Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
File:                     OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft (raw, json)
Hash identifier:          GO3mPO+qz6ZtZ4TJAcSnEvB5oLydUDgA3vG9KcQxh84=
Subject key identifier:   69:CC:8D:73:E3:CB:95:30:72:47:68:E8:2D:8A:93:A3:DC:15:B1:B4
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Certificate issuer:       /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial:       01A0CCA33392F30F76AC2AD2774220E0C00D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
Manifest number:          0FFD
Signing time:             Wed 23 Sep 2026 05:00:42 +0000
Manifest this update:     Wed 23 Sep 2026 05:00:42 +0000
Manifest next update:     Thu 24 Sep 2026 05:00:42 +0000
Files and hashes:         1: 1AdLwVTQwnRojaJc6oKg4bE5e10.roa (hash: SmldC7KFTFrB2ovoO23QX0S7PhV2KBqhDfb2PIUZ9dY=)
                          2: OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl (hash: np4j30SJovozIVRbYQsv4ffIQUYo93XH2loOxV74nbQ=)
                          3: RYsY-o2i4jJuo5LcGcM8XUCbb9c.roa (hash: Dw7b6pkuG5rO21BY1jXBfmGu/ri7kYZ0iuN6r4DYx0Q=)
                          4: YAzw4t4zF4HrK6DQM0Hi6OJnv_c.roa (hash: Czpsw7Ht+JmwRHsAFUGdIdcpmViWugcfHRbmpORJDMk=)
                          5: i1ce_KCZyzzJnWCLHJltrqd5osU.roa (hash: YFwwgtjx89C2fEmhpNXxjUv1MUQKaMCAp+nvJdfMp5o=)
                          6: qw0bNos2uMNz09JenRAlkTtNmd8.roa (hash: SLKj00aaETL606oUEHzZc3k3yjfYWagWu8LRBWMxnBA=)
                          7: sYth0C5gNTA4Nn0ZVlj2vFu-rcA.roa (hash: YQlDl2GO98hMqxb9t2YAM1lWkbesF46HgOB5GJrP+Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:a3:33:92:f3:0f:76:ac:2a:d2:77:42:20:e0:c0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
        Validity
            Not Before: Sep 23 05:00:42 2026 GMT
            Not After : Sep 24 05:00:42 2026 GMT
        Subject: CN=69cc8d73e3cb9530724768e82d8a93a3dc15b1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:23:86:03:30:a0:e7:94:61:69:85:ff:29:c4:
                    58:77:56:0a:a6:13:05:77:e3:7e:f1:4f:60:0f:1b:
                    39:73:91:16:97:52:96:f3:06:4b:ac:d6:98:47:4a:
                    35:62:ee:3f:f3:a2:9b:ed:95:5f:a4:a7:ae:5e:e1:
                    23:20:51:81:a8:95:00:b0:36:90:47:a1:78:ff:e2:
                    5e:5d:59:21:8f:cd:51:8b:1d:c5:5d:3c:f0:f2:ae:
                    e9:70:6f:82:3a:d7:f0:ee:21:4f:3f:34:ec:bd:5f:
                    1a:01:2a:ed:75:08:db:4d:eb:e4:10:c3:f1:a3:f2:
                    8a:87:4d:a9:6d:41:8a:e3:84:e2:94:9e:06:34:e6:
                    e4:8b:fd:4a:c0:ac:c4:65:17:5b:d9:89:f3:28:a7:
                    57:da:f2:95:af:1c:76:ff:28:13:b2:94:12:b6:0e:
                    d2:fc:9a:6a:d0:52:10:82:54:5d:92:58:bb:18:d2:
                    b6:72:11:b9:1f:23:3d:ab:96:b4:25:7c:b0:07:51:
                    e9:5e:e0:47:5a:bf:4d:23:1d:63:36:86:5a:4c:0a:
                    28:da:56:96:c8:ab:8b:5a:79:68:17:f6:ed:4a:42:
                    1b:c2:d5:0f:2c:c7:23:6c:68:bc:e3:3d:bf:28:ae:
                    9b:2c:5f:2c:ad:fe:21:7b:25:88:4a:f0:3c:af:a8:
                    ca:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CC:8D:73:E3:CB:95:30:72:47:68:E8:2D:8A:93:A3:DC:15:B1:B4
            X509v3 Authority Key Identifier:
                keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:06:a9:91:9f:97:19:47:46:1e:b5:8a:66:b2:f8:3d:4f:0c:
         48:76:9f:4e:d0:30:66:ae:e8:b0:18:f4:86:b6:fb:96:1b:1d:
         94:1f:f1:9e:5f:3e:33:c5:a3:a6:7a:ca:70:2b:1d:52:a0:0d:
         d2:fb:53:37:92:64:f1:3a:98:a0:d2:f8:d3:c0:14:d7:a3:a9:
         ce:18:a3:9f:73:33:44:28:aa:d5:d1:54:71:f5:91:4a:87:7e:
         d4:c2:75:44:57:b8:09:ec:89:6a:d7:ae:74:0a:22:35:da:e5:
         5b:17:93:44:df:b6:82:8b:96:75:42:f8:c4:c4:91:c0:61:8c:
         af:c1:f5:c5:ec:06:04:41:f5:01:29:ee:e3:2e:2a:f8:2d:12:
         dc:a7:44:48:08:06:bf:6e:3d:5c:e2:0d:e9:90:63:1b:76:3d:
         b6:c8:d2:db:36:b3:21:a8:fc:ed:54:13:2e:2d:be:d9:58:03:
         a0:a7:45:70:ec:be:e3:d7:87:01:18:76:af:5e:84:c7:e4:b7:
         16:8e:5f:5e:9d:65:d3:f5:74:49:a2:ae:39:8d:23:fc:f0:c4:
         70:ca:6c:ba:bd:d5:31:78:33:85:63:d9:4d:ea:b5:85:f4:f4:
         2b:48:4c:f1:89:91:da:0e:91:96:78:d2:ca:3c:25:96:25:1f:
         e1:94:db:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:58:38 2026 by rpki-client