Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
File:                     OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json)
Hash identifier:          L0FPMKPkOtRdrpFvD6A29yYgzTYOKaKXWwN9i/Ff4Wg=
Subject key identifier:   B7:3E:AF:2B:79:6F:82:D9:3B:5E:B8:D9:76:3B:F6:8F:30:25:01:C6
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Certificate issuer:       /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial:       01A15E564AADE2D4CE8E04E961302358D7B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
Manifest number:          0B36
Signing time:             Wed 21 Oct 2026 12:01:15 +0000
Manifest this update:     Wed 21 Oct 2026 12:01:15 +0000
Manifest next update:     Thu 22 Oct 2026 12:01:15 +0000
Files and hashes:         1: 6QjQA0_fqdIryNhtjxIfR8HzBm8.roa (hash: BdP8cS5Jr2HaqgKC6lWTWfU5V8jliQKRlVrIRV0QG54=)
                          2: J1bJb5PR-6WCKXzaxKwF8b7G6KM.roa (hash: aPn06S/csR4hGjZC+O1jL0hLLbq1h25Fd+BEJPi6jnM=)
                          3: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: zmypSMg5vvNGaWe0hWHBAAAWAesJjlYto9VtlvANVdw=)
                          4: XGqRnJ4CofJECXJzwAlV7SJh4V8.roa (hash: XEI0xhnT+pV8GiFR8nyVjb+Jp2qqtfyALCvoz0dFIWQ=)
                          5: egvTStfdqsgaJQHUlI4Gx-druNs.roa (hash: 4U3wHEEQUhulNGL0yqru9oCFOlljnEnQXHB+fB5oMsg=)
                          6: y2R7XAH-3-kA5U74hXHHO_c11dI.roa (hash: gWO/uuYDyiGKuAWY4EaQAg3d79DNvwcV+IkMjIH1jbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 12:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5e:56:4a:ad:e2:d4:ce:8e:04:e9:61:30:23:58:d7:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
        Validity
            Not Before: Oct 21 12:01:15 2026 GMT
            Not After : Oct 22 12:01:15 2026 GMT
        Subject: CN=b73eaf2b796f82d93b5eb8d9763bf68f302501c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:92:e0:c3:0c:1f:ca:f8:07:23:5c:db:fc:a3:
                    64:b2:70:38:ec:89:4c:b6:0a:c8:3f:e1:1c:27:5b:
                    0a:7b:47:70:b4:12:68:66:e6:83:2c:ad:74:3b:39:
                    43:38:92:57:4c:b9:bb:eb:53:e6:99:fd:3a:ca:63:
                    ad:27:bd:64:d1:77:15:e4:6d:69:70:c4:a5:10:c9:
                    71:43:7b:3b:15:91:fe:6e:84:d1:77:c2:4d:61:62:
                    e4:89:e1:53:09:44:1b:3c:83:ff:0c:a2:39:17:95:
                    f7:1e:d0:ec:ce:d7:8a:21:61:6a:52:fb:13:0b:97:
                    ed:ee:5b:1e:d8:87:4b:50:69:ef:a3:9c:04:04:e3:
                    a5:12:46:76:3c:3d:dd:3d:48:dd:0e:7a:7e:1e:4e:
                    40:69:a9:bb:c1:09:ac:aa:01:73:28:c4:4b:a4:91:
                    56:7b:92:50:23:42:b8:10:f5:e7:b5:c4:c8:eb:76:
                    81:20:5a:89:df:25:c3:30:72:5b:b5:df:b2:7e:c7:
                    1b:57:f5:7e:c1:b0:da:57:14:67:a1:a0:2a:6a:29:
                    97:1c:30:a3:ce:5c:45:55:9f:8e:d1:3d:b1:92:32:
                    19:e9:26:96:19:40:cc:f7:99:69:db:92:e4:0c:2c:
                    c8:1d:b9:2a:8c:60:b5:c2:e8:b9:df:d5:8d:71:d5:
                    9d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3E:AF:2B:79:6F:82:D9:3B:5E:B8:D9:76:3B:F6:8F:30:25:01:C6
            X509v3 Authority Key Identifier:
                keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:77:95:82:e6:b7:af:6d:6c:8b:46:05:10:79:3b:8f:21:14:
         62:92:fa:fa:27:4c:e0:ae:8f:9a:7a:03:b4:b1:5c:c9:e5:22:
         aa:93:62:94:09:4b:a2:e0:fb:93:2b:33:21:6a:7e:b8:b0:0f:
         6f:34:a0:f7:65:c7:f5:86:d9:c9:6a:78:02:59:26:34:71:d4:
         92:e5:36:a2:32:5b:86:5d:31:ee:ae:32:ff:04:19:3c:9e:eb:
         c7:ee:44:0c:b0:9e:f2:4b:63:46:41:fb:c5:a0:86:6e:d7:17:
         64:06:d2:6c:fb:6b:8c:d6:46:11:ea:94:17:92:4b:5c:bf:f0:
         1f:3d:5f:a1:58:d4:77:8d:4e:ed:64:7e:94:d4:12:cb:62:ff:
         06:c4:14:df:ac:54:ff:50:78:16:c0:0e:f0:54:a1:2f:05:86:
         16:0a:d7:3c:07:c4:4c:b9:fa:51:92:11:7c:83:51:78:20:db:
         6a:aa:29:1e:8a:e3:d4:ef:ce:fe:2b:83:2c:b3:c6:0d:b3:3b:
         14:a2:d6:fb:74:58:2e:a4:bd:46:36:0b:9b:da:3c:83:48:56:
         75:63:54:21:43:e7:ae:dd:49:6c:ed:97:1a:74:47:89:8e:fc:
         11:29:78:42:b0:71:16:04:6b:56:bf:23:f5:61:01:bc:06:4b:
         18:f8:27:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:41:36 2026 by rpki-client