Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File:                     oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier:          rF+wiy19GExL3qwAHZBTNT2GD/pwcmnriD+kOz0G/cI=
Subject key identifier:   A5:4D:D5:CF:DC:87:F4:B8:66:FB:EC:C2:62:81:C3:C5:56:F6:9D:35
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer:       /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial:       01A00281B489BC73938AB2B144C907DD84C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number:          1A07
Signing time:             Fri 14 Aug 2026 23:00:49 +0000
Manifest this update:     Fri 14 Aug 2026 23:00:49 +0000
Manifest next update:     Sat 15 Aug 2026 23:00:49 +0000
Files and hashes:         1: 0iskxAKnPV1t3vVtL0ZxiR5NqDo.asa (hash: dTnlTRCOpAxkRq/1/Z4AQAvbwk3FcS0Wqrww9bcRVV4=)
                          2: mfvEjWb3rQFbj32_BBadoAv_Y0s.roa (hash: FGRbYmzgAXrFUwzG+mMOatKnvNqH9Ov9gtrQRgDuAmE=)
                          3: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: lvouzy62axTdvnbTYUjoXYnJ4ti2GEAz8g3j3Xou/8g=)
                          4: wvfBOreCybbt9afiUMU5R2NBdJQ.asa (hash: IVFtZ0X879D2RM6GVRG/lhLBfD0N96F/6jJoFE+cRr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:b4:89:bc:73:93:8a:b2:b1:44:c9:07:dd:84:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
        Validity
            Not Before: Aug 14 23:00:49 2026 GMT
            Not After : Aug 15 23:00:49 2026 GMT
        Subject: CN=a54dd5cfdc87f4b866fbecc26281c3c556f69d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:e3:fb:a5:f0:f4:6d:dd:a9:40:e5:c9:20:
                    1b:8b:3c:4a:21:62:8c:72:a9:78:50:67:53:99:a4:
                    c5:88:c6:f9:c5:2f:bf:d0:ae:2b:fb:8f:e3:0c:da:
                    87:8e:e5:36:db:9f:3a:40:c4:aa:4a:fc:be:80:9c:
                    ff:02:80:9b:9d:45:01:b0:5a:8b:51:73:da:81:bb:
                    af:cc:1a:ba:a5:34:e1:96:58:2f:98:46:9a:fb:ee:
                    86:41:a3:bc:95:c7:48:a5:2e:28:b0:0e:55:0e:d6:
                    95:f1:36:f8:8e:b6:ac:ad:08:31:c0:17:99:96:23:
                    06:5e:75:cc:a9:8c:7e:f5:d3:b0:04:9d:75:26:89:
                    7a:98:36:3c:27:52:1f:49:e0:5c:44:3b:45:f7:d8:
                    e8:c5:25:cd:3f:54:73:28:67:41:c3:f4:ca:f5:a5:
                    53:20:d7:b8:a3:7e:b4:09:d9:e3:8c:6b:03:9c:58:
                    22:63:12:06:b8:2a:b4:d4:bb:ae:fb:db:b8:07:46:
                    91:fd:74:a6:b1:b4:9e:fd:a8:f9:2d:57:fc:6b:a6:
                    4a:0a:d1:c7:8c:b9:37:ee:33:a1:7f:5a:e1:35:90:
                    df:18:62:cf:d7:b2:2f:11:7b:31:12:e9:c0:c1:15:
                    2e:24:cf:0a:8f:7a:c6:65:e3:43:7d:75:92:34:d9:
                    65:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4D:D5:CF:DC:87:F4:B8:66:FB:EC:C2:62:81:C3:C5:56:F6:9D:35
            X509v3 Authority Key Identifier:
                keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:4f:4a:e0:c7:9d:59:e3:df:26:d3:68:85:77:c9:9f:7f:eb:
         5d:08:e2:93:ac:91:c6:ee:d0:0a:47:b5:6b:8e:b8:c6:41:1f:
         a5:09:0e:98:53:c0:63:78:74:81:c8:c4:fc:2a:23:6f:8f:40:
         60:c6:93:b5:a6:7c:45:17:25:3c:db:80:13:75:87:6f:05:a1:
         e6:36:ec:2f:22:14:c4:9a:4f:85:c9:4d:a3:4a:76:b7:ae:70:
         b7:ac:39:cd:53:1c:72:e4:31:ee:d4:b0:e9:a3:a1:8f:e8:a2:
         59:09:95:68:18:cf:c3:60:5f:d6:84:bd:17:20:95:ee:72:e4:
         5e:dc:e5:7a:94:df:10:e1:c3:e7:15:d9:ee:d5:33:db:7d:5b:
         4a:82:ed:2d:8d:7e:f4:a1:d4:d3:2e:58:89:96:f2:83:3f:41:
         93:17:d7:6c:97:92:ab:df:28:94:3d:ba:9e:d4:88:ae:62:d7:
         16:43:21:42:68:25:a8:33:ad:e7:59:53:8f:16:99:91:f6:4f:
         e7:93:f5:23:3f:2a:0b:a0:4f:31:2a:de:df:dd:a9:1b:99:08:
         92:9e:eb:ee:5f:8d:15:59:6f:34:59:32:9d:8a:2a:64:65:71:
         76:b4:bc:e2:4f:d9:27:96:d1:b7:f0:b5:fb:c4:6a:35:77:a6:
         81:df:40:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:15:06 2026 by rpki-client