Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
File:                     O_-2BdzjBg37ZtzMqI632grHSvE.mft (raw, json)
Hash identifier:          AMX79dsDJMa6BneK+nQjpVyT0J+NqWwAEyRmnChvg+0=
Subject key identifier:   35:27:86:CC:1E:87:62:B2:02:6D:51:FA:D4:2D:F1:7A:AF:4D:82:C2
Authority key identifier: 3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
Certificate issuer:       /CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Certificate serial:       01A0890C2F730E95C55F8040AF97864A4282
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
Manifest number:          0E46
Signing time:             Thu 10 Sep 2026 02:01:12 +0000
Manifest this update:     Thu 10 Sep 2026 02:01:12 +0000
Manifest next update:     Fri 11 Sep 2026 02:01:12 +0000
Files and hashes:         1: 8qvgkfD_thQ4z_WLXGgGH3lh3Jo.roa (hash: lpIuAWveKCKeQMUzXLJXzixQ82Be/vxjOdAft2Y84BY=)
                          2: O_-2BdzjBg37ZtzMqI632grHSvE.crl (hash: vhDG2BrD7/fWVlM89T5ZXPykTOzJjMHIoM3tB/FrwFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 21:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:0c:2f:73:0e:95:c5:5f:80:40:af:97:86:4a:42:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
        Validity
            Not Before: Sep 10 02:01:12 2026 GMT
            Not After : Sep 11 02:01:12 2026 GMT
        Subject: CN=352786cc1e8762b2026d51fad42df17aaf4d82c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ea:93:55:35:ad:4e:c1:8e:30:4c:d0:5a:55:
                    2c:63:d3:2c:df:29:62:0e:4a:f8:2e:8a:fa:f2:8e:
                    fe:ec:0d:85:67:b9:97:5d:11:98:05:76:06:73:32:
                    31:63:c2:67:fc:ce:05:96:b3:31:d5:ea:83:45:55:
                    9e:6c:d6:7d:cb:7d:f1:a0:6f:e2:bf:a9:96:0e:d5:
                    48:fe:2e:ac:03:c7:44:6e:2f:84:c9:51:33:66:33:
                    08:c0:95:d5:17:1b:43:32:87:69:29:5e:8f:28:e8:
                    d2:34:ff:4c:57:97:45:b3:cd:30:78:2c:cc:66:8b:
                    fc:c2:c3:c2:ef:16:b2:42:29:32:e4:c6:75:7a:63:
                    9d:32:e7:25:4c:be:70:f9:a1:b1:9a:8b:dd:31:b2:
                    e4:bd:45:bc:22:d1:90:25:af:5f:a7:68:f9:8d:84:
                    58:1a:06:2f:50:b1:94:fb:31:29:52:55:ba:dc:8a:
                    2a:10:9b:f8:d9:c3:9c:0c:d3:1f:e6:31:aa:ed:fd:
                    37:62:c5:8b:85:6d:01:04:9c:b1:df:2c:af:41:3a:
                    3d:52:03:57:4b:75:d3:a3:51:6d:f7:03:7e:47:22:
                    18:01:7c:5b:73:ef:53:d6:b4:c8:bd:53:68:cc:e9:
                    11:87:2b:f3:7b:bb:c3:dd:1b:be:d4:f3:09:3c:76:
                    1c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:27:86:CC:1E:87:62:B2:02:6D:51:FA:D4:2D:F1:7A:AF:4D:82:C2
            X509v3 Authority Key Identifier:
                keyid:3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:4b:75:09:43:09:09:16:5c:17:40:1d:a8:24:e9:e9:67:58:
         72:bb:38:13:97:69:51:c5:99:9b:84:36:18:64:80:9f:82:05:
         05:38:8c:08:75:ed:6e:64:ba:00:1e:66:1d:36:de:af:f5:5c:
         34:4a:11:b4:cf:46:87:38:d4:e8:e0:d7:ab:5f:77:b3:96:1e:
         68:34:ac:aa:fc:b0:4e:4a:1d:d8:07:a5:8e:06:c2:bb:88:09:
         a7:9e:da:cb:1d:9d:bc:b0:61:fa:ac:9c:93:c5:78:aa:5a:e6:
         54:15:8c:37:0b:32:33:0a:d2:6a:9b:ab:32:d7:10:4d:78:81:
         a7:d1:18:43:ad:ed:06:0b:86:0d:78:99:33:3f:c8:e0:8c:92:
         a4:43:d7:67:37:0e:28:a0:6c:f0:92:ba:33:5d:1e:00:a8:ee:
         e6:46:6a:e9:e8:73:17:10:73:6c:83:6d:0c:cc:9f:c9:5b:50:
         ae:62:25:fe:23:21:19:a4:4a:a5:c4:55:4e:85:d0:ea:46:96:
         39:be:35:5a:af:ac:ab:0e:3d:10:ad:8b:7e:0d:a8:d1:53:47:
         d1:a1:c5:66:5d:3a:0f:53:ce:14:94:8f:25:17:c2:ef:ff:10:
         3f:16:48:4c:06:10:34:fe:4f:39:c6:b8:a9:78:3b:e2:3e:58:
         a2:c3:96:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 04:35:26 2026 by rpki-client