Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File:                     oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier:          XCcAjFZ+fhfVExtkODSbnWBErng1lsiPwvjECIPDV80=
Subject key identifier:   D2:38:07:DE:7D:31:F8:51:A1:0B:E7:5B:ED:0F:C6:CE:8B:59:24:D9
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer:       /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial:       01A0CB598738662A3ACC4983B3CA356002CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number:          1A6F
Signing time:             Tue 22 Sep 2026 23:00:37 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:37 +0000
Manifest next update:     Wed 23 Sep 2026 23:00:37 +0000
Files and hashes:         1: 0iskxAKnPV1t3vVtL0ZxiR5NqDo.asa (hash: dTnlTRCOpAxkRq/1/Z4AQAvbwk3FcS0Wqrww9bcRVV4=)
                          2: mfvEjWb3rQFbj32_BBadoAv_Y0s.roa (hash: FGRbYmzgAXrFUwzG+mMOatKnvNqH9Ov9gtrQRgDuAmE=)
                          3: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: uno9kPqqrouerZN3/EfYusCYQfEOSwILTymI3/+v/i4=)
                          4: wvfBOreCybbt9afiUMU5R2NBdJQ.asa (hash: IVFtZ0X879D2RM6GVRG/lhLBfD0N96F/6jJoFE+cRr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:87:38:66:2a:3a:cc:49:83:b3:ca:35:60:02:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
        Validity
            Not Before: Sep 22 23:00:37 2026 GMT
            Not After : Sep 23 23:00:37 2026 GMT
        Subject: CN=d23807de7d31f851a10be75bed0fc6ce8b5924d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e7:16:f5:a9:5c:e0:98:7b:75:2f:4a:d2:e5:
                    99:2a:d9:b6:50:6e:32:87:57:8d:80:ae:2e:ec:a1:
                    63:d3:17:74:27:d5:b9:a9:70:d8:73:e9:36:f5:be:
                    e2:b3:ae:8e:3e:cd:69:3f:d0:9c:28:92:eb:2a:15:
                    e1:69:5e:4b:50:93:38:47:f1:e9:3d:b8:e2:87:28:
                    b8:7b:94:0e:dd:d4:9c:6a:7c:e6:22:47:27:c5:51:
                    92:98:37:60:f3:6c:4d:4e:fd:d4:bb:b5:20:ed:a8:
                    e3:08:73:6a:4c:45:35:cf:86:cf:9c:d3:68:46:7e:
                    72:2c:35:2f:66:62:9b:3c:2c:c4:12:f4:52:8a:b7:
                    63:85:fd:6c:4a:59:df:e5:c8:89:9b:24:53:be:94:
                    f2:f2:81:d3:55:7d:59:0b:74:a1:ba:9f:ab:5e:5e:
                    bd:1f:11:91:61:67:ff:9b:4a:a4:67:8a:c9:ab:89:
                    ae:a2:12:35:e6:53:67:8a:7d:7d:61:57:f6:c8:12:
                    94:e2:69:53:7b:dc:98:bd:57:af:6c:41:1a:88:ff:
                    04:fc:d5:e5:37:a5:08:0d:ef:01:27:3b:27:6f:02:
                    a2:9f:7d:bf:0d:c4:39:ca:fe:27:6f:c2:86:e9:b9:
                    2a:03:cb:e2:e3:08:73:47:ec:88:7b:b3:e8:e5:f4:
                    7e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:38:07:DE:7D:31:F8:51:A1:0B:E7:5B:ED:0F:C6:CE:8B:59:24:D9
            X509v3 Authority Key Identifier:
                keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:82:2a:92:a8:73:9e:56:c4:7f:d7:87:bc:21:44:9f:00:4a:
         66:a4:15:3c:42:a9:82:92:20:7a:11:8d:42:3d:64:df:a6:51:
         c7:f1:31:49:8f:fb:2c:1f:41:30:31:cb:28:47:c3:b4:dd:67:
         0e:48:27:9f:28:03:08:da:2b:3a:55:61:98:78:ee:cf:dd:e6:
         6b:5f:8e:26:5a:39:d7:5e:1f:e4:c1:6e:5b:c9:2e:86:38:d8:
         fa:39:62:04:5c:0b:bf:52:cb:46:4d:cf:45:3d:48:44:28:2f:
         f0:bd:61:a5:eb:99:eb:39:f0:83:6d:79:45:47:68:fe:a2:dd:
         93:89:7d:a3:d1:bf:7c:ee:f5:08:32:2a:a0:6c:3a:9e:4a:c4:
         ab:0f:c5:bf:26:9b:84:82:74:7d:ee:74:bf:a2:15:e6:ec:b1:
         cf:15:6a:5a:6e:20:8f:da:d1:af:3e:ab:f5:05:73:3f:c0:52:
         bf:3c:87:7e:12:c9:80:f4:fc:23:5e:79:2d:32:43:b2:2b:41:
         f6:89:67:15:d0:ca:42:b1:15:e5:12:91:4a:ce:05:87:b4:9e:
         b3:36:ad:69:e6:2c:bc:e6:c5:c6:f2:10:2d:9b:75:a8:52:80:
         54:22:70:cd:08:10:5c:50:20:07:94:70:9c:98:cd:e5:15:79:
         0e:e6:33:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:58:08 2026 by rpki-client