Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File:                     oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier:          SKrzfSeNBOApqiLoFK+uTuNeCzRJk/zMslEtzGhOw8c=
Subject key identifier:   D6:B0:9A:AC:F4:71:F2:FC:F1:0B:D2:4C:D3:7C:91:65:8E:09:E8:AD
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer:       /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial:       01A0C3695DC8350F84CA5979BEABC499138B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number:          1446
Signing time:             Mon 21 Sep 2026 10:00:57 +0000
Manifest this update:     Mon 21 Sep 2026 10:00:57 +0000
Manifest next update:     Tue 22 Sep 2026 10:00:57 +0000
Files and hashes:         1: 0an2pQXOSUa9Qv0CDLezuYXP9Rc.roa (hash: GI3HMCo+UnX0/WFi5FDffbeewol6/ny0qWi9o7/s4mw=)
                          2: 3-zjNQeLr2VYnGvtAQl3wPrAttQ.roa (hash: oZEc3kU6X6afeD3VVmtRDKKInN6hBgwdLqV0FrQL9OA=)
                          3: 3xEx3bVGfXIchqPcHOE-UCr11f0.roa (hash: y+CVyDs3ZBJgnuFTk7NR2y3nV9NJmzoB4Ik1Ns4joJs=)
                          4: U8YrDUVn3egAnNyXxX_1fs7ypak.roa (hash: 0J1ye72rXLmhonZZf0ebjERiurn0AgXIl7ABqMnbTn0=)
                          5: gr24W9hYxDP-t_iDnbRQ3OZdbjk.roa (hash: 3hVp+1R1qAZlY2bc8T6diQXm1af3Uw7Bq4eqKsz2fRA=)
                          6: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: 99d2xF37iiSMuu1kBzoPv1/Uyiy5eC8zW3tLXAtqroI=)
                          7: sA9dK_96uoFn9OzLmWPj0jDqoGk.roa (hash: qjwTSEU6zfUdrsc6+xbvb6xBiHxiA+zK04XvFe2R5m8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:69:5d:c8:35:0f:84:ca:59:79:be:ab:c4:99:13:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
        Validity
            Not Before: Sep 21 10:00:57 2026 GMT
            Not After : Sep 22 10:00:57 2026 GMT
        Subject: CN=d6b09aacf471f2fcf10bd24cd37c91658e09e8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:71:ef:87:b9:fc:23:67:32:cf:19:9d:11:
                    03:12:5b:59:02:c1:cc:da:07:aa:1d:ed:7a:3c:dc:
                    f9:07:a8:61:5b:8e:fb:df:60:e6:ac:4e:e9:4e:a1:
                    56:35:d5:66:6b:cd:66:7d:73:a8:a5:fa:db:fa:47:
                    93:99:08:eb:2b:17:ec:bb:9c:ef:77:90:fb:0b:2d:
                    2c:ce:62:7a:d1:e3:78:d3:f8:99:f5:ee:b7:ce:6b:
                    25:12:07:eb:53:ab:7d:1a:b5:61:9c:27:42:0f:97:
                    86:ed:0c:df:37:88:26:47:5d:03:8d:f8:10:ae:60:
                    15:29:4d:e7:f3:59:ec:91:43:03:b1:b9:00:94:82:
                    4e:5a:d5:fb:37:3a:c9:46:e8:cf:c0:d3:fc:8e:a1:
                    20:c8:9c:8d:85:a6:99:c7:76:d8:a8:e5:7c:4e:de:
                    02:1e:af:48:ff:7f:f1:d3:f0:e9:b0:6b:8c:ec:01:
                    f3:80:5c:6d:2b:db:08:52:34:a3:6c:d2:75:eb:54:
                    2d:ac:57:33:8e:88:af:3c:7c:02:64:17:2f:42:32:
                    5b:ef:b7:09:87:18:4e:c2:87:47:39:c1:74:35:84:
                    53:f2:44:73:02:9f:a4:21:73:62:08:6c:ca:1b:c3:
                    c7:13:a0:04:02:81:bc:a4:af:a4:eb:51:7d:87:9d:
                    43:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B0:9A:AC:F4:71:F2:FC:F1:0B:D2:4C:D3:7C:91:65:8E:09:E8:AD
            X509v3 Authority Key Identifier:
                keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:08:92:9c:64:bf:f9:a8:be:28:98:23:81:8e:40:ae:2c:05:
         2f:fa:3a:18:94:24:b5:f7:ff:80:18:fb:14:44:b5:75:4d:15:
         3f:40:8e:ca:76:3b:87:5f:ce:ea:e4:94:63:92:05:3b:32:39:
         d6:a3:73:04:36:1e:9a:58:c2:bd:c3:9d:fe:96:1f:c8:99:c4:
         18:79:4c:21:ce:36:9b:da:5b:e4:03:98:80:3b:7e:19:ae:52:
         f5:14:76:b8:6e:0d:7f:be:89:2a:ce:91:e1:4b:96:79:c5:12:
         ae:1a:17:43:63:83:70:60:cb:79:92:dc:46:37:c3:0d:38:0f:
         64:31:af:8e:76:96:41:bd:4e:ce:c2:8c:14:1d:eb:e8:fc:e0:
         50:6f:6b:a9:85:58:cf:81:75:83:b6:94:c1:6c:f1:0d:42:a4:
         74:fe:ed:d4:52:7f:cc:07:10:a9:6c:89:c1:06:b7:49:c0:64:
         d2:43:74:a6:b6:b4:1c:20:37:d4:df:77:58:1e:76:d9:32:2f:
         73:e5:ae:59:4f:b7:3b:04:ff:2d:e7:30:7c:0c:19:3e:f1:e2:
         93:c4:5b:b1:cd:86:30:be:a8:ce:11:8e:e7:6e:cb:51:3f:7c:
         c7:86:57:67:af:30:c4:3e:f5:9e:3b:39:0e:8a:ed:88:b8:9f:
         1d:6d:bc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:54:16 2026 by rpki-client