Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
File:                     OEypWHqC_DdH9GngCUXZ1VhaNbI.mft (raw, json)
Hash identifier:          3Spg7w6gLcV44x281IRcTLwu5qba3X8MN8eGrgrhGgo=
Subject key identifier:   13:32:90:24:52:A8:01:D5:36:A2:17:05:4C:51:C4:FE:77:7A:A4:04
Authority key identifier: 38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
Certificate issuer:       /CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Certificate serial:       01A0D0ED98D214BAA17491F2D5066ECA1B78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
Manifest number:          06A9
Signing time:             Thu 24 Sep 2026 01:00:27 +0000
Manifest this update:     Thu 24 Sep 2026 01:00:27 +0000
Manifest next update:     Fri 25 Sep 2026 01:00:27 +0000
Files and hashes:         1: OEypWHqC_DdH9GngCUXZ1VhaNbI.crl (hash: yuKLryaHzMD1l5ONdK2f18Q5b3MUCNzdZfLN9k0Vnk8=)
                          2: m5e2ZDv7_-1udsvxigJbqqXmd_E.roa (hash: yOpoP5KeMEFEDYD+ejQW8hpR1s0gtVHvkYr8rcVTFC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ed:98:d2:14:ba:a1:74:91:f2:d5:06:6e:ca:1b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=384ca9587a82fc3747f469e00945d9d5585a35b2
        Validity
            Not Before: Sep 24 01:00:27 2026 GMT
            Not After : Sep 25 01:00:27 2026 GMT
        Subject: CN=1332902452a801d536a217054c51c4fe777aa404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4e:d7:64:fe:06:59:0e:3a:cc:f2:44:ff:62:
                    aa:63:b3:fe:e1:12:68:d4:53:ff:eb:75:dd:ff:c2:
                    e5:b7:35:21:2b:80:36:1c:ad:bf:37:2b:6e:b3:87:
                    39:17:e8:47:e5:42:36:32:d5:88:18:0c:fe:e2:a5:
                    d9:39:91:d1:05:96:53:c2:06:42:5b:b4:80:af:79:
                    78:eb:38:76:d2:2e:27:2b:92:8d:15:24:eb:e8:a4:
                    38:7c:25:d7:df:28:67:ba:0d:0e:91:73:3b:9e:f7:
                    4e:f1:79:99:85:b3:28:10:5b:29:f0:4b:5f:45:a7:
                    1c:11:d0:51:86:03:14:1f:0d:f2:19:17:6f:92:b7:
                    ed:fd:45:01:bb:34:6f:87:82:e5:7d:86:24:bd:20:
                    a5:0b:f2:00:79:ce:96:16:ba:e6:7f:b9:5f:91:ad:
                    65:7b:cf:7c:a6:a9:b2:81:c0:50:21:33:89:8f:c9:
                    ce:d8:be:65:74:d8:78:9f:9b:48:87:4f:8d:2a:05:
                    c9:b7:b4:fc:ab:5a:40:a0:fa:9d:c4:8c:6e:75:79:
                    8a:68:c1:46:00:0b:7e:d6:2e:72:cb:9d:68:80:7e:
                    9a:36:1b:b6:12:16:80:59:23:4b:64:1c:fb:ea:e1:
                    f6:79:b6:ef:60:bd:77:10:f9:4a:53:e4:d2:11:ed:
                    41:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:32:90:24:52:A8:01:D5:36:A2:17:05:4C:51:C4:FE:77:7A:A4:04
            X509v3 Authority Key Identifier:
                keyid:38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:cb:f9:2b:5a:01:68:5a:de:34:68:ab:14:42:68:20:23:d0:
         d6:86:39:6a:ba:4c:30:59:1e:27:eb:34:02:26:02:ac:9a:b9:
         f0:f8:f6:26:83:80:dc:94:3a:d9:f1:19:d6:b3:e8:37:bd:bb:
         8d:dc:de:59:ae:63:76:ec:1e:ee:b3:91:1c:a0:99:86:78:d3:
         d6:60:aa:56:c5:99:7c:54:58:6c:96:7f:d4:c2:b8:db:cc:a3:
         d6:a3:b5:e4:3a:d9:1c:4a:ce:3f:25:d0:89:9d:ad:d3:2e:58:
         81:9b:45:70:59:7c:39:39:d0:9d:95:98:36:22:14:c6:f5:4f:
         97:3e:e5:38:27:9a:bd:b4:e7:ef:c8:be:50:f8:bf:aa:25:be:
         e0:dd:25:98:bc:7f:8a:8f:1e:a5:4b:00:a1:5d:ca:77:a8:62:
         30:12:79:8e:10:72:95:65:e5:19:91:8e:60:b0:06:b3:77:f3:
         08:f0:c2:4b:76:b3:c4:5c:68:84:e4:db:a0:62:4e:09:07:25:
         cc:bc:b9:99:04:91:e5:90:2b:40:ec:ae:76:fc:b4:a5:75:85:
         58:95:2e:99:db:7d:e9:f9:32:ef:d2:59:c9:2d:de:82:03:bd:
         bc:bf:bb:21:32:bf:6f:c4:f7:04:ff:a4:9a:00:86:82:30:18:
         a7:2c:c7:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQ7ZjSFLqhdJHy1QZuyht4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NGNhOTU4N2E4MmZjMzc0N2Y0NjllMDA5NDVkOWQ1NTg1
YTM1YjIwHhcNMjYwOTI0MDEwMDI3WhcNMjYwOTI1MDEwMDI3WjAzMTEwLwYDVQQD
EygxMzMyOTAyNDUyYTgwMWQ1MzZhMjE3MDU0YzUxYzRmZTc3N2FhNDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0U7XZP4GWQ46zPJE/2KqY7P+4RJo
1FP/63Xd/8LltzUhK4A2HK2/Nytus4c5F+hH5UI2MtWIGAz+4qXZOZHRBZZTwgZC
W7SAr3l46zh20i4nK5KNFSTr6KQ4fCXX3yhnug0OkXM7nvdO8XmZhbMoEFsp8Etf
RaccEdBRhgMUHw3yGRdvkrft/UUBuzRvh4LlfYYkvSClC/IAec6WFrrmf7lfka1l
e898pqmygcBQITOJj8nO2L5ldNh4n5tIh0+NKgXJt7T8q1pAoPqdxIxudXmKaMFG
AAt+1i5yy51ogH6aNhu2EhaAWSNLZBz76uH2ebbvYL13EPlKU+TSEe1BSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMykCRSqAHVNqIXBUxRxP53eqQEMB8GA1UdIwQY
MBaAFDhMqVh6gvw3R/Rp4AlF2dVYWjWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9hMTk2NTQtYWRlYy00Mzk3LThlYjAt
MTdhZDJmMDFjMDA5LzEvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9hMTk2NTQtYWRlYy00Mzk3LThlYjAtMTdhZDJmMDFjMDA5
LzEvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdcv5K1oB
aFreNGirFEJoICPQ1oY5arpMMFkeJ+s0AiYCrJq58Pj2JoOA3JQ62fEZ1rPoN727
jdzeWa5jduwe7rORHKCZhnjT1mCqVsWZfFRYbJZ/1MK428yj1qO15DrZHErOPyXQ
iZ2t0y5YgZtFcFl8OTnQnZWYNiIUxvVPlz7lOCeavbTn78i+UPi/qiW+4N0lmLx/
io8epUsAoV3Kd6hiMBJ5jhBylWXlGZGOYLAGs3fzCPDCS3azxFxohOTboGJOCQcl
zLy5mQSR5ZArQOyudvy0pXWFWJUumdt96fky79JZyS3eggO9vL+7ITK/b8T3BP+k
mgCGgjAYpyzH5g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:07:54 2026 by rpki-client