Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
File:                     OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft (raw, json)
Hash identifier:          0e33dT4mFDfJ8xeRhCosyR62oV0w9ES2vt05Sm4QKg8=
Subject key identifier:   64:BA:5E:3D:EC:70:79:93:02:BA:43:8F:80:14:DD:2E:ED:FC:BF:2D
Authority key identifier: 38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
Certificate issuer:       /CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Certificate serial:       01A0D0EDCEACA5D25421C8F02616811DB814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
Manifest number:          10A9
Signing time:             Thu 24 Sep 2026 01:00:40 +0000
Manifest this update:     Thu 24 Sep 2026 01:00:40 +0000
Manifest next update:     Fri 25 Sep 2026 01:00:40 +0000
Files and hashes:         1: O4mhqRGKIoCKcIMKacGidJQTeig.roa (hash: o44fh95pYU44LJ84noRE8s+3KorVfsnK8XoKEFDXt+c=)
                          2: OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl (hash: 2bEI+ssjZxqecIixqs7S4CD+/N+wY9rhKlNvcvzaAUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ed:ce:ac:a5:d2:54:21:c8:f0:26:16:81:1d:b8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
        Validity
            Not Before: Sep 24 01:00:40 2026 GMT
            Not After : Sep 25 01:00:40 2026 GMT
        Subject: CN=64ba5e3dec70799302ba438f8014dd2eedfcbf2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:8a:a7:f1:6f:43:ca:e9:ad:db:98:9c:bf:55:
                    2f:cc:a7:53:2e:cc:35:7f:74:63:b5:c5:07:59:67:
                    2a:6e:1b:1e:cd:71:49:29:fa:8c:ef:17:71:b1:68:
                    0c:88:a9:1f:9b:40:50:36:2a:08:2b:1f:ed:12:a4:
                    75:ae:79:49:e7:bb:6e:0b:cb:48:03:86:c5:0d:ad:
                    e3:6b:46:f0:0a:60:90:f5:a3:fc:ac:38:e9:8f:00:
                    53:0f:04:5c:51:75:da:5e:3f:64:69:ed:cd:c5:07:
                    b8:53:30:7e:4d:3e:b7:46:a8:a8:75:fc:9a:a8:d0:
                    1a:5f:c5:d2:87:2b:90:bf:88:67:91:98:a3:fd:81:
                    21:ad:7c:f4:c3:01:73:2e:04:0f:cf:8d:86:88:eb:
                    9c:aa:cb:f0:78:4a:e6:22:b6:d5:de:b9:3e:89:57:
                    4c:b7:41:f4:95:7b:3f:26:1d:3a:94:bd:0c:70:97:
                    ac:bb:de:7c:df:38:3b:dc:12:5e:15:2b:c5:47:a5:
                    ef:57:ef:7b:b0:a7:d7:94:d7:39:d7:f5:fa:1e:d1:
                    6b:8d:a5:51:60:01:f0:8f:ea:50:a1:61:47:88:da:
                    94:10:10:e7:48:3d:89:c7:e8:71:44:9b:ec:51:58:
                    53:50:c5:39:2f:6b:1a:b2:46:57:d1:3a:86:a4:21:
                    0b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BA:5E:3D:EC:70:79:93:02:BA:43:8F:80:14:DD:2E:ED:FC:BF:2D
            X509v3 Authority Key Identifier:
                keyid:38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:81:33:40:f3:0d:5e:5a:8e:1e:59:7d:f9:2b:12:56:25:d4:
         2a:26:92:04:25:0a:15:69:b9:55:11:40:39:66:c4:6b:e2:62:
         fb:22:e9:3a:08:d5:b1:10:75:19:ef:5d:56:82:5f:99:4c:42:
         a1:8e:42:8a:12:66:71:fe:2b:ed:00:0a:f3:ba:a5:88:7a:96:
         b4:b6:d2:3e:66:04:3d:38:c3:be:93:c4:ac:f0:aa:8e:bc:23:
         fc:14:24:59:b6:ef:9a:88:d6:c8:b7:68:ba:c5:d5:b2:b7:d5:
         cc:d6:30:06:eb:c9:8b:67:52:5d:12:e0:49:87:05:07:6f:7b:
         47:d5:1f:11:e6:55:e8:10:eb:71:89:4c:75:96:1f:fe:ff:e3:
         61:cd:f6:ed:8b:5b:fa:d6:5b:e5:79:69:25:a4:d8:48:48:e3:
         ae:d0:fc:e4:06:14:68:91:bc:0f:73:c6:28:02:f9:0f:91:e3:
         da:bf:39:fb:63:13:49:73:a7:46:bc:f4:92:e8:ca:95:03:13:
         36:e3:57:81:8b:c5:0f:01:c5:49:ae:b7:8b:3a:96:e4:c3:ca:
         3c:9f:00:d9:aa:5d:d7:e4:3e:80:29:51:86:b6:3b:ea:7c:24:
         a1:69:37:6c:d4:70:fe:43:ca:31:93:d0:af:3a:a5:58:12:4b:
         77:95:a6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:29:06 2026 by rpki-client