Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
File:                     oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft (raw, json)
Hash identifier:          9RfIyo17KP7o8aZCwwGSqQRu8VUR1gMjPrJd0PVGzEI=
Subject key identifier:   AE:8B:65:CD:07:EF:CF:A2:10:E8:D9:46:61:CA:1B:47:21:63:A1:56
Authority key identifier: A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46
Certificate issuer:       /CN=a122d6d21bd04c46224653a49be029e3c024b846
Certificate serial:       01A0C5FBE80005BAACB0B30A7B511A2FB3FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
Manifest number:          066D
Signing time:             Mon 21 Sep 2026 22:00:15 +0000
Manifest this update:     Mon 21 Sep 2026 22:00:15 +0000
Manifest next update:     Tue 22 Sep 2026 22:00:15 +0000
Files and hashes:         1: 3VvlIVLD8nV-Kprr00nGUqwlEG0.roa (hash: ueTtVv9Izvar/a32kf0F4hmGSZUFBIbcRRQsZSddarI=)
                          2: 7HJItND-ZHUyWIc0zlIoIbcu0kU.roa (hash: 9Bz34LYfCAabYfpSmfTeNq9WvdNCYgrnyawzxf6Rfac=)
                          3: cBS-3HpC_a4rHcbd8xWkU8ryqAo.roa (hash: BFwk1ZVFsJ92QmF6WqyS8lrea+ZBvLbcAz/u0+3fQLc=)
                          4: oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl (hash: i4Ij7T/pHnufFG2G1yH4oh3lPkYA3WDKW5HOt+jnnl8=)
                          5: wpoL_iSupuiaeUF0rSK5oTJDYgk.roa (hash: tmpMUF0ltyMmfrFAPsjl7BnWO5nUIh5IyWezk54S+Pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:fb:e8:00:05:ba:ac:b0:b3:0a:7b:51:1a:2f:b3:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a122d6d21bd04c46224653a49be029e3c024b846
        Validity
            Not Before: Sep 21 22:00:15 2026 GMT
            Not After : Sep 22 22:00:15 2026 GMT
        Subject: CN=ae8b65cd07efcfa210e8d94661ca1b472163a156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:47:05:f3:0a:ee:7e:a9:24:96:28:72:31:
                    07:6d:dc:33:e9:bb:c6:bb:9d:32:04:57:d2:16:64:
                    34:ff:71:29:81:96:a4:02:98:de:3c:c9:3b:c9:57:
                    90:d6:b1:7d:21:0e:3b:f6:76:db:c7:29:c7:7c:03:
                    f0:85:91:9c:62:f5:1e:64:62:17:92:1f:28:91:2d:
                    a1:70:ee:0b:73:eb:bc:9b:f5:5e:8e:56:88:d1:79:
                    21:f9:ca:f0:bb:fc:76:6b:96:af:b9:78:25:2d:45:
                    75:21:7a:cb:dd:4a:ba:ca:ed:25:b9:0b:11:4b:dc:
                    18:08:61:b4:5f:40:25:bd:d0:d3:2c:0a:e7:45:3f:
                    6e:0c:9b:6c:91:fe:0e:cf:1e:24:ca:7c:2f:c6:ba:
                    cc:c6:07:3d:e1:bd:55:2a:9a:ed:66:ef:6e:c4:69:
                    d8:12:23:ee:3d:fe:d7:2e:d0:7f:fa:63:34:c1:98:
                    3f:fa:af:a1:12:f0:30:f9:fd:87:b4:d5:b2:ba:f5:
                    9b:9a:b6:f3:32:8b:80:18:36:27:ff:5f:db:73:7c:
                    00:f5:30:d7:3e:de:f8:fa:ad:c9:d5:01:6c:75:a9:
                    a4:6c:69:68:34:23:7d:0a:1f:e8:b8:f9:13:65:e0:
                    d9:eb:52:6a:62:2b:7a:9c:06:f6:0c:71:e1:15:aa:
                    55:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8B:65:CD:07:EF:CF:A2:10:E8:D9:46:61:CA:1B:47:21:63:A1:56
            X509v3 Authority Key Identifier:
                keyid:A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:03:4b:d0:14:e3:ab:8e:9a:54:d0:71:80:f0:12:0d:26:f0:
         06:3e:dd:2a:7a:01:d5:7d:b9:98:22:b2:50:ce:ba:f5:c8:66:
         71:3b:b5:ab:04:77:94:c5:10:90:45:6f:45:f3:94:d1:47:ae:
         ad:37:1f:44:55:c2:db:37:f2:29:91:d9:9d:48:bb:4c:8a:d0:
         ba:75:43:06:5d:38:96:7f:e7:66:d7:da:27:24:9e:d2:30:0e:
         e3:85:cb:7a:f1:19:09:5b:2a:6d:64:6e:a4:c1:0a:aa:10:58:
         79:d0:d6:a9:b9:6a:5c:97:ef:51:c3:af:ff:c6:39:15:50:ee:
         90:4c:ef:59:f5:40:ce:97:91:6d:91:20:99:ea:14:6e:f1:8a:
         90:b1:43:6d:5f:5d:20:3d:f9:83:79:80:5f:46:36:77:a6:16:
         2e:05:c0:97:22:47:90:14:ff:c1:bb:0d:ec:51:9f:34:6d:b6:
         3e:56:91:5d:a9:66:4e:92:40:18:2f:64:89:ab:d8:16:3c:2a:
         06:3d:bb:d1:59:50:35:51:94:97:5f:92:63:b0:f2:e4:a5:c4:
         09:f9:12:01:fc:e3:71:f5:9c:06:09:fe:12:1f:b4:aa:e5:79:
         c4:e3:cd:38:60:82:f2:9c:7d:24:23:0f:1a:b2:c0:68:d3:4d:
         7f:02:e4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:34:21 2026 by rpki-client