Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
File:                     OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft (raw, json)
Hash identifier:          rt3VN7/o5N3dsyd0CkVW5yuN6u7TnF8MaYEC3XMo6a8=
Subject key identifier:   D3:3D:18:3E:9B:93:9E:C3:1F:DC:FB:66:0E:B3:5F:4F:ED:4D:46:61
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Certificate issuer:       /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial:       01A1DD5DFE0487272F2C77AC3703943BA817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
Manifest number:          108B
Signing time:             Sun 15 Nov 2026 04:01:26 +0000
Manifest this update:     Sun 15 Nov 2026 04:01:26 +0000
Manifest next update:     Mon 16 Nov 2026 04:01:26 +0000
Files and hashes:         1: 1AdLwVTQwnRojaJc6oKg4bE5e10.roa (hash: SmldC7KFTFrB2ovoO23QX0S7PhV2KBqhDfb2PIUZ9dY=)
                          2: Dethbobc8AREzeWMB_ZU2-bbvfo.roa (hash: kYevYHTkzrIkmBd0poSFZ+q7NBuRFFZmWF2J4abz31w=)
                          3: OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl (hash: YuGhWkJRCozWcKZNEhIoBct7cl526FXBUCbAH4WzT5w=)
                          4: RYsY-o2i4jJuo5LcGcM8XUCbb9c.roa (hash: Dw7b6pkuG5rO21BY1jXBfmGu/ri7kYZ0iuN6r4DYx0Q=)
                          5: YAzw4t4zF4HrK6DQM0Hi6OJnv_c.roa (hash: Czpsw7Ht+JmwRHsAFUGdIdcpmViWugcfHRbmpORJDMk=)
                          6: i1ce_KCZyzzJnWCLHJltrqd5osU.roa (hash: YFwwgtjx89C2fEmhpNXxjUv1MUQKaMCAp+nvJdfMp5o=)
                          7: sYth0C5gNTA4Nn0ZVlj2vFu-rcA.roa (hash: YQlDl2GO98hMqxb9t2YAM1lWkbesF46HgOB5GJrP+Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:5d:fe:04:87:27:2f:2c:77:ac:37:03:94:3b:a8:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
        Validity
            Not Before: Nov 15 04:01:26 2026 GMT
            Not After : Nov 16 04:01:26 2026 GMT
        Subject: CN=d33d183e9b939ec31fdcfb660eb35f4fed4d4661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:44:97:fe:a1:e4:fa:ed:a6:46:ad:49:55:ef:
                    a5:f0:86:d1:73:b9:35:ce:df:d6:38:d1:1f:8f:21:
                    b3:a9:a2:04:a6:0a:6e:56:24:ef:a2:b3:c3:2d:31:
                    87:ed:6d:c4:fa:38:b8:80:ec:bd:68:43:8b:5b:45:
                    ac:fa:99:02:0f:94:e4:1c:05:4f:62:23:31:c5:83:
                    dd:f7:e1:3b:e9:1e:92:ea:9b:80:03:7b:ce:cf:33:
                    cc:98:ff:2b:55:84:5f:84:6a:0c:00:3b:10:38:cb:
                    6a:7d:49:bd:b4:07:76:16:25:2b:ff:89:5a:52:49:
                    a9:4e:66:41:84:cc:32:12:58:4c:79:04:22:68:2f:
                    7f:83:06:64:ff:da:0d:46:c2:af:30:4d:38:ac:f0:
                    36:07:00:a0:e9:4f:d2:70:95:1f:76:cd:fb:dc:9b:
                    9d:d3:4e:af:e3:42:41:e3:b2:9c:da:ed:36:d4:eb:
                    3a:34:d1:ae:80:a9:f6:98:e7:41:d3:0c:6d:ac:29:
                    67:72:01:3c:7d:5d:e0:ea:08:2c:e2:dc:82:99:30:
                    f8:a4:e9:4c:80:16:08:51:5e:1f:bb:cb:2e:78:c9:
                    75:ae:ce:32:4a:d6:cf:e6:aa:06:45:80:67:1d:3b:
                    b3:50:a8:d9:ba:90:a8:ec:5f:96:f4:8c:37:d7:60:
                    9b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3D:18:3E:9B:93:9E:C3:1F:DC:FB:66:0E:B3:5F:4F:ED:4D:46:61
            X509v3 Authority Key Identifier:
                keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:1f:b6:5a:95:c1:bb:1a:94:04:33:8e:d8:c6:bc:7f:a9:cb:
         1b:e4:91:7e:99:79:6a:d6:28:5b:23:57:ed:21:df:5d:84:af:
         d4:24:08:3a:ae:db:2b:61:48:59:4c:fb:ae:65:b5:67:e1:84:
         1b:22:cf:c1:8a:7c:a6:72:92:09:d9:d1:58:7e:eb:09:da:08:
         22:e0:c9:6e:ca:30:ae:3f:7f:05:d5:28:a0:f3:fd:1f:a9:35:
         19:27:25:b1:46:f8:15:c4:8b:c4:8b:c2:12:71:16:c3:55:00:
         86:2b:62:05:26:ea:c1:03:07:5b:62:b9:1e:06:82:e6:77:1e:
         b1:63:2a:b3:13:a0:ce:ea:56:61:d0:bd:f0:d5:0d:95:ce:a9:
         15:32:45:a6:cb:8f:2c:cf:a0:27:e1:a3:45:9d:e9:92:8f:77:
         13:08:94:8f:31:25:a1:7c:3b:0c:2f:b8:54:cc:6a:28:e9:fc:
         e5:a8:6d:f0:1d:7a:78:a2:9f:32:50:e6:29:b7:78:32:26:f8:
         c8:61:78:b8:5f:d5:fe:28:5c:50:53:a2:0b:21:de:3e:2a:8a:
         d9:96:14:3b:d3:90:d4:c0:f0:d4:91:da:e5:45:f7:16:e9:67:
         66:11:87:c6:9c:93:ef:02:d7:e7:71:21:69:22:24:22:0a:86:
         7a:3c:d4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:38:13 2026 by rpki-client