Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
File:                     ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft (raw, json)
Hash identifier:          IYOGBQBot8o1poWsZ8n5LpuyRTsrhI1xVZ+qUc7BbXE=
Subject key identifier:   FB:7E:9B:00:E1:D0:97:92:0E:91:FE:7F:33:B4:8D:08:DF:65:E4:6C
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Certificate issuer:       /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial:       01A0268E89A073694EEDC03FE328FC08B02C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
Manifest number:          1A16
Signing time:             Fri 21 Aug 2026 23:01:10 +0000
Manifest this update:     Fri 21 Aug 2026 23:01:10 +0000
Manifest next update:     Sat 22 Aug 2026 23:01:10 +0000
Files and hashes:         1: FomC0OD_NwetWkEPOTha3fWVMKU.roa (hash: dczkmLKUdcB3drX74PqMZvKfYmTs+5M5HtjBYhjGfvk=)
                          2: drBhV9alP4OW6ofNZOxW9TLw2f0.roa (hash: lbZ8swZRlTMR5bgvRpyD4YhMPyncb/ksvL8xrpAMysA=)
                          3: ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl (hash: bxbImUFaHPYwxUqMRflgTkjIEmrt/RA/zdqkCHVcc3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:8e:89:a0:73:69:4e:ed:c0:3f:e3:28:fc:08:b0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
        Validity
            Not Before: Aug 21 23:01:10 2026 GMT
            Not After : Aug 22 23:01:10 2026 GMT
        Subject: CN=fb7e9b00e1d097920e91fe7f33b48d08df65e46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:8f:7e:5a:22:63:2e:0b:68:44:4f:0a:20:
                    d4:91:cc:06:10:ff:a7:71:a5:5f:2d:34:48:e9:ae:
                    51:6e:0f:bd:98:23:6f:ba:f6:f1:13:5c:9a:57:10:
                    27:80:37:7f:9e:10:af:28:ca:6b:68:a7:c5:92:8f:
                    c0:ed:5a:3a:a9:64:a5:ae:7d:99:a8:b6:02:35:b3:
                    04:72:b6:a4:86:13:54:9c:6b:2d:61:20:ba:c0:e1:
                    5a:85:41:cf:fc:a2:25:70:c6:f2:f9:f0:24:fb:a7:
                    39:15:bc:af:f7:cf:86:11:b0:9b:50:74:56:5d:d2:
                    db:27:1c:51:db:17:e5:dd:91:a5:f9:d6:e1:f2:49:
                    34:12:9c:cc:7a:8f:b6:14:04:a7:5c:5a:86:6f:26:
                    ad:85:7c:cc:30:15:4f:94:e5:be:78:69:67:7e:fd:
                    f6:a3:17:06:c9:9a:ee:59:92:85:52:96:bf:f9:9f:
                    18:23:09:3f:73:10:25:7b:86:5e:26:97:a4:d6:43:
                    2d:ca:f2:5d:2b:e6:84:9a:c9:91:fb:97:fd:33:44:
                    9c:32:d6:e0:45:91:4a:7a:1c:79:fb:35:b6:5d:2a:
                    b4:20:92:19:a3:58:43:74:6a:32:d2:57:b5:c8:90:
                    96:c5:73:ce:e5:d7:c5:05:45:da:82:c4:43:f7:04:
                    b5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7E:9B:00:E1:D0:97:92:0E:91:FE:7F:33:B4:8D:08:DF:65:E4:6C
            X509v3 Authority Key Identifier:
                keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:ab:1d:a9:b3:20:65:0f:fa:99:0d:36:a6:03:7a:05:c1:70:
         5d:88:b5:cd:14:31:0b:56:35:f0:74:d0:02:e4:23:5e:4b:7c:
         5b:01:4f:a1:44:f7:a2:a2:02:5b:75:a4:18:88:c6:9c:e3:13:
         44:a2:5d:9c:f1:af:b9:c0:05:aa:76:d5:4f:62:b1:25:a5:5c:
         be:2c:9c:c7:c0:36:14:0e:b4:b1:2d:df:af:0b:ec:e2:d3:11:
         a3:76:c6:a7:24:ee:29:0c:b1:73:97:aa:87:8c:70:62:2f:70:
         a3:d1:35:64:63:fa:63:54:94:fa:2d:1d:e7:7f:f6:9a:ba:89:
         8c:71:2d:f6:1c:5f:ca:b3:52:d6:c9:7c:9f:be:3d:b0:9a:e1:
         37:0d:df:78:0e:0b:77:7a:14:e4:20:2a:20:fa:83:58:ca:3f:
         83:03:76:ce:98:04:fc:3e:e2:4a:0d:ee:34:ff:84:0e:99:6e:
         67:0a:0e:eb:d8:ed:6f:0c:25:78:f7:e1:93:76:ae:bc:0d:44:
         5b:7f:94:e7:f4:a1:b2:6f:9f:91:8d:9c:c4:c5:57:c7:80:a0:
         2c:a6:99:4a:a7:28:6c:65:05:c7:90:07:d5:41:d9:9c:2c:d1:
         5a:e4:8f:91:65:78:44:25:c5:13:c1:51:70:29:61:04:30:a3:
         99:e7:e5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 02:42:44 2026 by rpki-client