Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File:                     Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier:          o0TqgV3dT1k5kwVGgKIV0sd+3fjoNCTdMCiv9MQyW20=
Subject key identifier:   E2:BF:67:4C:30:2F:1C:B9:E5:26:44:53:BF:EC:BD:DE:89:1A:74:43
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer:       /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial:       01A0F00BE45B644FBC49B72FB59E393A7797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number:          06A2
Signing time:             Wed 30 Sep 2026 02:01:46 +0000
Manifest this update:     Wed 30 Sep 2026 02:01:46 +0000
Manifest next update:     Thu 01 Oct 2026 02:01:46 +0000
Files and hashes:         1: 7jGC3eByRg_Kov58Z9afFa1zFhk.roa (hash: 01p3EgWoHQZuC7lRAyeIevnlE5QEkxh9vvqWiCkIFPs=)
                          2: JiK8psPNS7Q8TSWjkJH1pP9BmF8.roa (hash: 3M1URB5bq4S79c9mtyyaPbUG6/SErUNxltBv4XVCKoY=)
                          3: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: ei8MItNqfVeqVLD+Q8ecCo7UN1+IW/qGkVc0bnlUFXY=)
                          4: q5EALy9DnhoZyrXHjyN4MFOeg18.roa (hash: VQnvjJRY8SQf//eG7sSpW7y6E7fkB1w8TmcEnNpbkZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f0:0b:e4:5b:64:4f:bc:49:b7:2f:b5:9e:39:3a:77:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
        Validity
            Not Before: Sep 30 02:01:46 2026 GMT
            Not After : Oct  1 02:01:46 2026 GMT
        Subject: CN=e2bf674c302f1cb9e5264453bfecbdde891a7443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e4:45:c8:2b:d3:d8:5b:4c:89:0a:e8:0b:78:
                    47:6d:ea:6c:74:8e:ed:b7:47:5d:8a:d3:26:39:7d:
                    07:b5:9e:c8:c8:a7:7f:2e:02:54:fd:41:d4:be:9c:
                    a0:7a:64:40:8f:90:b1:ff:23:98:ec:55:74:9f:35:
                    60:f4:ab:f1:ce:41:5c:96:ed:e5:65:b3:ad:64:2f:
                    f7:58:a3:65:39:10:9c:41:47:ac:c2:61:f5:81:37:
                    94:fe:9d:84:62:c8:4f:6e:19:6a:d1:00:99:4d:be:
                    9e:15:41:de:ae:30:3c:d6:70:16:51:b2:c5:3e:06:
                    63:88:60:0a:e0:46:6a:2a:1c:6c:c4:30:0f:15:ff:
                    d6:db:ee:26:67:43:cd:a3:d1:df:91:bc:d2:66:0e:
                    3b:90:8c:b7:d8:a5:05:fa:73:13:e7:e7:24:36:f5:
                    70:61:3c:1e:a5:9d:47:e0:36:0b:bf:7c:eb:c4:b6:
                    cc:a8:2b:5f:d8:6f:3b:3c:43:04:d0:31:a8:61:49:
                    33:41:ce:56:b4:1d:f3:a9:07:33:06:77:e2:44:87:
                    05:b0:ba:b7:38:a5:46:6d:20:c4:a5:fe:f1:80:df:
                    e0:45:53:65:f7:bc:b5:03:22:b3:98:47:22:b3:36:
                    f5:00:b4:0e:b4:ce:94:82:ac:be:70:c3:cc:24:fe:
                    9f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BF:67:4C:30:2F:1C:B9:E5:26:44:53:BF:EC:BD:DE:89:1A:74:43
            X509v3 Authority Key Identifier:
                keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:21:f2:92:b3:74:78:7a:c4:5a:c3:54:4a:1e:5e:d1:46:0f:
         6c:c1:86:f1:2a:b6:ef:f6:4b:34:9f:4c:c2:4d:98:8e:b6:38:
         dc:7e:a0:9a:df:b1:20:7b:80:6e:02:fe:b7:53:23:0e:e4:0b:
         7c:c0:7a:53:8c:5e:93:8e:94:61:d5:54:b8:62:54:9d:86:5b:
         0d:d0:6e:80:49:ca:a8:59:d9:c7:d3:1e:47:d1:2a:f3:0e:82:
         45:29:03:7e:d3:1b:cb:1e:1a:4f:5e:df:32:95:d4:b2:b6:b8:
         61:ca:56:b6:12:4d:5d:d3:05:a1:cb:5f:72:ed:8c:29:f7:33:
         38:8b:3a:c4:07:08:49:d9:fe:f7:d5:10:e7:13:38:af:eb:05:
         ac:15:46:4e:57:84:b2:51:b6:be:a2:9f:c2:6b:a7:b4:15:e5:
         de:59:46:60:6e:35:62:17:24:54:e2:6d:fa:3f:77:84:40:24:
         ed:4f:83:5d:aa:48:a5:03:70:29:cc:f7:47:6a:dc:74:30:9c:
         da:40:e5:f9:f0:ed:ad:99:03:a1:56:d2:30:98:f0:bb:49:a1:
         f3:61:04:24:2c:34:f4:09:f3:3e:7e:0c:80:c0:5d:0a:7b:9f:
         4f:e3:c7:52:e5:5d:5b:99:0f:96:dc:99:78:e6:d6:cb:20:75:
         ee:3a:34:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:28:06 2026 by rpki-client