Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
File:                     O4_iRlhDAxt3i7jYt701oJT8z0g.mft (raw, json)
Hash identifier:          3kAqlA1Vdy9DICnGo8WAmjoO3A0isI3wgNBJqMJq/bQ=
Subject key identifier:   C7:64:20:01:96:8D:6E:A2:D8:20:C0:69:A1:D5:CB:AD:7A:B7:1C:77
Authority key identifier: 3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
Certificate issuer:       /CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Certificate serial:       01A114185423863063280A948F5A95F077AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
Manifest number:          14F6
Signing time:             Wed 07 Oct 2026 02:01:40 +0000
Manifest this update:     Wed 07 Oct 2026 02:01:40 +0000
Manifest next update:     Thu 08 Oct 2026 02:01:40 +0000
Files and hashes:         1: 6J5zq7acHeCorGt2Kz1SRI8TBxw.roa (hash: QUb/O/uGMs7lP+6gaahFi67OYlrRZUT6YWqd/feI1TU=)
                          2: O4_iRlhDAxt3i7jYt701oJT8z0g.crl (hash: JHPrMpMntH8A8iaTzKbRxa0/zpoh69hp9kVa+u4ztTw=)
                          3: SAEHlpuu2VHfT1gYOBIDmp8YrI0.roa (hash: f+Ly+ugjS2e2LTdlARUIcZJrF9Q/kNyEBJzeeNxkntA=)
                          4: l8nJcuD4rGZxCdIYInml3vohntk.roa (hash: eU3RnT3IPn87hTAFydZwwQYkYydG1vHyM8wmqGF1vjs=)
                          5: n7VSYaUgna6BrvfvQJiTcoRPzQk.roa (hash: M0u1q9q0trXFDUH6vNkVVYgYyDRJLjrO4qxwE6RvEOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:14:18:54:23:86:30:63:28:0a:94:8f:5a:95:f0:77:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
        Validity
            Not Before: Oct  7 02:01:40 2026 GMT
            Not After : Oct  8 02:01:40 2026 GMT
        Subject: CN=c7642001968d6ea2d820c069a1d5cbad7ab71c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9e:3a:2f:2d:09:02:09:e1:76:c0:c6:4b:df:
                    ea:75:b1:a6:85:24:56:e1:c3:57:b6:e9:d5:e5:31:
                    45:aa:be:73:1a:8a:70:ed:8c:75:0f:f3:4e:45:58:
                    c4:45:cb:2d:49:8d:e7:e2:e7:51:98:3d:7e:b6:c9:
                    72:0e:f8:97:d0:10:4d:e1:c9:59:ad:76:59:a9:b9:
                    21:4c:75:4e:22:70:c4:dd:72:cf:2e:5b:b1:cf:b1:
                    48:be:fc:63:1a:36:c2:a7:a3:20:a8:f1:cf:7d:e4:
                    cb:61:45:7f:42:05:57:18:70:9e:a1:d3:dc:a4:bc:
                    6a:3c:2a:50:cc:1a:1b:8e:30:26:03:60:15:50:4f:
                    d2:6b:b7:27:a6:b4:80:ec:0a:cd:3e:bb:4f:31:10:
                    10:88:46:b8:b8:66:e5:e6:28:bb:dd:40:92:c1:95:
                    35:e4:97:94:1d:d9:22:1e:1a:7b:2e:b4:6e:3e:b9:
                    bd:8b:94:07:e4:bd:a8:51:38:57:7f:de:19:29:95:
                    5c:79:e3:56:71:e5:53:0c:40:90:3a:cf:07:f4:55:
                    ac:a1:6e:8a:1a:a2:32:f5:2c:03:aa:5a:c6:8f:c9:
                    2e:df:8b:5b:80:a2:cc:03:ef:7c:1f:32:2f:0f:9a:
                    79:52:99:59:72:70:00:59:8c:8b:56:f9:13:69:53:
                    df:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:64:20:01:96:8D:6E:A2:D8:20:C0:69:A1:D5:CB:AD:7A:B7:1C:77
            X509v3 Authority Key Identifier:
                keyid:3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:62:7b:f9:3b:14:6f:b6:f4:08:6a:07:cc:ff:f8:c4:6a:5d:
         7c:32:39:77:c4:76:1b:8e:36:2c:4b:51:40:31:8e:c0:01:00:
         6d:48:2d:63:59:50:c9:fe:db:33:14:85:c3:68:a4:b6:72:8d:
         c2:15:d7:37:e1:cd:e2:7e:e0:57:19:65:8e:91:30:25:78:3c:
         b5:08:ce:24:0e:1a:84:6d:ca:4b:3d:92:81:b0:7e:dc:4b:4a:
         3c:68:c7:5a:a1:fb:d5:6c:c5:a2:63:52:bc:b5:27:73:7e:9b:
         26:2b:50:31:95:7c:c0:bd:1a:06:3a:61:3d:d8:78:f5:ee:4d:
         72:cd:5a:dd:cf:0f:78:66:01:fa:6b:c1:e3:61:17:7a:22:4c:
         70:2d:30:04:1a:97:7e:2b:68:e4:98:66:c6:c6:d8:32:74:56:
         e0:29:a7:79:c5:9a:a6:7d:86:fe:0b:2d:66:d6:d7:4f:b3:66:
         0d:fb:5e:69:91:ff:9b:5f:98:3d:7a:bf:ce:5b:1a:00:42:04:
         2a:07:99:47:13:40:76:3c:7d:34:e0:9a:5c:d4:b1:71:2a:b2:
         07:9c:bb:43:24:00:71:d9:70:3b:a5:39:f3:30:69:0a:dd:67:
         6c:6c:c8:82:99:95:b4:3b:ef:75:a2:e2:10:b4:a1:9e:37:c6:
         aa:86:05:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:47:47 2026 by rpki-client