Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File:                     oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier:          fmYH1JUGrB6f7WmQp3CnmT1sSXiLD1U1UM8O/YoakXg=
Subject key identifier:   7E:9D:F7:94:8B:FE:2E:37:94:96:98:9A:FA:6D:41:42:0A:E9:02:CD
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer:       /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial:       01A0C17B2CBDB0EC9EC24D529B33BC05DCC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number:          1445
Signing time:             Mon 21 Sep 2026 01:01:10 +0000
Manifest this update:     Mon 21 Sep 2026 01:01:10 +0000
Manifest next update:     Tue 22 Sep 2026 01:01:10 +0000
Files and hashes:         1: 0an2pQXOSUa9Qv0CDLezuYXP9Rc.roa (hash: GI3HMCo+UnX0/WFi5FDffbeewol6/ny0qWi9o7/s4mw=)
                          2: 3-zjNQeLr2VYnGvtAQl3wPrAttQ.roa (hash: oZEc3kU6X6afeD3VVmtRDKKInN6hBgwdLqV0FrQL9OA=)
                          3: 3xEx3bVGfXIchqPcHOE-UCr11f0.roa (hash: y+CVyDs3ZBJgnuFTk7NR2y3nV9NJmzoB4Ik1Ns4joJs=)
                          4: U8YrDUVn3egAnNyXxX_1fs7ypak.roa (hash: 0J1ye72rXLmhonZZf0ebjERiurn0AgXIl7ABqMnbTn0=)
                          5: gr24W9hYxDP-t_iDnbRQ3OZdbjk.roa (hash: 3hVp+1R1qAZlY2bc8T6diQXm1af3Uw7Bq4eqKsz2fRA=)
                          6: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: XsOzZDXAShGvQ2CvTewS3XsA6FkPDuz+nLpHrzV9oTg=)
                          7: sA9dK_96uoFn9OzLmWPj0jDqoGk.roa (hash: qjwTSEU6zfUdrsc6+xbvb6xBiHxiA+zK04XvFe2R5m8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:7b:2c:bd:b0:ec:9e:c2:4d:52:9b:33:bc:05:dc:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
        Validity
            Not Before: Sep 21 01:01:10 2026 GMT
            Not After : Sep 22 01:01:10 2026 GMT
        Subject: CN=7e9df7948bfe2e379496989afa6d41420ae902cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7f:cc:bd:fa:57:c1:fb:78:a4:4d:04:3b:d9:
                    a7:28:cb:cf:aa:04:c7:16:73:90:97:ad:3f:a4:7c:
                    61:d4:b2:ec:07:6d:e7:27:1b:3b:c8:13:0b:3a:db:
                    49:91:de:f0:74:24:1f:b8:63:d9:0e:33:30:b1:ef:
                    32:d1:86:07:c3:48:cb:35:66:c5:19:88:58:d8:f0:
                    92:6f:7c:51:39:50:1b:cb:26:26:1d:f4:bb:24:f3:
                    fb:c6:80:cc:4e:77:51:d7:95:e8:1c:9b:ef:5a:f7:
                    e5:3d:c1:07:f0:10:f3:0e:4b:1e:54:7f:39:ad:54:
                    a0:57:63:c9:85:e8:69:e1:aa:b8:47:5d:1c:cc:18:
                    8b:f4:54:4d:f5:24:3d:c8:4d:b0:12:54:d7:c9:d4:
                    20:3e:0a:7e:ae:ef:23:32:89:c1:b6:41:bc:db:6e:
                    c8:52:f4:f7:4b:84:3f:14:ee:17:19:4c:f6:dc:25:
                    54:f5:c4:4e:b1:80:89:a1:68:af:f3:d9:ac:d6:09:
                    8d:d5:33:d1:9d:24:db:78:ae:8b:d4:2a:d1:37:6f:
                    db:b8:fb:de:25:59:7e:57:61:ce:37:e1:71:3c:ff:
                    dd:69:51:06:f1:d4:d1:69:43:7d:15:b9:93:9b:03:
                    51:f9:e2:27:eb:bd:cc:61:2e:df:6d:93:23:1c:8e:
                    86:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9D:F7:94:8B:FE:2E:37:94:96:98:9A:FA:6D:41:42:0A:E9:02:CD
            X509v3 Authority Key Identifier:
                keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c5:f9:b2:67:ed:51:6e:60:90:d9:4c:b7:a2:c3:70:50:f6:
         d4:a3:be:cb:a3:41:37:8e:91:d0:d5:3e:e5:35:e3:7a:ac:50:
         02:33:24:81:16:84:fb:8a:8b:33:17:d7:7e:e8:19:25:e9:d3:
         c4:11:21:cc:c2:b7:f5:47:d3:21:0f:95:e9:52:a2:6b:1f:45:
         6a:9b:38:ff:e4:55:b1:19:3b:f4:8a:f2:6c:32:f7:88:a8:a5:
         95:16:30:fa:16:c6:3e:fd:38:da:3a:aa:64:0c:b7:b3:41:f4:
         53:68:4d:d4:8f:08:c3:09:51:b2:89:00:a6:63:53:73:fd:ef:
         d5:96:06:0f:c3:35:7b:52:27:4a:ec:ad:7a:69:72:57:a9:41:
         8a:85:37:58:31:f2:cb:65:cb:1c:a5:62:31:dd:c1:c0:88:40:
         d9:5c:a0:c5:85:44:2b:1f:3a:ef:69:b6:4a:89:43:93:8f:d9:
         5a:a5:24:83:34:a4:41:cd:2d:b1:ad:7b:2b:94:43:77:da:5c:
         9a:5f:b0:8f:5d:a0:e7:6c:d5:2c:72:e7:a0:5a:92:3d:46:19:
         41:99:58:8c:55:09:ec:da:f8:72:98:fc:40:d5:12:e8:50:20:
         8a:ed:20:47:4e:66:7c:ea:3b:e7:b3:7d:7b:b3:f4:c8:48:5b:
         4c:0c:b7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:06:12 2026 by rpki-client