Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/1d12b5-4de2-4c98-818c-a9af75762ece/1/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.mft
File:                     o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.mft (raw, json)
Hash identifier:          25vMwt/iu6c6mb4KNMnoSvFbVRNATgVd9NGGguS4YIc=
Subject key identifier:   A4:EE:96:4C:E7:A4:8C:72:C3:6E:D4:D9:9F:CD:CA:A9:54:B7:16:64
Authority key identifier: A3:A2:6F:DD:E1:2C:38:9F:64:F8:CF:5D:9A:66:92:E1:27:84:10:05
Certificate issuer:       /CN=a3a26fdde12c389f64f8cf5d9a6692e127841005
Certificate serial:       01A0D3B8E003755217816AE4C87A1F6D65E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/1d12b5-4de2-4c98-818c-a9af75762ece/1/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.mft
Manifest number:          50
Signing time:             Thu 24 Sep 2026 14:01:43 +0000
Manifest this update:     Thu 24 Sep 2026 14:01:43 +0000
Manifest next update:     Fri 25 Sep 2026 14:01:43 +0000
Files and hashes:         1: PCeTg-z2IkY5v03LlV2q4LDGBsw.asa (hash: Xos5iSf0n6j9TVZXRw51i0DoEWOWAs+fRxhRWuUB430=)
                          2: o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.crl (hash: fNg2lZZNQNooEemXfaF9kSZ00ZtRLoC/WapV5XxtS6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/1d12b5-4de2-4c98-818c-a9af75762ece/1/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/1d12b5-4de2-4c98-818c-a9af75762ece/1/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:b8:e0:03:75:52:17:81:6a:e4:c8:7a:1f:6d:65:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3a26fdde12c389f64f8cf5d9a6692e127841005
        Validity
            Not Before: Sep 24 14:01:43 2026 GMT
            Not After : Sep 25 14:01:43 2026 GMT
        Subject: CN=a4ee964ce7a48c72c36ed4d99fcdcaa954b71664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:a3:bb:4f:ac:5e:67:05:8b:22:84:91:59:
                    8d:54:48:03:fb:88:ea:8a:27:18:ee:cc:e3:b3:7a:
                    bc:b4:71:4a:ea:a2:df:a9:75:a0:7e:0c:0a:cd:52:
                    de:12:da:db:07:5a:1b:eb:41:08:01:2f:c7:ca:a8:
                    39:64:fc:f7:48:9d:61:03:6e:4f:f5:85:2d:6c:ba:
                    44:82:22:6e:a3:f0:ef:b2:14:b9:61:df:30:57:82:
                    69:02:1a:01:80:b0:1d:9f:d2:09:35:e6:be:53:ff:
                    27:03:67:b0:03:1c:52:6a:4b:50:b6:79:58:34:af:
                    5a:d2:77:a1:c0:86:a5:29:0f:92:e9:6e:b7:aa:7d:
                    3d:08:c0:7e:53:b5:0f:0b:f0:43:60:80:44:8c:d1:
                    fc:d9:b8:5e:93:bb:e1:d8:3d:15:e8:6f:d7:00:95:
                    fe:09:5d:60:c3:24:fe:c2:25:1f:a5:d7:08:43:85:
                    a3:5f:cc:3c:57:f3:77:e0:dc:de:97:cc:63:51:a7:
                    c8:a3:14:c6:82:87:f7:69:4f:32:5c:42:92:f4:01:
                    ff:15:7e:2e:02:2f:ad:7c:d8:7b:44:9c:37:e3:23:
                    39:e1:21:1f:6c:dd:7d:f0:a4:44:9e:61:38:d5:a3:
                    ad:9b:1f:28:65:c8:92:e4:65:a2:8d:fe:80:06:bf:
                    17:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EE:96:4C:E7:A4:8C:72:C3:6E:D4:D9:9F:CD:CA:A9:54:B7:16:64
            X509v3 Authority Key Identifier:
                keyid:A3:A2:6F:DD:E1:2C:38:9F:64:F8:CF:5D:9A:66:92:E1:27:84:10:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/1d12b5-4de2-4c98-818c-a9af75762ece/1/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/1d12b5-4de2-4c98-818c-a9af75762ece/1/o6Jv3eEsOJ9k-M9dmmaS4SeEEAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:16:82:ae:c4:fa:25:3f:a6:49:f6:75:39:02:01:7b:b8:22:
         e8:32:5d:d1:5d:87:9d:46:fd:b1:9c:b5:6c:35:d2:81:b9:06:
         bb:8e:ad:92:d8:1e:c6:08:7f:71:ca:fc:43:a5:c4:e9:09:7a:
         9a:3b:19:af:f0:c2:7a:43:df:da:43:44:50:85:b2:b9:0a:e6:
         d9:8a:19:28:ef:d1:5d:f0:07:f5:ce:22:64:c0:2a:4b:bd:94:
         25:1f:eb:32:ee:8b:e3:bf:2d:60:72:8f:02:71:9c:e0:8c:b5:
         07:44:d2:aa:01:01:a6:d8:dc:76:39:e2:71:27:fe:4d:f4:9d:
         c1:0d:a9:b1:95:f9:6e:6b:bc:c7:9a:f9:2f:de:3d:d3:53:77:
         ed:cc:66:a4:aa:8a:32:15:b4:c4:ab:42:d6:49:83:68:22:fa:
         d5:c3:20:d3:9c:19:b6:c4:50:f6:55:d0:ce:56:c3:80:0f:49:
         0c:9c:74:ac:fe:3c:34:75:70:ca:87:4d:cd:07:b0:b3:85:c0:
         a4:de:cf:67:54:65:0e:c3:3a:5a:a3:a1:6e:04:3e:01:ab:28:
         6c:9f:21:e7:29:a9:1e:a9:d0:ff:b0:84:d3:7c:9e:25:a0:87:
         3a:4b:a6:26:2a:69:57:c0:50:cb:bb:7b:3f:a8:36:bb:c7:2b:
         f2:41:ec:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTuOADdVIXgWrkyHofbWXlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYTI2ZmRkZTEyYzM4OWY2NGY4Y2Y1ZDlhNjY5MmUxMjc4
NDEwMDUwHhcNMjYwOTI0MTQwMTQzWhcNMjYwOTI1MTQwMTQzWjAzMTEwLwYDVQQD
EyhhNGVlOTY0Y2U3YTQ4YzcyYzM2ZWQ0ZDk5ZmNkY2FhOTU0YjcxNjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumiju0+sXmcFiyKEkVmNVEgD+4jq
iicY7szjs3q8tHFK6qLfqXWgfgwKzVLeEtrbB1ob60EIAS/Hyqg5ZPz3SJ1hA25P
9YUtbLpEgiJuo/DvshS5Yd8wV4JpAhoBgLAdn9IJNea+U/8nA2ewAxxSaktQtnlY
NK9a0nehwIalKQ+S6W63qn09CMB+U7UPC/BDYIBEjNH82bhek7vh2D0V6G/XAJX+
CV1gwyT+wiUfpdcIQ4WjX8w8V/N34Nzel8xjUafIoxTGgof3aU8yXEKS9AH/FX4u
Ai+tfNh7RJw34yM54SEfbN198KREnmE41aOtmx8oZciS5GWijf6ABr8XqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTulkznpIxyw27U2Z/NyqlUtxZkMB8GA1UdIwQY
MBaAFKOib93hLDifZPjPXZpmkuEnhBAFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZKdjNlRXNPSjlrLU05ZG1tYVM0U2VFRUFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xZDEyYjUtNGRlMi00Yzk4LTgxOGMt
YTlhZjc1NzYyZWNlLzEvbzZKdjNlRXNPSjlrLU05ZG1tYVM0U2VFRUFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8xZDEyYjUtNGRlMi00Yzk4LTgxOGMtYTlhZjc1NzYyZWNl
LzEvbzZKdjNlRXNPSjlrLU05ZG1tYVM0U2VFRUFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRaCrsT6
JT+mSfZ1OQIBe7gi6DJd0V2HnUb9sZy1bDXSgbkGu46tktgexgh/ccr8Q6XE6Ql6
mjsZr/DCekPf2kNEUIWyuQrm2YoZKO/RXfAH9c4iZMAqS72UJR/rMu6L478tYHKP
AnGc4Iy1B0TSqgEBptjcdjnicSf+TfSdwQ2psZX5bmu8x5r5L94901N37cxmpKqK
MhW0xKtC1kmDaCL61cMg05wZtsRQ9lXQzlbDgA9JDJx0rP48NHVwyodNzQews4XA
pN7PZ1RlDsM6WqOhbgQ+AasobJ8h5ympHqnQ/7CE03yeJaCHOkumJippV8BQy7t7
P6g2u8cr8kHsxw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:48:03 2026 by rpki-client