Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File:                     o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier:          op33qWLZaPWGTzqzXl7qT+LjNXG7SV50mzTBfjquTJ4=
Subject key identifier:   AD:02:08:67:4A:9B:49:EC:15:64:73:EB:1E:70:39:4D:80:04:BD:25
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer:       /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial:       01A0D570177E42D3FF4A50DBD5B45BC13755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number:          108F
Signing time:             Thu 24 Sep 2026 22:01:27 +0000
Manifest this update:     Thu 24 Sep 2026 22:01:27 +0000
Manifest next update:     Fri 25 Sep 2026 22:01:27 +0000
Files and hashes:         1: OxlIMVmAsJoaXxdeH-zRm0aZJmY.roa (hash: Ip5Y0NJgcptDCnlNShnY7k1XbFcnH0s1uGDobJEDi+g=)
                          2: htYhWUioYCDJo6nxIcNKky94uws.roa (hash: k5FO6tYZGH00rUDjMFodEsOJSsR9ms34ekdAnYB+Tzo=)
                          3: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: CTswCMBERFJ4vQo2gLxLYqQnjoCwpHb2lgqqseU9tI4=)
                          4: oBPZxPOpZv6eWUPg75KmO94jUtg.roa (hash: 18Vbpez1EJoqEvymbj/9uf7KA7iwDu8RHYxOgDkRI58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:70:17:7e:42:d3:ff:4a:50:db:d5:b4:5b:c1:37:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
        Validity
            Not Before: Sep 24 22:01:27 2026 GMT
            Not After : Sep 25 22:01:27 2026 GMT
        Subject: CN=ad0208674a9b49ec156473eb1e70394d8004bd25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:73:17:8a:38:58:9d:e2:9c:57:41:0f:53:24:
                    36:36:48:7f:d8:80:d8:04:f3:6c:b4:4f:fe:9f:a3:
                    79:fd:88:a1:ea:b8:24:60:25:d2:fb:db:00:04:6b:
                    c9:eb:a4:0d:6e:42:4e:d6:47:e1:4b:bd:6b:6f:81:
                    5f:28:30:06:b1:ac:30:e4:d7:a5:b1:03:c4:35:14:
                    ac:0d:bd:6d:a4:c8:ad:f7:54:97:31:44:22:c7:68:
                    f8:cb:fb:bc:5a:ea:9d:0d:64:0b:94:ea:f2:5b:00:
                    4c:7a:71:5d:d8:32:e3:2d:01:1c:82:1b:0d:c0:66:
                    07:d7:e8:22:13:f0:eb:b4:34:4f:d5:82:cd:07:59:
                    60:3e:3f:6e:bc:e1:e7:16:39:ef:af:f8:c0:d4:f9:
                    54:27:ad:f9:fb:79:75:24:90:99:f4:b2:04:93:ba:
                    52:c9:67:86:20:c8:81:cf:8d:e0:90:5a:ca:a0:72:
                    ae:1f:a3:3c:be:d1:9d:18:ae:d8:10:c5:1f:4f:82:
                    c9:78:77:d3:af:41:0c:86:55:fb:90:93:94:30:0f:
                    b5:86:53:63:32:80:f0:ed:b9:2a:3f:bf:ed:ae:c5:
                    59:09:50:56:44:19:eb:3e:b8:06:cc:84:51:fb:ea:
                    13:37:e6:14:da:23:d2:ef:1a:a8:4c:9f:8c:59:a2:
                    e7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:02:08:67:4A:9B:49:EC:15:64:73:EB:1E:70:39:4D:80:04:BD:25
            X509v3 Authority Key Identifier:
                keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ac:94:cc:31:34:94:9b:83:4a:25:09:fe:da:87:9b:bd:e4:
         47:0b:f1:d3:2d:36:6b:0d:f4:6b:09:3e:b7:5c:4c:b4:8e:78:
         7d:92:c5:a4:c5:7b:7d:18:38:04:50:f7:bd:fd:d6:c1:b2:bc:
         ab:02:f4:7b:34:53:73:56:77:9d:4c:13:a2:f1:7f:f3:8b:65:
         c2:ef:74:bb:28:7a:8c:83:75:d6:70:ce:b1:2b:d1:77:68:1e:
         f0:95:ee:90:bd:c8:70:3b:ba:8c:e4:36:11:23:7d:41:3a:27:
         8f:f7:7d:bb:61:b8:d1:af:6b:59:92:11:92:29:52:d1:c6:e1:
         fa:70:91:6f:4c:d7:5d:f3:68:80:6e:fe:8d:21:1b:c8:d3:50:
         23:ee:c1:47:44:2e:08:59:94:df:89:8c:6f:87:d1:b3:bf:3b:
         dd:88:2e:1c:9f:16:51:da:30:17:30:89:3f:c0:58:98:2b:93:
         42:58:47:6c:e3:29:e3:a4:d3:ab:8f:e4:c5:b8:61:0b:07:d3:
         34:ee:5f:e9:16:bf:4e:80:ef:b2:bd:12:90:5f:89:79:3a:5c:
         72:7f:a4:21:69:d9:4e:b0:69:1b:21:8c:db:66:b6:47:5a:3c:
         8a:f5:f6:f2:ed:0f:d7:32:2f:1e:11:0c:ab:a1:4d:81:3a:22:
         25:81:7b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:48:53 2026 by rpki-client