Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
File:                     oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft (raw, json)
Hash identifier:          tke/W9lIpviuNPb51AN4DJLJgBR4GzVp3uH56zp+3pw=
Subject key identifier:   77:6D:13:C0:60:11:B6:E2:41:82:45:14:0F:5E:2D:AA:10:FC:47:C4
Authority key identifier: A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46
Certificate issuer:       /CN=a122d6d21bd04c46224653a49be029e3c024b846
Certificate serial:       01A0C7EA519F3CF1D21FC9481B538B345275
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
Manifest number:          066E
Signing time:             Tue 22 Sep 2026 07:00:17 +0000
Manifest this update:     Tue 22 Sep 2026 07:00:17 +0000
Manifest next update:     Wed 23 Sep 2026 07:00:17 +0000
Files and hashes:         1: 3VvlIVLD8nV-Kprr00nGUqwlEG0.roa (hash: ueTtVv9Izvar/a32kf0F4hmGSZUFBIbcRRQsZSddarI=)
                          2: 7HJItND-ZHUyWIc0zlIoIbcu0kU.roa (hash: 9Bz34LYfCAabYfpSmfTeNq9WvdNCYgrnyawzxf6Rfac=)
                          3: cBS-3HpC_a4rHcbd8xWkU8ryqAo.roa (hash: BFwk1ZVFsJ92QmF6WqyS8lrea+ZBvLbcAz/u0+3fQLc=)
                          4: oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl (hash: UtYSU7+e8jf2NP3qslYjzTRObE6KazWJwVGhvdKiZC0=)
                          5: wpoL_iSupuiaeUF0rSK5oTJDYgk.roa (hash: tmpMUF0ltyMmfrFAPsjl7BnWO5nUIh5IyWezk54S+Pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:ea:51:9f:3c:f1:d2:1f:c9:48:1b:53:8b:34:52:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a122d6d21bd04c46224653a49be029e3c024b846
        Validity
            Not Before: Sep 22 07:00:17 2026 GMT
            Not After : Sep 23 07:00:17 2026 GMT
        Subject: CN=776d13c06011b6e2418245140f5e2daa10fc47c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:4a:a2:2d:a9:2a:c4:08:9a:33:b7:b1:80:
                    50:99:bd:1f:91:fa:99:50:9f:0b:6e:e5:77:b8:8f:
                    32:02:bd:bf:72:2b:30:99:e3:da:d0:b9:28:40:b9:
                    c3:19:99:0d:6a:3f:a8:b8:f5:72:c2:10:d6:ca:2b:
                    26:41:7b:84:30:49:51:ef:87:c7:7a:cd:fd:6e:21:
                    b0:91:e4:f9:c7:76:5a:3f:ab:df:37:8a:27:ac:8d:
                    03:8f:9b:4a:38:89:a9:78:7b:02:80:06:c2:43:97:
                    59:29:d6:8b:e1:c3:67:ba:0e:64:35:2b:a8:ca:07:
                    67:63:9e:d0:12:5a:f1:9b:0a:d5:07:80:5d:1b:19:
                    27:df:75:f2:f0:2e:82:13:2f:db:c5:6b:21:a9:a2:
                    b0:a7:5e:02:52:c4:b6:c4:5d:5b:44:45:fe:41:3c:
                    8d:ef:a5:42:f7:a7:18:66:51:e9:19:2b:4d:d1:ea:
                    71:2e:4d:06:a0:7b:61:98:1d:27:32:0b:81:e7:3c:
                    64:60:e3:42:73:37:97:ad:af:29:37:c7:2e:8f:9b:
                    4d:eb:06:9a:56:e6:2b:04:db:ea:68:d8:48:a4:28:
                    49:f3:2f:e2:2d:d5:3e:e6:45:8a:52:b5:53:f4:d9:
                    5e:ff:51:eb:bb:df:58:ed:03:cd:b3:8a:ed:b4:1c:
                    1f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6D:13:C0:60:11:B6:E2:41:82:45:14:0F:5E:2D:AA:10:FC:47:C4
            X509v3 Authority Key Identifier:
                keyid:A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:ca:d5:56:42:54:cc:f8:8b:7e:14:f3:65:69:c7:7b:e0:ea:
         22:29:aa:6c:04:73:a1:33:0b:84:bc:47:4b:f0:a5:6d:7e:f8:
         ed:59:bc:c4:7d:cf:0f:10:49:0c:bb:01:91:84:76:71:88:c5:
         42:51:da:ce:fe:a1:23:01:ef:24:c2:72:4d:7c:9c:2f:54:a6:
         f8:63:26:4a:51:6e:a8:f9:c8:ce:b2:7e:9a:39:a5:f2:97:63:
         22:38:bd:5f:fe:71:4f:39:91:e2:8a:36:57:eb:dd:f7:47:47:
         d2:24:bd:8b:1d:5d:7c:1d:a2:89:ab:60:d7:f5:00:db:23:fe:
         93:21:e4:e0:19:65:54:7d:0b:66:c1:0a:a3:27:68:f3:f8:ef:
         d5:02:ec:43:6c:56:21:a3:2c:36:5c:78:ae:70:86:0b:9c:81:
         f1:35:b7:94:96:05:f8:bf:da:72:bc:f3:d3:37:0e:20:fb:4a:
         f6:70:8c:cb:07:fb:0f:33:33:fc:ea:a9:22:da:b6:89:60:75:
         c2:e8:9a:af:6c:dc:8a:fa:91:c9:71:9a:dc:8a:29:e7:f4:f0:
         d8:4d:8d:9c:77:c7:7f:5a:cf:e5:ee:d6:d0:ad:57:32:35:07:
         f6:45:6b:61:d5:78:0e:ef:ef:17:a3:bb:bf:4a:0d:f5:b1:5a:
         06:3b:5b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:36:47 2026 by rpki-client