Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/OIl8_L-BVlqAjUtnuY31WABYANo.mft
File:                     OIl8_L-BVlqAjUtnuY31WABYANo.mft (raw, json)
Hash identifier:          q2R3/1WobcjsoiPFpzBW9dBL7vCW3RVsujKgw8DhY0Y=
Subject key identifier:   20:8C:88:0C:84:2B:BD:1B:2C:47:6F:49:B4:5A:DC:37:34:B1:7A:9B
Authority key identifier: 38:89:7C:FC:BF:81:56:5A:80:8D:4B:67:B9:8D:F5:58:00:58:00:DA
Certificate issuer:       /CN=38897cfcbf81565a808d4b67b98df558005800da
Certificate serial:       01A1DE713BEEB3342406CEF20DDFA7565C76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OIl8_L-BVlqAjUtnuY31WABYANo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/OIl8_L-BVlqAjUtnuY31WABYANo.mft
Manifest number:          0171
Signing time:             Sun 15 Nov 2026 09:02:05 +0000
Manifest this update:     Sun 15 Nov 2026 09:02:05 +0000
Manifest next update:     Mon 16 Nov 2026 09:02:05 +0000
Files and hashes:         1: MCVWRVzWWh23JR1k0ZFtIhb-O8o.roa (hash: Uz7dL2QD3U+BgQc3xRHL1sRHyDeIXjwPHJszDd2zBx4=)
                          2: OIl8_L-BVlqAjUtnuY31WABYANo.crl (hash: UUVWdoD8t43DHJ+GBKkYVpfydBDAXOCZc8dseLkdgok=)
                          3: RzKXrfbd8Fwl-pMomxY2m5uB7m8.roa (hash: BqUy1h7hW/576C9Ws0RScRjw81x2XBVd04je2t9NNwk=)
                          4: vHnmsylX39m_JK07hnZ_hCD5Z34.roa (hash: Ke1X2Ykv5zFzvGKC+a00sWweDT8NAWBxkD6o6vcXF/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/OIl8_L-BVlqAjUtnuY31WABYANo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/OIl8_L-BVlqAjUtnuY31WABYANo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OIl8_L-BVlqAjUtnuY31WABYANo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:71:3b:ee:b3:34:24:06:ce:f2:0d:df:a7:56:5c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38897cfcbf81565a808d4b67b98df558005800da
        Validity
            Not Before: Nov 15 09:02:05 2026 GMT
            Not After : Nov 16 09:02:05 2026 GMT
        Subject: CN=208c880c842bbd1b2c476f49b45adc3734b17a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1b:27:8b:d8:33:5a:3c:3b:fb:97:70:27:aa:
                    8e:ae:9c:24:8a:20:31:11:c7:33:f0:24:2c:e5:f6:
                    c1:79:8b:c8:7a:dd:99:75:59:a9:e5:0a:86:93:d5:
                    96:f7:04:ae:c6:86:56:32:b0:5d:45:f7:76:f9:c9:
                    de:9f:65:53:e8:8d:99:c5:b9:9b:84:15:e1:74:e2:
                    26:cd:d3:1a:79:be:39:aa:ea:df:41:9f:0a:93:5c:
                    cd:7e:20:77:36:f1:4c:6f:42:29:c8:d1:be:e9:20:
                    88:a1:cf:4e:b2:eb:3e:94:12:71:a2:64:55:f7:9d:
                    94:cf:57:62:13:21:80:91:b8:ff:95:64:d6:38:e8:
                    41:2a:8d:f2:b4:a5:99:fb:3d:ba:62:4e:24:3c:67:
                    af:7b:6b:a7:63:65:1d:f6:21:5c:e3:af:f6:e4:d3:
                    f4:82:68:1e:a2:92:52:60:c6:ec:90:dc:b8:9f:e3:
                    24:31:07:7c:20:bc:27:06:3d:e3:c2:ce:b1:40:ff:
                    cd:96:87:8c:dc:27:47:8a:ac:62:d1:1f:ab:5b:17:
                    d4:5f:3e:ef:30:15:05:c3:13:16:27:c2:a9:2d:30:
                    68:31:af:44:b7:80:43:e6:4a:2b:4f:c2:0e:19:58:
                    cb:c3:6b:3c:e6:d3:a9:64:b0:4a:be:0a:22:19:e2:
                    7f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8C:88:0C:84:2B:BD:1B:2C:47:6F:49:B4:5A:DC:37:34:B1:7A:9B
            X509v3 Authority Key Identifier:
                keyid:38:89:7C:FC:BF:81:56:5A:80:8D:4B:67:B9:8D:F5:58:00:58:00:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIl8_L-BVlqAjUtnuY31WABYANo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/OIl8_L-BVlqAjUtnuY31WABYANo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/OIl8_L-BVlqAjUtnuY31WABYANo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:9a:65:a0:64:88:1f:91:bb:90:1e:56:fe:b5:c8:32:ab:5f:
         c8:71:12:a2:8f:1d:15:49:7f:10:14:cd:db:c6:63:e5:2f:22:
         c3:fe:98:01:89:70:f3:bf:ad:05:35:63:19:78:f6:4b:a8:58:
         54:5b:ff:5b:7b:44:be:ea:4f:18:79:9a:92:3e:34:ad:40:35:
         aa:25:ea:7f:aa:c7:51:d3:4f:c8:2c:75:a2:65:c7:07:12:35:
         97:4f:ad:1f:63:dc:8f:a8:99:ae:6d:eb:ff:9a:f6:a1:95:93:
         5b:7a:3c:be:35:a5:be:18:92:7b:b4:10:73:a4:c7:4b:f8:bd:
         30:b1:8e:bb:60:12:52:f9:e8:e6:6c:5f:15:17:ff:54:53:9c:
         ab:43:37:30:2c:96:f8:c8:5e:89:ec:ca:05:87:70:80:6c:9a:
         6d:e3:5c:9b:7f:9e:b9:d0:b8:14:ca:d4:99:8a:51:43:fe:d1:
         8d:48:77:ec:24:a5:da:f5:b8:0c:03:fc:a9:ab:26:e4:ce:e3:
         be:53:1e:41:6b:fc:f0:b4:04:a6:97:88:4d:af:b4:39:5e:56:
         fa:7b:6d:25:30:a2:5c:f1:84:eb:79:29:32:87:e8:5b:c2:a1:
         2a:ed:a2:e1:18:05:6c:4d:46:ce:43:a3:d0:d5:d3:64:8e:8e:
         9b:05:8e:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecTvuszQkBs7yDd+nVlx2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ODk3Y2ZjYmY4MTU2NWE4MDhkNGI2N2I5OGRmNTU4MDA1
ODAwZGEwHhcNMjYxMTE1MDkwMjA1WhcNMjYxMTE2MDkwMjA1WjAzMTEwLwYDVQQD
EygyMDhjODgwYzg0MmJiZDFiMmM0NzZmNDliNDVhZGMzNzM0YjE3YTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxsni9gzWjw7+5dwJ6qOrpwkiiAx
Eccz8CQs5fbBeYvIet2ZdVmp5QqGk9WW9wSuxoZWMrBdRfd2+cnen2VT6I2Zxbmb
hBXhdOImzdMaeb45qurfQZ8Kk1zNfiB3NvFMb0IpyNG+6SCIoc9Osus+lBJxomRV
952Uz1diEyGAkbj/lWTWOOhBKo3ytKWZ+z26Yk4kPGeve2unY2Ud9iFc46/25NP0
gmgeopJSYMbskNy4n+MkMQd8ILwnBj3jws6xQP/NloeM3CdHiqxi0R+rWxfUXz7v
MBUFwxMWJ8KpLTBoMa9Et4BD5korT8IOGVjLw2s85tOpZLBKvgoiGeJ/ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCMiAyEK70bLEdvSbRa3Dc0sXqbMB8GA1UdIwQY
MBaAFDiJfPy/gVZagI1LZ7mN9VgAWADaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0lsOF9MLUJWbHFBalV0bnVZMzFXQUJZQU5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xNDRjMTgtOWU5ZS00ZTgxLTliYmIt
ZmE2YTE4NzViOTQ3LzEvT0lsOF9MLUJWbHFBalV0bnVZMzFXQUJZQU5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8xNDRjMTgtOWU5ZS00ZTgxLTliYmItZmE2YTE4NzViOTQ3
LzEvT0lsOF9MLUJWbHFBalV0bnVZMzFXQUJZQU5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJploGSI
H5G7kB5W/rXIMqtfyHESoo8dFUl/EBTN28Zj5S8iw/6YAYlw87+tBTVjGXj2S6hY
VFv/W3tEvupPGHmakj40rUA1qiXqf6rHUdNPyCx1omXHBxI1l0+tH2Pcj6iZrm3r
/5r2oZWTW3o8vjWlvhiSe7QQc6THS/i9MLGOu2ASUvno5mxfFRf/VFOcq0M3MCyW
+MheiezKBYdwgGyabeNcm3+eudC4FMrUmYpRQ/7RjUh37CSl2vW4DAP8qasm5M7j
vlMeQWv88LQEppeITa+0OV5W+nttJTCiXPGE63kpMofoW8KhKu2i4RgFbE1GzkOj
0NXTZI6OmwWOsQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:11:25 2026 by rpki-client