Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
File:                     OXMtzQw1QmFE-fAmdUF5366-iVg.mft (raw, json)
Hash identifier:          LKCdxtMwzc+EY6/WVAZuSqqeiKthkhhpd6ICWrgHyzY=
Subject key identifier:   BB:92:B0:3C:A0:95:B3:87:12:CD:00:2C:1B:F9:6D:65:E3:02:76:D7
Authority key identifier: 39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58
Certificate issuer:       /CN=39732dcd0c35426144f9f026754179dfaebe8958
Certificate serial:       01A13C6E9EDAD160C945322C1F2288B65CCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
Manifest number:          1A95
Signing time:             Wed 14 Oct 2026 22:00:44 +0000
Manifest this update:     Wed 14 Oct 2026 22:00:44 +0000
Manifest next update:     Thu 15 Oct 2026 22:00:44 +0000
Files and hashes:         1: 58FQk9XlWFWt_nTgS_BZ-o3ufG8.roa (hash: HV8V9oTjMmtSDQrOPyii7uMO61tXElSbpadVB9OFkKU=)
                          2: OXMtzQw1QmFE-fAmdUF5366-iVg.crl (hash: dB/cxaZndhO9UQMzf0ed3uCnZezG2A4YrR6s+z2tsuM=)
                          3: alsVPKZrpQmUXj0uEcZT1N8yiVg.roa (hash: 09uKm4BmAwWDMsqvYSjsTw7MlQ2Dn7dIn/6Gf+Scpew=)
                          4: ts8WeGjGg3wwHGhPi2mxnwkcFTw.roa (hash: xg5lwYc2/XUF5liNH+ui3OtMGbwyGCJPDg20ByKgo34=)
                          5: zGS1iGBGVdelcYyC8IZVLuo4YF8.roa (hash: xNhCCvgxABfH6yRt+p+v0793m+1n0z/VA8lzriBuOf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 22:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:6e:9e:da:d1:60:c9:45:32:2c:1f:22:88:b6:5c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39732dcd0c35426144f9f026754179dfaebe8958
        Validity
            Not Before: Oct 14 22:00:44 2026 GMT
            Not After : Oct 15 22:00:44 2026 GMT
        Subject: CN=bb92b03ca095b38712cd002c1bf96d65e30276d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f3:00:95:7d:76:7d:d6:3f:d2:7b:ed:06:1c:
                    ac:7c:95:24:e0:db:62:ea:55:3a:31:80:c5:0a:04:
                    37:88:e2:ea:f0:6f:f4:ef:c8:f2:a2:ad:57:98:6a:
                    31:88:a9:02:7c:90:78:89:15:73:23:fc:78:94:9d:
                    e2:9b:1f:f1:99:94:b2:40:88:9f:ce:f1:3a:58:ec:
                    a3:f6:e7:e4:7e:d9:03:2e:8c:6b:3f:3a:f2:30:5f:
                    07:a3:12:86:d9:d9:00:b1:e3:a6:ea:17:f5:d7:9f:
                    ec:8b:80:10:86:50:ef:9d:fb:1a:f8:cb:36:05:15:
                    7d:55:61:bf:eb:76:c7:98:a6:75:1f:c1:2b:79:14:
                    74:39:43:8f:89:52:6c:e0:d0:ea:76:4a:4a:5f:0b:
                    33:fb:36:c1:1e:59:54:50:87:12:9b:08:1b:59:16:
                    01:bc:b6:4d:39:cd:86:34:99:96:2c:1e:b5:53:e5:
                    9d:83:c6:bb:4d:ab:12:e0:6f:14:4b:d2:c6:ee:f5:
                    cf:32:33:3f:93:be:3c:c9:40:b4:0b:3d:f0:68:73:
                    40:dd:b1:9b:f1:13:ad:f6:46:98:c1:72:81:b9:ad:
                    d8:51:a8:91:ce:e7:6c:ef:14:63:ab:d1:a8:36:7c:
                    6d:d1:6a:e9:c6:e1:ca:3d:89:d1:5d:bc:79:b7:bf:
                    db:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:92:B0:3C:A0:95:B3:87:12:CD:00:2C:1B:F9:6D:65:E3:02:76:D7
            X509v3 Authority Key Identifier:
                keyid:39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:24:e0:be:12:75:63:14:81:ea:3c:d4:d9:8f:fc:f2:44:b5:
         18:2e:a3:95:1c:56:1d:68:7d:00:ec:4f:55:42:97:40:d9:84:
         e5:81:80:f5:b4:6d:81:1d:e1:41:03:7d:bf:6d:9f:53:44:92:
         e4:23:96:d8:2b:78:75:84:69:14:87:5a:ff:d7:54:11:cf:ab:
         bb:74:fa:48:65:3b:ea:ce:df:09:1d:96:e8:97:32:31:a7:fe:
         6d:59:cf:c2:5a:4c:0c:28:9b:a5:7a:78:23:2d:b3:44:c5:b5:
         5c:57:4c:d9:56:03:2f:0f:b3:69:b1:f7:5c:e1:7f:e7:73:12:
         f4:99:e0:e8:34:fd:fc:32:cf:16:7d:10:2c:a5:80:fa:e6:cd:
         4f:22:0a:4f:ae:19:bf:46:f4:97:06:5d:b7:19:88:4c:49:83:
         1b:a9:99:b5:68:89:ba:11:2f:e2:e1:63:1b:c5:11:1e:88:42:
         4a:60:e5:8d:64:42:7b:d2:33:4f:94:e1:90:6c:46:3a:fd:c8:
         1a:e7:68:42:7c:6b:6e:e1:65:27:69:c2:98:a5:39:40:29:e6:
         f3:41:01:72:74:ed:9e:05:06:9d:86:0d:54:60:87:f3:47:66:
         b9:2a:3f:53:15:8a:30:2e:a9:92:b5:e6:05:97:56:a3:e6:e7:
         7b:43:56:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:04:56 2026 by rpki-client