Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
File:                     oOOBtudsuVIOjY9Wd27KD-F2zEA.mft (raw, json)
Hash identifier:          2jk+NfKotBeZUbX/681EKCEImof4vzdZCirZY1vJuVE=
Subject key identifier:   01:2A:9F:52:44:96:A4:17:4C:70:8F:CE:40:2D:38:2C:73:65:87:74
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Certificate issuer:       /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial:       01A0D3154FEE9A567A93F57402415C7C9D12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
Manifest number:          1A7E
Signing time:             Thu 24 Sep 2026 11:03:04 +0000
Manifest this update:     Thu 24 Sep 2026 11:03:04 +0000
Manifest next update:     Fri 25 Sep 2026 11:03:04 +0000
Files and hashes:         1: BWTvXgAXmLi5C-gjg1XGZb6Xx2k.roa (hash: 42jeeBbxleiQhbuMxXur6p7rLIKmwfR/0QUFcIvSOuI=)
                          2: EqeB8tqHFp5nwKidq-l-rJcDnGA.roa (hash: LkoQtN+QmOCni6JN0Z5FUtSBkw3mqkVOTFE6VSZr0m8=)
                          3: O8r_qv2yXQqAvZrQ0jfpQHwYgi4.roa (hash: RWTdXUa+iSybycGajkLlOunVuvAlO58dNpaXACjUKZs=)
                          4: U13FecX6J3UOL0Ga46JJjAYTBnM.roa (hash: jhsgEsNANGrcwvVO7xJiaTQ5oa51oynlcgVfqCGIYnY=)
                          5: V2TMTG4WDi8rsRzuUJ35K6X29Mw.roa (hash: M4JvfosFkWwb5FMHFRCzlviyPCyGNqJtznLLB1q9hHc=)
                          6: oOOBtudsuVIOjY9Wd27KD-F2zEA.crl (hash: rALDxvz//t4nzae4SaCCKB5BZn8ICS1Q1HNGKK5kzgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 11:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:15:4f:ee:9a:56:7a:93:f5:74:02:41:5c:7c:9d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
        Validity
            Not Before: Sep 24 11:03:04 2026 GMT
            Not After : Sep 25 11:03:04 2026 GMT
        Subject: CN=012a9f524496a4174c708fce402d382c73658774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:77:71:82:67:fd:fe:90:c1:91:54:be:bb:9e:
                    95:57:d0:31:64:e1:ec:68:f2:b0:09:92:e6:69:cc:
                    a4:b7:d2:5c:2c:a9:15:9a:60:01:3b:a8:fb:a6:a2:
                    ca:da:d5:76:88:92:27:f5:15:5e:5d:dc:af:b5:a5:
                    4e:77:b0:d8:c7:16:68:19:51:ac:9b:9d:78:f4:8e:
                    61:51:fc:f1:5f:49:b2:79:92:b4:47:01:14:0e:95:
                    ff:7c:b4:7e:2c:c9:64:d3:4b:be:3c:7c:37:5d:ac:
                    2a:ea:8a:23:37:e0:3e:70:5b:50:f1:7e:31:44:00:
                    50:1b:1b:af:d7:82:06:7b:09:8e:75:79:67:31:30:
                    c0:b1:6c:74:90:03:85:c0:e9:a8:75:31:96:79:7c:
                    7a:fb:73:ac:86:e1:76:a3:7a:e3:8b:c6:5d:9b:a1:
                    81:54:5b:40:f6:7f:d1:24:bc:ac:31:36:81:39:64:
                    09:85:59:10:1a:87:06:c0:83:d9:b9:c8:7b:91:e6:
                    40:cc:7c:5b:da:a5:ed:d3:a8:fe:b2:78:fd:bc:97:
                    f8:5c:15:d0:14:b4:be:b4:03:02:71:3a:fb:43:5a:
                    23:48:b5:a0:f7:04:11:e0:b5:5b:74:1c:94:2f:30:
                    eb:d4:84:88:f2:be:7b:df:58:0f:6c:95:77:56:3d:
                    00:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2A:9F:52:44:96:A4:17:4C:70:8F:CE:40:2D:38:2C:73:65:87:74
            X509v3 Authority Key Identifier:
                keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c5:96:e8:98:38:7d:a7:9c:06:c6:c2:36:6c:b5:f2:4e:4b:
         6e:80:57:0b:1c:3e:2a:1f:d1:20:ad:e4:64:31:af:ce:73:17:
         5e:de:30:34:7f:ce:d6:6b:56:4b:23:c0:90:21:e7:b8:0a:79:
         90:75:2b:b0:d5:fa:ab:d4:3c:1f:ad:a8:e6:03:49:3b:fc:52:
         fa:3f:73:47:2f:26:c9:68:0b:88:5e:14:a6:24:40:1c:64:cb:
         5d:1f:ac:76:cf:7d:30:6f:43:c3:9a:65:25:92:18:53:0b:d5:
         6b:7e:a2:0b:b0:2c:b4:4b:ca:78:7c:b8:85:1e:dc:39:de:f9:
         9f:d8:06:db:7b:96:06:1b:ce:75:ed:a0:9a:71:53:9e:aa:74:
         c5:7f:c7:5c:e4:a6:d2:d0:f6:35:bf:fa:f6:02:2e:b9:c6:2f:
         e7:32:4d:2f:95:5c:56:78:c9:e2:5b:6c:e0:8c:94:2a:6d:85:
         38:30:94:27:f6:77:9d:f7:b4:74:41:89:a6:36:ab:e0:aa:10:
         66:f0:e0:a9:62:12:98:ac:eb:2e:3a:57:98:48:8b:48:dc:8a:
         8f:0d:d4:8a:7d:85:a6:6b:ad:ab:8d:7d:c3:23:1b:3d:84:0f:
         3d:1e:32:a6:17:a9:eb:a9:a8:19:4e:06:22:26:1e:35:7c:02:
         20:73:06:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:26:54 2026 by rpki-client