Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
File:                     oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft (raw, json)
Hash identifier:          +R+afjbkqSUa11nPtjceCaoRSqmswC4eW4YDWhGnvS0=
Subject key identifier:   34:AB:5E:C6:2D:57:99:D2:C1:22:84:04:09:30:5C:A4:04:9E:20:49
Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
Certificate issuer:       /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Certificate serial:       01A0BDD52EE4A65C80275A31A2698F086A21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
Manifest number:          1A69
Signing time:             Sun 20 Sep 2026 08:00:59 +0000
Manifest this update:     Sun 20 Sep 2026 08:00:59 +0000
Manifest next update:     Mon 21 Sep 2026 08:00:59 +0000
Files and hashes:         1: 6ANG8OJh4OznV_DcZX5PWVtHheM.roa (hash: NqWuvD35Q6Kj2pzaFTf900GyG3MSTmGkmgkkAWcoTkE=)
                          2: LtkygBk4X3cQQeLD0MiXX0JuB7s.roa (hash: 0MWFfhFzi0pSQgYD8PRMkSGLrWepuSKjnzFvJ6iwO5Q=)
                          3: nieh0sc1APDpOfzH0MPtR51QZ14.roa (hash: cv//t3csuZnG7+u/q0h4zp9zH0W6oEKPTW0buyQiPLk=)
                          4: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl (hash: T/BTcJan2FVyMBsbJfUU7oOpDEiz9a5WU55TDTFlYA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:d5:2e:e4:a6:5c:80:27:5a:31:a2:69:8f:08:6a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
        Validity
            Not Before: Sep 20 08:00:59 2026 GMT
            Not After : Sep 21 08:00:59 2026 GMT
        Subject: CN=34ab5ec62d5799d2c122840409305ca4049e2049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e5:c5:ca:76:f4:5f:21:bc:c8:76:0a:31:e5:
                    01:0c:7c:05:e0:23:0c:67:9c:cc:21:4c:59:3d:68:
                    a5:1b:d3:95:a8:44:eb:78:34:f2:d2:87:e4:f7:67:
                    47:0b:ac:4e:8e:2b:a5:02:66:6c:3b:1d:d4:05:75:
                    64:d7:df:3d:8d:03:46:ce:05:46:58:db:20:8f:28:
                    93:51:b1:25:ea:40:b0:91:e5:28:d5:9d:04:78:3c:
                    da:05:ff:b0:7a:62:40:4a:eb:b4:3e:e8:f2:7b:11:
                    bc:19:19:82:13:fe:c3:2b:d4:7b:4e:11:eb:91:5b:
                    9b:ae:09:39:8f:1c:a0:b0:e9:05:3f:7b:92:e2:f2:
                    7a:95:3b:3b:a6:6a:99:67:83:a3:dc:81:72:7c:3a:
                    86:5d:04:87:5a:6c:94:da:87:21:23:cd:e4:d4:81:
                    83:0c:d3:10:64:82:31:63:f8:fd:28:33:ae:10:b4:
                    be:e0:d6:7e:9b:f7:72:de:27:f4:f3:47:9d:9b:6c:
                    7a:97:1e:30:a0:72:e8:2e:72:1d:97:3b:9b:e8:e6:
                    d4:6b:27:e7:a6:a3:c3:2f:64:29:f7:7f:e0:be:09:
                    bb:dd:9b:81:2d:5f:57:2e:84:69:06:85:6d:63:43:
                    79:17:e4:3d:0d:a2:7d:8e:c6:dd:1d:c6:85:45:8a:
                    3d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AB:5E:C6:2D:57:99:D2:C1:22:84:04:09:30:5C:A4:04:9E:20:49
            X509v3 Authority Key Identifier:
                keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:70:94:4e:46:a9:28:4e:5a:ae:d4:64:8f:58:80:78:ca:9f:
         12:6a:72:d8:0f:43:b3:5b:fd:67:fb:cb:66:22:c0:9c:b6:a0:
         9a:3c:20:66:eb:af:5f:30:89:b9:3b:1b:f3:56:22:47:58:9c:
         4f:7e:54:e2:8a:74:04:eb:2e:06:96:a3:d0:10:65:f1:2e:fa:
         8d:7d:e4:98:d0:4e:0c:41:5b:5d:a9:c3:b2:9e:56:fb:35:b2:
         dc:73:f0:76:6a:97:0d:a3:73:89:3f:8d:42:6b:a3:c2:ea:c7:
         5b:1d:c5:b5:0f:76:8f:bb:14:f7:fd:e7:3c:19:b1:da:6f:9d:
         b8:e1:c1:09:ee:9c:49:4d:9c:cd:84:6c:61:17:02:33:a2:61:
         e9:39:13:85:11:74:72:0b:57:5c:02:05:67:c4:a0:fd:bc:54:
         22:d6:eb:24:54:e0:7f:cf:32:14:3d:ae:aa:8a:85:e7:2c:d1:
         ca:18:9c:1b:6f:d7:c4:19:24:6c:f6:d3:e1:5f:ea:02:34:e9:
         ae:f2:76:25:45:12:2f:d4:48:7c:34:5e:f5:92:0e:40:b6:17:
         1e:60:c1:89:87:ff:18:16:c0:37:a1:fd:44:e7:1e:52:c7:d9:
         df:3b:c3:e7:44:ee:ed:0d:5e:1a:6b:6c:49:39:d1:34:07:db:
         bb:b9:2f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:04:56 2026 by rpki-client