Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File:                     oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier:          j2rO06pnVvTGsuW6bZKhqHcasxWPu27csmDJbMNYluM=
Subject key identifier:   39:17:B5:5F:AD:EF:25:28:53:D3:EB:2A:4F:F5:82:49:46:D6:C4:2F
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer:       /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial:       01A1242F5F291CE72079B77E10CAA3BF11CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number:          1A9D
Signing time:             Sat 10 Oct 2026 05:00:46 +0000
Manifest this update:     Sat 10 Oct 2026 05:00:46 +0000
Manifest next update:     Sun 11 Oct 2026 05:00:46 +0000
Files and hashes:         1: 0iskxAKnPV1t3vVtL0ZxiR5NqDo.asa (hash: dTnlTRCOpAxkRq/1/Z4AQAvbwk3FcS0Wqrww9bcRVV4=)
                          2: mfvEjWb3rQFbj32_BBadoAv_Y0s.roa (hash: FGRbYmzgAXrFUwzG+mMOatKnvNqH9Ov9gtrQRgDuAmE=)
                          3: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: lrDRYbYofptKjXW0/t1hSEXWa6Y36IMyimrir3ktYXs=)
                          4: wvfBOreCybbt9afiUMU5R2NBdJQ.asa (hash: IVFtZ0X879D2RM6GVRG/lhLBfD0N96F/6jJoFE+cRr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 05:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:24:2f:5f:29:1c:e7:20:79:b7:7e:10:ca:a3:bf:11:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
        Validity
            Not Before: Oct 10 05:00:46 2026 GMT
            Not After : Oct 11 05:00:46 2026 GMT
        Subject: CN=3917b55fadef252853d3eb2a4ff5824946d6c42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8b:3a:94:12:12:07:6d:ba:6e:16:72:1d:90:
                    c3:07:94:fd:eb:19:2a:73:62:32:e0:eb:fc:f5:c7:
                    f7:f4:49:ae:c0:4f:22:4a:9c:6e:e7:8b:b6:f2:09:
                    cf:21:21:33:30:ff:11:26:3e:f0:33:ce:49:42:6c:
                    9f:9f:ff:a6:d4:d7:9f:b2:3a:32:90:1d:2d:d0:81:
                    27:9e:4a:cb:25:6d:5f:2b:fa:6d:bc:e6:58:06:d3:
                    e2:a7:73:c2:b2:d9:a5:a7:99:f0:46:52:f6:18:6b:
                    0d:83:b6:50:4d:13:c2:60:f5:6b:6f:2e:d6:91:5e:
                    6f:96:e1:78:99:06:d4:80:24:ac:11:a0:3c:90:26:
                    a3:a1:88:0b:91:21:eb:6a:6a:2b:5d:e4:22:49:c6:
                    e1:37:6e:d2:c4:87:86:28:64:a4:e8:bd:8b:1d:30:
                    4d:22:9e:b7:d3:cb:1c:6a:04:80:2a:3b:7c:72:39:
                    30:a2:53:00:e4:2b:ce:a8:45:c4:6f:2b:30:e2:29:
                    9b:d0:9d:51:40:b5:34:8a:4a:67:77:c4:9f:8c:fa:
                    9d:eb:7b:4e:18:49:29:77:ab:63:f6:86:46:0b:37:
                    80:c9:ba:c2:fa:ed:6c:ec:1e:05:85:f5:64:6b:19:
                    31:13:11:e2:43:5b:71:53:d9:96:59:f6:d3:3d:42:
                    f8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:17:B5:5F:AD:EF:25:28:53:D3:EB:2A:4F:F5:82:49:46:D6:C4:2F
            X509v3 Authority Key Identifier:
                keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f5:84:85:07:94:89:f6:75:bc:81:96:0c:1d:3a:ce:ba:04:
         0b:19:cd:bf:05:83:e7:fe:f5:dd:42:aa:78:cd:69:56:ac:8c:
         62:06:a0:23:0d:4b:a7:6f:5b:43:7c:9a:89:db:4f:06:d8:5e:
         8f:cf:79:b9:e3:79:d3:e6:c1:70:b8:11:3a:73:0a:c5:84:88:
         a7:a4:2c:0e:f4:de:9f:74:03:13:0a:e7:ec:96:2c:e1:55:29:
         d5:0d:8f:d1:b4:65:26:9d:5c:56:f1:e8:eb:38:07:9a:b3:75:
         dd:08:33:c6:c7:4c:f8:d6:19:b4:46:7c:dd:7f:af:37:53:6d:
         bd:f3:4b:04:0f:ea:3e:12:15:6e:d7:db:cc:da:71:01:15:ba:
         6e:01:f1:2f:81:d5:d5:91:d4:51:a6:2f:dd:66:88:4d:95:be:
         1c:a1:7a:c7:b4:72:4d:43:30:02:3d:a8:29:70:28:0c:ef:50:
         88:8c:46:58:cd:0b:75:88:f3:1e:7a:7d:e8:95:ba:62:70:99:
         ad:a5:49:02:55:56:4d:01:a5:70:eb:a2:2e:17:49:4e:ca:2a:
         b9:fa:49:2b:54:bc:6a:30:41:17:aa:b4:e7:9d:59:e2:ae:87:
         63:f4:91:28:4e:9f:66:85:e6:f4:ba:53:b3:41:42:d5:00:02:
         68:ac:a1:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEkL18pHOcgebd+EMqjvxHLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNjM5YWRmMWUwYjg0YjlmZjY0ZTRmOGViZTYzOGViYmY1
ZDI3YjkwHhcNMjYxMDEwMDUwMDQ2WhcNMjYxMDExMDUwMDQ2WjAzMTEwLwYDVQQD
EygzOTE3YjU1ZmFkZWYyNTI4NTNkM2ViMmE0ZmY1ODI0OTQ2ZDZjNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4s6lBISB226bhZyHZDDB5T96xkq
c2Iy4Ov89cf39EmuwE8iSpxu54u28gnPISEzMP8RJj7wM85JQmyfn/+m1Nefsjoy
kB0t0IEnnkrLJW1fK/ptvOZYBtPip3PCstmlp5nwRlL2GGsNg7ZQTRPCYPVrby7W
kV5vluF4mQbUgCSsEaA8kCajoYgLkSHramorXeQiScbhN27SxIeGKGSk6L2LHTBN
Ip6308scagSAKjt8cjkwolMA5CvOqEXEbysw4imb0J1RQLU0ikpnd8SfjPqd63tO
GEkpd6tj9oZGCzeAybrC+u1s7B4FhfVkaxkxExHiQ1txU9mWWfbTPUL4cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkXtV+t7yUoU9PrKk/1gklG1sQvMB8GA1UdIwQY
MBaAFKBjmt8eC4S5/2Tk+OvmOOu/XSe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjIt
ODEzYzVhYWI3ODNlLzEvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjItODEzYzVhYWI3ODNl
LzEvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPWEhQeU
ifZ1vIGWDB06zroECxnNvwWD5/713UKqeM1pVqyMYgagIw1Lp29bQ3yaidtPBthe
j895ueN50+bBcLgROnMKxYSIp6QsDvTen3QDEwrn7JYs4VUp1Q2P0bRlJp1cVvHo
6zgHmrN13QgzxsdM+NYZtEZ83X+vN1NtvfNLBA/qPhIVbtfbzNpxARW6bgHxL4HV
1ZHUUaYv3WaITZW+HKF6x7RyTUMwAj2oKXAoDO9QiIxGWM0LdYjzHnp96JW6YnCZ
raVJAlVWTQGlcOuiLhdJTsoqufpJK1S8ajBBF6q0551Z4q6HY/SRKE6fZoXm9LpT
s0FC1QACaKyhWA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 15:56:05 2026 by rpki-client