Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File:                     OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier:          Av8Hjg+qxtJh35J85TT9+5aMTXc8CF6cypu/nLyF1og=
Subject key identifier:   FA:1B:67:DA:5F:AA:81:DC:07:53:9A:8A:27:EB:C0:16:FB:BA:AA:BD
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer:       /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial:       01A0D2DE7ED3D4C816F4BCB5E2557CE16A7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number:          06EF
Signing time:             Thu 24 Sep 2026 10:03:11 +0000
Manifest this update:     Thu 24 Sep 2026 10:03:11 +0000
Manifest next update:     Fri 25 Sep 2026 10:03:11 +0000
Files and hashes:         1: 5kdfSFfIXpTRDKj7nU9dTnk_a7Q.roa (hash: Qud0EaTIzAf2oGbBUwUkaVwSjph89PDDdo19BAvVZGk=)
                          2: IxT2p1USvkgGTKI4jIEAGlYZs-c.roa (hash: RpYym6oxELeUAn+F/Xd8p5iioExynMd0f+38UAxEIvY=)
                          3: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: 5hhn30mYTxvZxVUWLVLeghit9C9ck4hSm+cjIW1Hz1E=)
                          4: oVKcWW4duCpkxQJ1oP8E7IC2AzU.roa (hash: myh6PixZ04dXKVpBJ7oXGMj9UcP3arkRwKqy/fuyKlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 10:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:de:7e:d3:d4:c8:16:f4:bc:b5:e2:55:7c:e1:6a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
        Validity
            Not Before: Sep 24 10:03:11 2026 GMT
            Not After : Sep 25 10:03:11 2026 GMT
        Subject: CN=fa1b67da5faa81dc07539a8a27ebc016fbbaaabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:22:e9:4b:74:29:ba:a7:78:a4:2d:53:b4:53:
                    a0:18:66:60:e5:b5:98:83:9f:cc:ad:b9:01:a2:4e:
                    46:98:01:1a:cf:ff:04:ba:94:4e:c1:55:c9:b6:f5:
                    9e:ef:b4:e1:8f:57:0e:aa:0e:cd:c3:89:0b:2f:9a:
                    5c:5e:80:ef:b8:12:aa:fa:65:64:44:d5:b0:93:e2:
                    bc:1b:0a:c6:67:54:dc:82:1c:7d:0e:d8:e3:40:14:
                    59:7f:ca:fd:3f:8f:37:3e:45:f6:b3:a4:ef:6d:49:
                    d0:93:f4:ac:d4:51:ce:6e:c4:ff:2a:96:2d:49:ea:
                    a7:75:13:07:d1:f0:ef:55:78:8f:e1:6e:58:4e:86:
                    8b:4a:9c:36:6a:15:4a:d7:f5:ff:12:b1:af:0d:7d:
                    07:e0:73:cc:db:58:88:78:7c:36:fc:6e:d2:95:13:
                    fc:c0:e6:d2:80:8b:c9:60:a2:2f:8f:00:2c:b3:95:
                    15:ff:b7:7d:52:48:8e:22:fb:8e:81:8c:19:73:95:
                    42:5e:bc:ff:f6:fb:9d:ce:c1:f1:9d:fb:cb:cb:23:
                    de:4c:d2:b0:85:6c:6d:6d:51:b2:65:f3:15:e9:43:
                    0e:0a:b8:4e:38:ed:f1:ed:da:39:5f:83:65:9e:d4:
                    e2:5a:2a:c3:12:7d:e3:42:df:b7:0d:12:40:43:90:
                    a0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1B:67:DA:5F:AA:81:DC:07:53:9A:8A:27:EB:C0:16:FB:BA:AA:BD
            X509v3 Authority Key Identifier:
                keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:bf:7b:66:b9:bb:fb:53:4b:97:7a:21:85:cf:a0:34:25:eb:
         b4:bd:c4:1f:28:34:7f:b9:1b:18:3a:70:28:2f:c5:ab:76:d1:
         dd:4d:37:6e:63:48:94:2e:b5:8d:d4:c8:a8:95:89:5d:73:56:
         7d:1e:31:e9:c1:81:73:a1:3e:24:77:35:e3:06:6f:a4:87:a7:
         ae:ef:fb:d1:ac:e7:13:47:5d:4f:2e:97:09:c0:b4:ca:5f:b0:
         ef:a2:01:e3:f5:f7:71:d3:39:51:1c:44:23:39:a5:37:15:e0:
         a6:ca:0a:ea:71:cc:14:a6:ae:b7:25:b0:20:0d:cc:41:f7:52:
         7d:de:65:e5:5f:76:87:b6:5a:87:45:ca:ad:7b:31:9c:f5:08:
         1e:a1:1a:1e:c5:d5:24:73:6f:6e:0a:ec:ff:cb:eb:c8:a3:88:
         89:b5:6d:d5:8c:4e:bf:32:18:cd:16:85:87:af:7a:a2:5c:b4:
         67:a8:0d:01:fc:86:b9:bc:e6:09:b8:8b:97:f5:f6:6e:a2:1d:
         0f:62:ae:a7:c6:13:f2:da:6b:00:0d:85:94:9f:97:69:28:c0:
         a9:90:dc:3f:48:a6:3c:86:f3:8b:3a:64:b8:07:36:c5:23:a4:
         f8:81:79:fb:29:8f:c7:3e:a5:ac:f8:7a:9b:3f:dd:f1:8a:22:
         f2:71:6a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:08:15 2026 by rpki-client