Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
File:                     o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft (raw, json)
Hash identifier:          Sy4K64+gdBB1nWXVjTltFg/O/PKmOXBixijJtltYAmM=
Subject key identifier:   27:6F:08:C8:21:A4:5A:30:E5:9B:5D:0C:AF:2B:67:9D:02:79:7D:B4
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Certificate issuer:       /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial:       01A002B9068B490C90BD8A32F322C8D2BA7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
Manifest number:          1933
Signing time:             Sat 15 Aug 2026 00:01:15 +0000
Manifest this update:     Sat 15 Aug 2026 00:01:15 +0000
Manifest next update:     Sun 16 Aug 2026 00:01:15 +0000
Files and hashes:         1: 2zvlLx0eZAbOYhxgIyqrlDoVC1g.roa (hash: KQYOWqTXbXwvtekOLsVc2rxud/hR8A87QDGRubzzTXw=)
                          2: 4Ry_mlzBaUQ6UP1sVtEjuUsTD1M.roa (hash: Cbb+P8Z0r4y6AjDJgLqHTENuD/Go8wmcnnMVwTktU/4=)
                          3: D757pdeWdoida8GHOUdKTXVzQLA.roa (hash: 9oAemx2TPMquAep4lORrFPAoBV6BakfDEYxe+lt7IJE=)
                          4: o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl (hash: 7zhRe/LuLUWYQCr3gW6BFwOuiDnzHfj4mOAkkBYdi8M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b9:06:8b:49:0c:90:bd:8a:32:f3:22:c8:d2:ba:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
        Validity
            Not Before: Aug 15 00:01:15 2026 GMT
            Not After : Aug 16 00:01:15 2026 GMT
        Subject: CN=276f08c821a45a30e59b5d0caf2b679d02797db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:e9:df:6b:37:b3:2a:64:d6:11:b0:be:c0:
                    a6:a8:d1:4a:7e:5a:43:83:04:c6:a2:97:47:cd:ea:
                    8b:5a:65:fb:bc:9e:42:2c:d2:31:1f:8b:17:11:01:
                    72:46:3c:59:72:8f:43:d0:1d:2f:b4:3e:f3:3e:6c:
                    e9:e6:de:d7:fd:cf:89:89:6b:df:5e:e2:c2:66:a4:
                    83:50:6f:07:3d:c2:c4:3d:3e:17:17:81:f6:d4:a4:
                    95:cf:8e:2b:9c:58:dd:a5:b4:5c:50:35:f9:5f:02:
                    55:31:34:12:75:90:35:9e:83:d8:02:17:13:d6:8d:
                    ee:24:8c:ab:0b:02:7c:f7:68:61:f6:d7:dc:e0:08:
                    13:41:94:5e:0e:0b:00:56:03:76:8f:e6:18:23:62:
                    a4:b3:c1:58:e9:9c:9c:34:8c:6e:29:c0:00:b9:20:
                    80:3f:0d:3b:bd:87:04:7a:46:42:c6:82:19:97:be:
                    71:b6:6d:3c:44:2f:1b:03:eb:aa:62:04:bf:aa:8c:
                    54:06:f0:cb:cc:c3:fd:35:6d:7e:5a:f6:e6:0a:cc:
                    8b:0b:17:13:49:bb:24:cb:a1:3f:89:ed:08:cc:47:
                    06:8c:35:4c:c8:84:4f:11:1d:58:b3:8b:66:08:69:
                    78:50:f6:5a:b0:4b:17:17:b9:c2:c9:c7:f9:4d:45:
                    49:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6F:08:C8:21:A4:5A:30:E5:9B:5D:0C:AF:2B:67:9D:02:79:7D:B4
            X509v3 Authority Key Identifier:
                keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:35:ab:1f:58:e6:3a:1e:6b:94:3a:e8:30:b5:07:7c:ab:71:
         42:08:c1:80:d0:cf:17:a9:ba:c4:4d:c3:fa:7c:5a:d8:51:48:
         0d:e1:5a:e2:72:9c:ac:6e:03:8f:f5:f4:99:36:93:40:f3:16:
         c2:ab:26:4a:60:db:2b:7e:83:e4:44:4b:9c:73:a9:49:44:21:
         f8:6d:4d:14:49:e7:02:77:d9:a7:16:e1:d9:41:2d:23:88:51:
         01:57:dc:36:de:46:9d:ae:83:57:55:22:ca:63:12:24:cc:6d:
         fd:08:22:98:f0:80:c3:24:20:ea:54:6b:41:c5:75:da:49:fb:
         48:70:38:5e:b8:70:07:75:e8:e2:d4:88:95:d1:7c:73:3d:2c:
         d2:e2:2f:ae:44:fd:91:41:f6:d5:24:17:fb:c9:b3:a7:c6:5b:
         b3:7e:d5:c8:a2:18:65:e8:6e:59:0f:b6:3e:fe:ef:a7:31:1f:
         7d:de:f1:e8:83:55:a7:df:be:50:00:de:62:ba:2d:c2:0e:e4:
         6b:7c:45:d9:91:1a:9e:bc:4e:01:fc:06:82:d8:67:5d:5e:45:
         5c:a4:2a:8e:dc:84:86:1d:16:15:59:e1:82:a9:03:93:2a:71:
         68:51:9a:22:f1:88:b3:8b:4f:f7:05:ea:ba:50:f5:25:9a:0c:
         65:14:ac:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACuQaLSQyQvYoy8yLI0rp9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzODllNzAzNWIwOGUxODFhMzQxZjM3ZWRhNzM0M2QyM2Yx
Y2FmYTQwHhcNMjYwODE1MDAwMTE1WhcNMjYwODE2MDAwMTE1WjAzMTEwLwYDVQQD
EygyNzZmMDhjODIxYTQ1YTMwZTU5YjVkMGNhZjJiNjc5ZDAyNzk3ZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5Hp32s3sypk1hGwvsCmqNFKflpD
gwTGopdHzeqLWmX7vJ5CLNIxH4sXEQFyRjxZco9D0B0vtD7zPmzp5t7X/c+JiWvf
XuLCZqSDUG8HPcLEPT4XF4H21KSVz44rnFjdpbRcUDX5XwJVMTQSdZA1noPYAhcT
1o3uJIyrCwJ892hh9tfc4AgTQZReDgsAVgN2j+YYI2Kks8FY6ZycNIxuKcAAuSCA
Pw07vYcEekZCxoIZl75xtm08RC8bA+uqYgS/qoxUBvDLzMP9NW1+WvbmCsyLCxcT
Sbsky6E/ie0IzEcGjDVMyIRPER1Ys4tmCGl4UPZasEsXF7nCycf5TUVJ8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdvCMghpFow5ZtdDK8rZ50CeX20MB8GA1UdIwQY
MBaAFKOJ5wNbCOGBo0HzftpzQ9I/HK+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWIt
MGU3MjQxNmI0ZGM3LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWItMGU3MjQxNmI0ZGM3
LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTWrH1jm
Oh5rlDroMLUHfKtxQgjBgNDPF6m6xE3D+nxa2FFIDeFa4nKcrG4Dj/X0mTaTQPMW
wqsmSmDbK36D5ERLnHOpSUQh+G1NFEnnAnfZpxbh2UEtI4hRAVfcNt5Gna6DV1Ui
ymMSJMxt/QgimPCAwyQg6lRrQcV12kn7SHA4XrhwB3Xo4tSIldF8cz0s0uIvrkT9
kUH21SQX+8mzp8Zbs37VyKIYZehuWQ+2Pv7vpzEffd7x6INVp9++UADeYrotwg7k
a3xF2ZEanrxOAfwGgthnXV5FXKQqjtyEhh0WFVnhgqkDkypxaFGaIvGIs4tP9wXq
ulD1JZoMZRSsEQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:42:14 2026 by rpki-client