Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.mft
File:                     0oig9ya30Z93nrHaEq3aNfze1fE.mft (raw, json)
Hash identifier:          yCNdZH2taMSz5GfquWZ6YouzFwvPw6ivnd3aUGknilU=
Subject key identifier:   29:A1:5C:B2:EC:4E:DA:3B:8D:5D:C6:79:E1:EB:DB:5F:BA:AC:09:16
Authority key identifier: D2:88:A0:F7:26:B7:D1:9F:77:9E:B1:DA:12:AD:DA:35:FC:DE:D5:F1
Certificate issuer:       /CN=d288a0f726b7d19f779eb1da12adda35fcded5f1
Certificate serial:       01A041298A1ACAF873537D8B76CCBCB6FC31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0oig9ya30Z93nrHaEq3aNfze1fE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.mft
Manifest number:          9B
Signing time:             Thu 27 Aug 2026 03:00:36 +0000
Manifest this update:     Thu 27 Aug 2026 03:00:36 +0000
Manifest next update:     Fri 28 Aug 2026 03:00:36 +0000
Files and hashes:         1: 0oig9ya30Z93nrHaEq3aNfze1fE.crl (hash: 4urVKnZRYHSE7ltSpf0aSQ0GbmFEAvRNLNl30ddLh0o=)
                          2: lxI2bP-RbOseqiIeg4ll7U67NmA.roa (hash: 9Z7qOwjkxiFujHt3P1/LDgIN/VCVJkJA0KjjP9BQQwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0oig9ya30Z93nrHaEq3aNfze1fE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:29:8a:1a:ca:f8:73:53:7d:8b:76:cc:bc:b6:fc:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d288a0f726b7d19f779eb1da12adda35fcded5f1
        Validity
            Not Before: Aug 27 03:00:36 2026 GMT
            Not After : Aug 28 03:00:36 2026 GMT
        Subject: CN=29a15cb2ec4eda3b8d5dc679e1ebdb5fbaac0916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b0:fc:32:85:a1:76:71:52:fe:0f:47:11:bc:
                    92:6d:16:b5:7a:38:4d:63:cf:3e:4c:82:b1:38:d5:
                    07:09:cf:c2:8e:d4:e5:f0:7b:0f:55:04:41:2c:b0:
                    a1:93:59:b5:85:ba:bd:e3:24:11:51:2a:0f:49:af:
                    c3:3f:a7:8a:5b:0c:9b:b6:a3:ee:fa:80:fe:1b:c0:
                    3e:9f:cd:6b:96:b4:84:43:e9:d9:8c:5f:ea:9b:1b:
                    ba:fb:a0:ad:b2:27:15:51:3f:32:81:7f:31:7f:a4:
                    96:33:4f:5b:f7:47:1c:18:82:e9:01:90:1c:40:59:
                    db:55:50:b2:e1:84:28:49:99:cf:ae:54:fb:44:50:
                    57:eb:33:73:dc:c1:53:54:6f:d0:6c:e4:73:b3:d8:
                    4c:87:2d:3b:08:bd:15:ef:e0:81:82:72:9a:90:f9:
                    bf:a2:9d:b5:19:6c:4b:b5:f3:d4:91:bd:d7:05:82:
                    aa:b6:0e:01:3a:75:29:73:88:36:6c:0c:e9:ec:c3:
                    ca:82:03:d6:74:be:34:77:40:8b:bd:41:82:0e:20:
                    40:b6:b2:70:5e:5d:57:8a:42:82:45:98:c7:8c:2b:
                    4c:58:85:ec:43:78:97:2c:e1:6c:a1:b9:15:7a:02:
                    de:cb:c4:bc:37:80:84:e5:76:56:91:2f:ae:f9:85:
                    bd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A1:5C:B2:EC:4E:DA:3B:8D:5D:C6:79:E1:EB:DB:5F:BA:AC:09:16
            X509v3 Authority Key Identifier:
                keyid:D2:88:A0:F7:26:B7:D1:9F:77:9E:B1:DA:12:AD:DA:35:FC:DE:D5:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oig9ya30Z93nrHaEq3aNfze1fE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:95:00:f7:64:2f:1d:34:99:38:cf:8f:7d:30:0a:f9:de:3a:
         de:f4:37:e7:5e:7e:99:55:9e:81:94:58:34:a8:ae:5b:b7:dd:
         b3:1b:53:d4:6b:02:65:c2:c9:e1:ac:69:ec:75:2f:c2:f3:8e:
         eb:d8:48:c5:09:04:7b:09:9a:94:84:42:cb:d8:3a:93:a3:17:
         1e:e0:97:29:e4:e9:c7:63:02:99:3d:67:db:f9:83:ef:06:2b:
         8b:f3:e5:e5:dd:ca:84:12:19:88:3c:ef:59:01:9d:81:6d:7c:
         5a:20:06:da:7d:25:8d:ed:05:1b:a4:bd:48:40:1c:a8:63:45:
         5d:7b:c9:98:9d:f9:77:28:d3:c1:3f:9c:ac:b3:71:04:99:98:
         03:61:e0:a8:54:34:ad:54:c5:40:e3:8d:cc:76:51:47:7a:30:
         52:e1:9d:94:39:3e:ff:91:03:e8:62:2c:a6:5d:ad:e9:76:0c:
         86:37:31:8e:ff:76:fb:25:e2:a0:d7:36:4f:fd:07:0e:2f:ad:
         11:ff:ad:44:f3:d6:08:fb:69:d1:90:c7:67:a7:1b:0c:5a:c3:
         c6:9a:e6:5b:92:38:49:a3:38:a4:b3:0e:1a:eb:63:e0:a3:83:
         aa:00:13:a9:72:d2:e7:7f:40:e2:85:60:07:78:18:f7:b2:f7:
         2b:39:0f:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBBKYoayvhzU32Ldsy8tvwxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyODhhMGY3MjZiN2QxOWY3NzllYjFkYTEyYWRkYTM1ZmNk
ZWQ1ZjEwHhcNMjYwODI3MDMwMDM2WhcNMjYwODI4MDMwMDM2WjAzMTEwLwYDVQQD
EygyOWExNWNiMmVjNGVkYTNiOGQ1ZGM2NzllMWViZGI1ZmJhYWMwOTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLD8MoWhdnFS/g9HEbySbRa1ejhN
Y88+TIKxONUHCc/CjtTl8HsPVQRBLLChk1m1hbq94yQRUSoPSa/DP6eKWwybtqPu
+oD+G8A+n81rlrSEQ+nZjF/qmxu6+6CtsicVUT8ygX8xf6SWM09b90ccGILpAZAc
QFnbVVCy4YQoSZnPrlT7RFBX6zNz3MFTVG/QbORzs9hMhy07CL0V7+CBgnKakPm/
op21GWxLtfPUkb3XBYKqtg4BOnUpc4g2bAzp7MPKggPWdL40d0CLvUGCDiBAtrJw
Xl1XikKCRZjHjCtMWIXsQ3iXLOFsobkVegLey8S8N4CE5XZWkS+u+YW9WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmhXLLsTto7jV3GeeHr21+6rAkWMB8GA1UdIwQY
MBaAFNKIoPcmt9Gfd56x2hKt2jX83tXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9pZzl5YTMwWjkzbnJIYUVxM2FOZnplMWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84ZmVmN2YtZDAxMS00Y2RiLWFjMGEt
MzE3MDBmMGUxYTYxLzEvMG9pZzl5YTMwWjkzbnJIYUVxM2FOZnplMWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC84ZmVmN2YtZDAxMS00Y2RiLWFjMGEtMzE3MDBmMGUxYTYx
LzEvMG9pZzl5YTMwWjkzbnJIYUVxM2FOZnplMWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvpUA92Qv
HTSZOM+PfTAK+d463vQ3515+mVWegZRYNKiuW7fdsxtT1GsCZcLJ4axp7HUvwvOO
69hIxQkEewmalIRCy9g6k6MXHuCXKeTpx2MCmT1n2/mD7wYri/Pl5d3KhBIZiDzv
WQGdgW18WiAG2n0lje0FG6S9SEAcqGNFXXvJmJ35dyjTwT+crLNxBJmYA2HgqFQ0
rVTFQOONzHZRR3owUuGdlDk+/5ED6GIspl2t6XYMhjcxjv92+yXioNc2T/0HDi+t
Ef+tRPPWCPtp0ZDHZ6cbDFrDxprmW5I4SaM4pLMOGutj4KODqgATqXLS539A4oVg
B3gY97L3KzkPiA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:25:36 2026 by rpki-client