Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
File:                     OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json)
Hash identifier:          dPXm+S3fxZ63a4OyrMPpiQC4AgxbWJfrOPBQnDCj41I=
Subject key identifier:   D6:C5:A2:60:DF:FF:4E:43:7C:DF:83:B3:03:92:31:A5:E5:09:00:A0
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Certificate issuer:       /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial:       01A0DB042BD4ACA5B0E588A419D323B1E226
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
Manifest number:          0AF2
Signing time:             Sat 26 Sep 2026 00:01:18 +0000
Manifest this update:     Sat 26 Sep 2026 00:01:18 +0000
Manifest next update:     Sun 27 Sep 2026 00:01:18 +0000
Files and hashes:         1: 6QjQA0_fqdIryNhtjxIfR8HzBm8.roa (hash: BdP8cS5Jr2HaqgKC6lWTWfU5V8jliQKRlVrIRV0QG54=)
                          2: J1bJb5PR-6WCKXzaxKwF8b7G6KM.roa (hash: aPn06S/csR4hGjZC+O1jL0hLLbq1h25Fd+BEJPi6jnM=)
                          3: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: LIX3Zt6T2Vtv/PWKeXyP/RqtaIT3am0Cx9vtxbHhjL4=)
                          4: XGqRnJ4CofJECXJzwAlV7SJh4V8.roa (hash: XEI0xhnT+pV8GiFR8nyVjb+Jp2qqtfyALCvoz0dFIWQ=)
                          5: egvTStfdqsgaJQHUlI4Gx-druNs.roa (hash: 4U3wHEEQUhulNGL0yqru9oCFOlljnEnQXHB+fB5oMsg=)
                          6: y2R7XAH-3-kA5U74hXHHO_c11dI.roa (hash: gWO/uuYDyiGKuAWY4EaQAg3d79DNvwcV+IkMjIH1jbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:04:2b:d4:ac:a5:b0:e5:88:a4:19:d3:23:b1:e2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
        Validity
            Not Before: Sep 26 00:01:18 2026 GMT
            Not After : Sep 27 00:01:18 2026 GMT
        Subject: CN=d6c5a260dfff4e437cdf83b3039231a5e50900a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:64:cc:20:cf:83:bd:62:b2:f3:ac:46:4e:d2:
                    d1:1e:6a:5c:5e:85:17:1d:88:4c:ec:8e:67:d2:58:
                    79:f9:15:2f:ee:bf:85:df:8a:f5:c4:c7:af:84:1f:
                    70:3b:6a:70:9d:0f:5e:83:35:b6:d4:25:96:7f:89:
                    9c:a0:55:4a:11:9a:e9:42:73:82:eb:c2:85:cd:1c:
                    46:0f:de:54:d2:2f:3c:69:24:60:c0:e6:87:6b:86:
                    31:87:a1:f2:0e:5a:34:0d:0e:77:73:9c:44:56:ce:
                    43:d9:a5:dc:55:69:65:80:04:36:ef:21:7f:12:9a:
                    a6:0e:f4:a2:37:f0:1a:99:42:3e:54:78:67:ae:c4:
                    d8:74:97:f5:15:bb:78:b6:ea:e3:02:9a:4d:8a:63:
                    e2:fc:05:63:5e:f9:db:f8:c9:dc:b4:d7:63:7c:0c:
                    e5:eb:93:c9:be:20:fb:24:23:d5:ef:cd:5e:6f:7b:
                    2c:cf:e3:7b:ae:22:09:19:09:bd:61:69:be:de:a6:
                    6d:df:50:5c:66:17:00:67:a1:ba:84:de:79:3f:76:
                    76:5e:be:8d:d9:50:bd:8f:a6:c7:dd:cb:41:7e:ef:
                    73:f1:7c:bc:3f:af:74:92:65:61:4b:55:4f:6e:e2:
                    fc:51:08:cb:ce:14:4d:c5:c2:a9:59:3c:fa:49:3c:
                    84:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C5:A2:60:DF:FF:4E:43:7C:DF:83:B3:03:92:31:A5:E5:09:00:A0
            X509v3 Authority Key Identifier:
                keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:56:63:4a:a4:0d:bf:1f:db:18:90:5e:00:95:4b:3b:84:30:
         da:e3:52:84:00:7b:3f:f7:68:36:1c:3d:71:28:75:d6:64:bd:
         28:e2:31:b5:39:f2:7c:16:78:a6:b4:89:46:de:f7:a8:a2:46:
         25:0f:87:80:37:bf:72:5e:9d:7e:a9:47:94:76:78:dc:f6:10:
         a3:ec:14:8b:34:da:9d:44:66:42:07:8b:a4:99:ce:97:9c:c5:
         a3:c8:98:6d:e7:1c:6b:fe:4f:32:bd:16:23:91:3c:31:27:15:
         05:a5:76:aa:ad:bb:c7:f3:13:ee:30:cf:4b:67:0f:f9:88:45:
         28:b7:64:4f:4b:87:aa:15:02:04:63:ad:9a:1f:2d:1b:b5:4c:
         c0:3e:d3:8a:7f:e7:59:eb:07:67:b2:a2:29:81:1a:cf:63:f7:
         35:f0:f4:25:fe:98:c3:21:f9:c3:3c:6e:45:ab:f6:af:d4:2e:
         2d:ea:23:ad:42:81:1f:ad:71:c2:0a:f4:d1:c9:58:b2:1d:44:
         45:c1:fa:67:e9:23:ba:88:4d:5a:62:10:1c:1b:f8:40:5e:be:
         77:42:3f:4d:6a:67:96:8d:e6:ca:f1:52:db:ce:12:55:00:8c:
         05:18:0b:4d:a1:43:5b:b4:7c:ab:41:1c:cb:cc:a8:4b:a3:48:
         9b:c3:d3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:28:43 2026 by rpki-client