Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File:                     OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier:          ytBrlp7c4KNpJLsDG+prJgzihcnVzJBPJeyLroNIMEI=
Subject key identifier:   91:85:D8:4D:80:F7:EB:20:21:EB:31:3C:62:BB:CA:E2:87:6C:CD:5C
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer:       /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial:       01A02AD8AF99DDA4A94E056838699CF6C196
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number:          0698
Signing time:             Sat 22 Aug 2026 19:00:38 +0000
Manifest this update:     Sat 22 Aug 2026 19:00:38 +0000
Manifest next update:     Sun 23 Aug 2026 19:00:38 +0000
Files and hashes:         1: 5kdfSFfIXpTRDKj7nU9dTnk_a7Q.roa (hash: Qud0EaTIzAf2oGbBUwUkaVwSjph89PDDdo19BAvVZGk=)
                          2: IxT2p1USvkgGTKI4jIEAGlYZs-c.roa (hash: RpYym6oxELeUAn+F/Xd8p5iioExynMd0f+38UAxEIvY=)
                          3: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: /GSDbf5MSgjSdTPCi2nFm3bw+pEhTOr/fNMGrKEwshs=)
                          4: oVKcWW4duCpkxQJ1oP8E7IC2AzU.roa (hash: myh6PixZ04dXKVpBJ7oXGMj9UcP3arkRwKqy/fuyKlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:2a:d8:af:99:dd:a4:a9:4e:05:68:38:69:9c:f6:c1:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
        Validity
            Not Before: Aug 22 19:00:38 2026 GMT
            Not After : Aug 23 19:00:38 2026 GMT
        Subject: CN=9185d84d80f7eb2021eb313c62bbcae2876ccd5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a8:2f:74:e5:ab:f5:10:44:63:68:80:60:e5:
                    6a:5b:3a:04:17:88:c8:28:c2:1f:f6:2e:5b:e0:23:
                    51:e7:d4:16:88:4c:ba:44:33:18:02:69:89:8b:58:
                    dc:0a:e7:76:7d:85:19:37:21:24:2a:74:09:a4:c5:
                    bd:31:8b:93:5a:48:ed:b9:8c:87:b0:71:82:b6:e9:
                    75:47:cb:d4:77:63:67:a3:5e:d0:9d:b3:14:c9:79:
                    8d:bc:00:aa:72:c6:78:6b:fc:a3:93:96:e6:85:94:
                    c1:ec:fe:48:e6:e2:fa:c2:86:2f:d7:a5:ea:85:56:
                    96:0d:b2:9f:e9:54:b3:61:5d:12:eb:40:f3:c6:30:
                    29:92:5b:07:9f:34:ca:77:db:6b:b1:09:7b:b3:7b:
                    a2:4d:0c:8a:e8:7d:a4:50:c3:25:d1:36:43:ce:cf:
                    ee:85:41:7a:2b:f4:86:d6:95:f3:d2:56:50:54:9f:
                    7a:2b:58:5b:b4:f9:df:15:6d:4d:c3:2a:80:ee:bf:
                    b3:d8:76:55:3b:f8:04:99:9a:1c:5e:4c:82:1e:dc:
                    13:e7:67:83:51:69:7b:1b:5a:c7:44:95:0d:fe:88:
                    af:4f:65:b9:24:c6:95:d2:09:59:95:1e:0b:d4:54:
                    7d:67:77:39:0b:bf:e3:72:62:ba:82:51:5a:84:3a:
                    36:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:85:D8:4D:80:F7:EB:20:21:EB:31:3C:62:BB:CA:E2:87:6C:CD:5C
            X509v3 Authority Key Identifier:
                keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3c:67:7a:db:b9:54:29:94:87:9f:f3:55:cf:a0:ae:f7:3a:
         c5:89:bd:94:75:c7:44:ba:13:be:ea:c3:d0:5d:17:8d:74:06:
         fc:51:53:67:63:a7:34:59:9a:0d:c6:bc:84:c0:14:eb:e1:30:
         e7:8a:c6:39:9f:be:1b:70:3f:1c:34:1e:77:7e:10:d2:a4:f9:
         02:a5:e4:33:2b:b3:21:c2:77:d8:63:75:fe:ec:ed:a3:fb:dd:
         1e:71:d6:d6:be:bc:67:0e:83:bc:61:a7:34:9b:ff:b0:9a:5c:
         0c:a6:66:96:40:53:ac:06:11:72:25:61:4c:15:02:97:09:16:
         e9:aa:e1:9a:a1:41:40:01:7e:2c:cb:27:98:dc:e2:7c:31:55:
         3f:5f:99:05:48:d5:b4:ac:1d:5d:3c:21:cd:80:cb:04:31:18:
         20:b2:db:b4:a0:cc:07:8e:c5:75:b0:7b:74:68:54:fe:79:7b:
         a2:f4:14:ac:7f:46:45:e8:92:e9:95:04:13:3c:7c:b1:89:40:
         9b:a8:b6:3d:56:ab:d3:f1:bf:7c:d5:aa:1c:68:dd:0b:69:c7:
         d5:2c:21:85:b8:02:78:de:1b:9b:ff:d6:fe:43:45:4a:5b:71:
         cb:4a:d5:1d:13:c0:24:af:41:a1:6e:ef:95:f9:63:ed:02:70:
         1d:2c:81:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:50:02 2026 by rpki-client