Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File:                     OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier:          X093ycgd3K0b5lOAzZ2G+mvIOMcYdbvaDPUqQXei2Sg=
Subject key identifier:   E6:F6:50:94:54:76:6A:5A:F0:4C:CD:E2:51:47:15:AC:21:E4:FD:E3
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer:       /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial:       01A129C446874A2DC37DA369B3713E155ED8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number:          071C
Signing time:             Sun 11 Oct 2026 07:01:31 +0000
Manifest this update:     Sun 11 Oct 2026 07:01:31 +0000
Manifest next update:     Mon 12 Oct 2026 07:01:31 +0000
Files and hashes:         1: 5kdfSFfIXpTRDKj7nU9dTnk_a7Q.roa (hash: Qud0EaTIzAf2oGbBUwUkaVwSjph89PDDdo19BAvVZGk=)
                          2: IxT2p1USvkgGTKI4jIEAGlYZs-c.roa (hash: RpYym6oxELeUAn+F/Xd8p5iioExynMd0f+38UAxEIvY=)
                          3: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: wpHtZX9f8ZOymHAtvOjpArAnFdOVP1dnQAnJzJp3byA=)
                          4: oVKcWW4duCpkxQJ1oP8E7IC2AzU.roa (hash: myh6PixZ04dXKVpBJ7oXGMj9UcP3arkRwKqy/fuyKlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:c4:46:87:4a:2d:c3:7d:a3:69:b3:71:3e:15:5e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
        Validity
            Not Before: Oct 11 07:01:31 2026 GMT
            Not After : Oct 12 07:01:31 2026 GMT
        Subject: CN=e6f6509454766a5af04ccde2514715ac21e4fde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f7:38:28:c0:6d:b9:b1:46:d2:d9:0a:a3:68:
                    23:6e:d0:4d:81:fa:e6:67:16:f5:ab:17:47:67:f3:
                    f0:4c:85:af:de:29:14:b6:6a:27:e4:d4:66:c7:99:
                    ea:ec:dc:51:d4:8b:ba:b5:bc:31:7c:88:d6:5b:5c:
                    04:df:33:3f:ff:1b:33:34:29:1d:6c:55:6e:2d:a2:
                    1c:5a:47:50:cf:b5:fa:9b:0e:a3:0c:70:d4:b9:da:
                    98:ea:0e:dd:fc:28:09:1a:b1:e8:2b:f5:06:40:87:
                    35:20:8b:dd:f1:13:5f:b4:c0:d1:f5:78:ab:31:35:
                    41:a3:55:6b:85:be:b2:7e:d6:de:16:5a:c3:c6:4b:
                    ef:93:06:ec:ab:c7:84:54:6c:ec:fc:0b:d3:ce:13:
                    f1:61:4a:1a:41:48:35:d4:3b:cd:c9:fe:6e:ff:7a:
                    8c:1a:2d:57:eb:45:9d:6b:a2:64:9a:7a:0e:4b:f9:
                    33:7e:d1:2f:d7:9b:90:7d:ea:71:ef:df:fb:69:b0:
                    43:d2:38:47:b2:bf:38:7d:d3:a9:e0:77:64:ec:22:
                    e3:aa:b1:5c:b0:6c:40:c1:26:91:29:fd:94:12:3a:
                    e1:75:4b:e0:b5:b7:d7:b4:38:7e:b0:a3:cb:1b:5f:
                    78:94:34:b7:0b:8d:bf:6d:2c:ec:e4:38:f2:48:80:
                    7c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F6:50:94:54:76:6A:5A:F0:4C:CD:E2:51:47:15:AC:21:E4:FD:E3
            X509v3 Authority Key Identifier:
                keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b3:e2:24:29:29:97:fe:d6:d1:39:19:87:1e:04:8c:de:d1:
         f5:a9:f7:9c:e2:22:ff:d7:20:82:9c:54:f7:69:58:99:30:d7:
         b1:45:f4:67:9a:2c:75:a0:c1:3d:84:03:57:54:72:d8:66:cd:
         69:00:92:1a:cf:36:c9:39:93:11:82:4d:46:94:7d:eb:67:f0:
         30:a3:f1:41:b2:84:02:e1:14:83:f0:8f:1e:22:86:8b:4b:f8:
         38:05:1a:56:92:3b:c2:f6:92:45:cb:2f:a8:2e:5e:c9:30:00:
         35:bf:c1:9a:f5:65:13:b6:cd:e1:fd:40:6b:b0:ad:7f:cf:18:
         56:a5:fb:00:75:47:b2:26:06:eb:2c:56:92:eb:c0:34:6f:51:
         83:58:72:e3:28:a6:2d:65:7c:83:88:4b:d8:98:4d:f0:fb:36:
         ec:9e:92:12:f4:50:ac:75:9b:c1:c2:6a:93:3e:4b:65:8e:91:
         b2:7d:bf:61:10:77:3c:b9:74:8e:2f:37:93:2c:14:06:00:9a:
         64:61:da:29:09:2a:b0:59:82:dc:e6:bf:e5:84:65:3d:48:87:
         51:26:59:c0:78:b3:6a:40:cd:a2:80:0a:03:27:8a:f8:4f:9e:
         73:55:e1:14:7e:97:62:60:3f:04:71:9c:e5:67:07:29:6d:d4:
         d6:a7:74:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:44:40 2026 by rpki-client