Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
File:                     0ow4hsbvUifCRiJMyJSoSlO89Ro.mft (raw, json)
Hash identifier:          4RtVMeynMht5sf6Vsdbu+tJJ6VMQAMGa1g87KoOdjXM=
Subject key identifier:   6F:1E:F1:A4:84:86:F4:78:49:D1:2C:2B:95:95:5D:2C:EF:99:27:45
Authority key identifier: D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A
Certificate issuer:       /CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
Certificate serial:       01A000CA1441F4AC6D055B0A4A276133EC8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
Manifest number:          0936
Signing time:             Fri 14 Aug 2026 15:00:38 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:38 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:38 +0000
Files and hashes:         1: 0ow4hsbvUifCRiJMyJSoSlO89Ro.crl (hash: g/MVcFYHFF/S5DOcuZnIAv7jWy+Dhiokna9+Mlrmxtk=)
                          2: BYWS08eTtraOfHT_fVMPk7guHlM.roa (hash: 6Kz4FXMCjQe6WKeTUwsv4um5M7VGGcIVhgjpiTRZk6E=)
                          3: PiwQrJXVrX4qSCMDoPit1fwGxYw.roa (hash: maZooA2YaSXCCk76FIXDQQ5gHOUIoguMUZYt68Zbq38=)
                          4: XlbisSjtE0VEsvYZfBE1a7SwnPo.roa (hash: ywquchTaiRzJ9EyzBmBuS7GF3u7LPVkY7qatrsHV8Nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:14:41:f4:ac:6d:05:5b:0a:4a:27:61:33:ec:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
        Validity
            Not Before: Aug 14 15:00:38 2026 GMT
            Not After : Aug 15 15:00:38 2026 GMT
        Subject: CN=6f1ef1a48486f47849d12c2b95955d2cef992745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a3:75:fe:dc:f4:01:f5:a9:45:78:53:70:9e:
                    f5:f7:2c:60:dd:81:88:8d:56:84:26:9f:9f:ff:81:
                    7d:19:39:3c:83:68:4a:53:25:24:41:7d:fd:46:f0:
                    9c:ab:d5:e8:c7:6f:af:b9:37:97:44:ca:2b:5d:17:
                    01:a1:5b:39:71:de:fb:8e:10:55:db:df:31:2b:88:
                    e0:2d:ab:fa:01:ce:b1:a8:8b:3b:c3:7b:59:89:78:
                    4c:f3:03:67:dd:f0:80:99:cc:e8:e2:de:f9:4c:5c:
                    02:33:e5:d0:ab:d4:a0:c1:f9:45:49:3f:c1:7c:7d:
                    29:85:db:25:fd:27:00:8d:f3:52:48:1e:22:1e:07:
                    a1:04:af:db:0d:c1:4f:2e:f9:a9:02:34:89:fd:c9:
                    5d:86:61:b3:2c:e5:3f:b8:32:0e:2c:13:a5:0d:2e:
                    c6:57:17:93:ef:e7:1f:8d:68:41:cb:fd:d5:25:f8:
                    00:ae:b3:7f:c4:93:6d:e3:e2:e9:bd:34:f6:cd:de:
                    3e:9f:67:b7:72:86:5d:1f:a7:0c:5a:15:8d:2e:b0:
                    ff:53:45:ff:3a:89:eb:82:ae:6c:5c:36:ad:6a:db:
                    57:10:c6:1f:ce:35:c2:d0:8f:96:73:af:3c:8f:e1:
                    0e:95:01:1b:47:08:fd:95:db:02:f3:08:83:bf:bb:
                    02:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1E:F1:A4:84:86:F4:78:49:D1:2C:2B:95:95:5D:2C:EF:99:27:45
            X509v3 Authority Key Identifier:
                keyid:D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b6:a7:95:b1:71:f8:a2:2a:3e:59:be:f6:63:61:bd:5d:e2:
         fe:f5:db:7d:48:57:17:e3:ec:9f:4c:d3:61:ef:93:d3:59:74:
         59:fe:14:ee:8e:92:9b:c7:ed:a2:ba:c5:2a:9f:b8:b1:14:b2:
         68:8f:c9:83:84:59:40:ec:24:de:4b:f5:7c:c1:0f:85:31:65:
         c5:3c:0f:9f:a2:48:0b:b4:70:59:be:3f:38:c4:45:f4:ae:61:
         ec:11:d3:ae:64:f4:22:f6:f8:81:8d:86:e3:24:e1:49:de:22:
         85:10:9e:57:fd:ae:78:e2:5e:4b:4d:e8:04:18:95:e8:23:d6:
         31:7d:0f:9a:4d:f2:44:97:82:76:99:18:67:11:1e:c7:4b:2e:
         83:37:42:69:c3:95:38:75:f6:6f:0e:64:b5:02:f4:0c:7a:9a:
         a2:72:fe:f0:69:c9:2e:5a:36:df:a5:2f:55:76:7a:2d:3b:df:
         cf:95:0e:c8:a3:e7:9b:bc:e6:0a:5e:2f:2d:5b:85:2c:6c:53:
         fe:7a:cb:b1:ba:ba:ff:63:cf:1a:86:d7:7c:e0:fa:fd:4b:5e:
         25:41:80:16:65:ac:f6:92:6d:f9:11:0a:db:a9:78:0a:35:0a:
         24:5e:05:89:d5:4d:8a:50:59:4f:f7:93:ec:c4:09:17:16:55:
         c6:ca:f6:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAyhRB9KxtBVsKSidhM+yOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOGMzODg2YzZlZjUyMjdjMjQ2MjI0Y2M4OTRhODRhNTNi
Y2Y1MWEwHhcNMjYwODE0MTUwMDM4WhcNMjYwODE1MTUwMDM4WjAzMTEwLwYDVQQD
Eyg2ZjFlZjFhNDg0ODZmNDc4NDlkMTJjMmI5NTk1NWQyY2VmOTkyNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aN1/tz0AfWpRXhTcJ719yxg3YGI
jVaEJp+f/4F9GTk8g2hKUyUkQX39RvCcq9Xox2+vuTeXRMorXRcBoVs5cd77jhBV
298xK4jgLav6Ac6xqIs7w3tZiXhM8wNn3fCAmczo4t75TFwCM+XQq9SgwflFST/B
fH0phdsl/ScAjfNSSB4iHgehBK/bDcFPLvmpAjSJ/cldhmGzLOU/uDIOLBOlDS7G
VxeT7+cfjWhBy/3VJfgArrN/xJNt4+LpvTT2zd4+n2e3coZdH6cMWhWNLrD/U0X/
Oonrgq5sXDatattXEMYfzjXC0I+Wc688j+EOlQEbRwj9ldsC8wiDv7sCvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8e8aSEhvR4SdEsK5WVXSzvmSdFMB8GA1UdIwQY
MBaAFNKMOIbG71InwkYiTMiUqEpTvPUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG93NGhzYnZVaWZDUmlKTXlKU29TbE84OVJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iZWMxOWMtNWI5NC00MDFmLWIxMzgt
ZmM0MjE2MjFmZTA4LzEvMG93NGhzYnZVaWZDUmlKTXlKU29TbE84OVJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9iZWMxOWMtNWI5NC00MDFmLWIxMzgtZmM0MjE2MjFmZTA4
LzEvMG93NGhzYnZVaWZDUmlKTXlKU29TbE84OVJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7anlbFx
+KIqPlm+9mNhvV3i/vXbfUhXF+Psn0zTYe+T01l0Wf4U7o6Sm8ftorrFKp+4sRSy
aI/Jg4RZQOwk3kv1fMEPhTFlxTwPn6JIC7RwWb4/OMRF9K5h7BHTrmT0Ivb4gY2G
4yThSd4ihRCeV/2ueOJeS03oBBiV6CPWMX0Pmk3yRJeCdpkYZxEex0sugzdCacOV
OHX2bw5ktQL0DHqaonL+8GnJLlo236UvVXZ6LTvfz5UOyKPnm7zmCl4vLVuFLGxT
/nrLsbq6/2PPGobXfOD6/UteJUGAFmWs9pJt+REK26l4CjUKJF4FidVNilBZT/eT
7MQJFxZVxsr2PA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:32:05 2026 by rpki-client