp5ukM+ocv9ZUuI4km8O1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 09:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8d:4c:6e:33:74:58:41:ac:c1:2d:3f:a7:f4:3c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
        Validity
            Not Before: Sep 10 09:01:50 2026 GMT
            Not After : Sep 11 09:01:50 2026 GMT
        Subject: CN=feb88823d891f2e741c175ba2d17e6971794a59e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:90:74:a3:b2:e2:91:3f:57:82:ec:88:f3:
                    ac:bd:97:01:64:0f:fd:41:87:19:73:2e:1b:53:3b:
                    27:3f:46:d7:ec:9b:dd:ec:d3:b6:d7:72:0f:de:01:
                    34:09:d1:d0:f9:08:e8:dd:a3:54:2a:8d:52:d6:99:
                    61:a3:ab:7f:5c:75:15:a2:37:b3:cd:36:94:c3:db:
                    c6:9e:fb:f8:ea:f8:d6:10:b5:c8:d6:a1:e6:1a:ef:
                    6d:b7:ce:ff:7c:cc:73:c7:e8:69:7a:6f:70:8a:53:
                    89:7e:4f:cb:f3:e9:44:83:11:79:32:bf:b8:8c:0b:
                    26:30:7a:ec:c9:4f:53:47:a8:b1:03:26:61:e5:4d:
                    fd:ff:44:d1:d5:0c:23:b8:9a:da:2d:21:28:00:40:
                    35:64:4b:18:84:71:22:6f:3b:94:fc:5a:75:77:da:
                    e6:48:b8:29:77:dd:16:dc:5d:c5:b2:2b:41:1b:b6:
                    f6:3d:07:27:d4:90:4e:30:31:34:73:16:56:ee:94:
                    08:3f:c3:cf:f4:a3:a4:fe:d9:ed:50:9a:e5:da:be:
                    f3:1b:47:34:27:13:60:23:34:fa:d0:20:f4:4a:e4:
                    70:d3:70:b6:0a:f3:6f:0b:d8:43:c9:82:4e:a6:6b:
                    36:2e:e3:12:10:81:c0:2c:cb:18:c0:3b:4c:c6:c3:
                    3d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B8:88:23:D8:91:F2:E7:41:C1:75:BA:2D:17:E6:97:17:94:A5:9E
            X509v3 Authority Key Identifier:
                keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:36:27:5f:51:d1:b3:0f:94:d5:e8:b4:1c:8d:20:b8:e3:6a:
         67:bd:d3:83:b6:fb:9e:8c:65:a7:c7:01:bd:f1:2b:c8:46:fa:
         bd:ce:4b:91:95:53:65:47:a3:e9:b4:20:57:c7:31:59:d5:ed:
         9e:65:dc:21:45:78:3b:c1:32:5f:e5:c6:e7:53:61:71:2d:d2:
         14:c6:d8:07:93:78:5f:c6:8d:92:b1:f2:6c:4d:bb:08:4e:b0:
         6e:56:97:fd:ba:b1:17:59:11:d9:7c:88:68:c5:97:98:79:2b:
         c3:15:0e:ae:23:50:b1:31:b8:ed:04:76:35:27:9f:8f:8c:87:
         8a:31:3e:cb:26:e4:76:9e:50:35:ad:6d:79:2c:8e:a6:c9:1d:
         f5:ba:10:e3:a1:8e:b4:49:2d:ee:5c:be:83:e6:e1:70:49:d9:
         fd:72:ab:1e:06:b1:68:ef:32:f2:ac:e0:3d:70:e3:dd:d9:dd:
         47:2e:96:df:1f:41:80:ba:aa:30:60:ae:b3:be:e0:77:cf:eb:
         44:d6:2b:75:84:d4:0e:4c:41:a5:06:2a:66:ce:34:73:31:8b:
         b8:76:dd:b2:b5:b7:b7:e8:af:c8:28:8f:00:18:5a:b1:31:63:
         f7:f3:53:a3:65:e9:d7:3b:e0:fb:24:5a:3f:a0:8a:83:b3:a4:
         9a:0e:b6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:27:27 2026 by rpki-client