Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
File:                     1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft (raw, json)
Hash identifier:          BkLb7pYvca6sKlVdqi+jKPuQZlfAnZx5ifY2UkQr8lw=
Subject key identifier:   02:16:CE:69:1B:08:55:FA:75:66:41:31:CA:F5:03:89:61:A7:62:12
Authority key identifier: FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4
Certificate issuer:       /CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
Certificate serial:       01A0D64C2997DD6AFA55F9CFCD261722D491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
Manifest number:          157B
Signing time:             Fri 25 Sep 2026 02:01:50 +0000
Manifest this update:     Fri 25 Sep 2026 02:01:50 +0000
Manifest next update:     Sat 26 Sep 2026 02:01:50 +0000
Files and hashes:         1: 1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl (hash: 08IkUuiQZCsF8zcSmvrP6Ey2prKoNuhzWWDtHwEmOUg=)
                          2: __aKgcBqV6i_mXN76rfxria8AHQ.roa (hash: zwh2UkhbJc0t+pZ8vBFFopuCCkIr7SkveCVxpby2P9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:4c:29:97:dd:6a:fa:55:f9:cf:cd:26:17:22:d4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
        Validity
            Not Before: Sep 25 02:01:50 2026 GMT
            Not After : Sep 26 02:01:50 2026 GMT
        Subject: CN=0216ce691b0855fa75664131caf5038961a76212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:e3:de:47:13:5b:4e:7c:a9:9f:ba:ef:92:
                    8c:0b:62:8f:d0:0b:48:3f:cd:12:71:f3:c2:1b:5f:
                    b5:d8:f5:30:31:7e:17:0b:80:a5:d0:49:90:5f:95:
                    49:56:5c:44:57:6a:75:85:21:ef:b0:88:43:62:87:
                    3c:07:c6:c8:f6:a3:e0:15:06:b0:ed:4b:c3:45:b1:
                    70:89:0f:22:6e:0a:9e:11:48:67:68:37:02:d6:b4:
                    74:54:3d:bb:fd:8a:1a:40:d1:39:eb:f0:bb:9b:e3:
                    48:e7:eb:5e:7e:9a:bb:9f:97:18:40:32:f7:be:c5:
                    c4:a2:42:e0:f4:19:fa:a0:7c:af:3e:a0:e6:36:be:
                    3d:8e:6e:8c:3f:18:49:1d:5a:97:0e:50:c9:97:42:
                    02:c3:5f:4b:21:52:8f:f6:02:16:c9:80:a9:d3:e0:
                    13:00:10:2f:00:7f:33:38:ab:58:af:ef:16:10:db:
                    c2:b9:b7:20:8a:37:08:4d:63:fb:03:76:b5:f0:e0:
                    43:90:09:f7:94:8d:d6:28:28:df:46:85:97:e6:27:
                    f6:47:00:0a:5f:c9:60:63:92:d1:75:02:53:1f:46:
                    2f:d5:cc:27:af:79:e4:d5:8b:0c:0e:7c:03:5b:a9:
                    a7:28:f2:1a:0b:41:b4:ef:c3:b1:55:62:a5:c2:1c:
                    62:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:16:CE:69:1B:08:55:FA:75:66:41:31:CA:F5:03:89:61:A7:62:12
            X509v3 Authority Key Identifier:
                keyid:FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:20:0a:eb:95:ba:1b:9f:40:34:b6:56:94:db:1d:a6:26:f3:
         0f:93:27:cb:86:00:79:94:d1:ed:89:13:e0:d4:5b:0c:5e:16:
         ea:a7:62:50:ef:ca:f4:bf:f2:e4:f6:38:74:a7:bd:a4:10:b2:
         b7:41:cf:6f:fa:30:a0:43:1e:a0:17:d2:ed:87:d1:5f:13:bb:
         d3:15:87:ed:55:ee:cd:a4:c3:48:dd:70:cd:6f:3d:8e:18:27:
         ea:0b:8e:16:28:e2:03:e6:ae:4c:50:31:2e:ea:62:6c:08:9c:
         ab:fc:de:5e:9c:59:6d:01:28:cb:82:14:59:ac:0c:bc:a4:6f:
         ec:f0:8f:fc:0a:bd:18:cb:3a:4a:7f:ef:29:32:e1:5b:be:b4:
         f4:67:58:d9:24:40:15:61:56:c0:ed:71:e9:b1:d3:cf:f2:8c:
         70:1b:1b:f0:c0:3d:00:ef:50:e0:73:df:b4:96:ed:a6:ab:97:
         c8:f3:8b:2a:65:4c:92:f0:c6:f7:53:19:bf:c1:f3:dd:fb:aa:
         26:6b:06:1d:5b:5e:f6:e5:c1:95:35:62:7a:c7:6d:47:72:ca:
         1d:d3:6f:49:51:14:a1:65:fb:3c:75:47:da:c3:a4:9f:d0:9a:
         bc:c7:d3:08:e5:b5:9c:f0:40:13:be:d2:9e:01:09:f9:cc:c6:
         5f:06:89:11
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDWTCmX3Wr6VfnPzSYXItSRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZjM4MGI2Njc1YjljY2Q1ZjgxMmUwNjlmZmYxNzU0Nzhm
YjM4YTQwHhcNMjYwOTI1MDIwMTUwWhcNMjYwOTI2MDIwMTUwWjAzMTEwLwYDVQQD
EygwMjE2Y2U2OTFiMDg1NWZhNzU2NjQxMzFjYWY1MDM4OTYxYTc2MjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG3j3kcTW058qZ+675KMC2KP0AtI
P80ScfPCG1+12PUwMX4XC4Cl0EmQX5VJVlxEV2p1hSHvsIhDYoc8B8bI9qPgFQaw
7UvDRbFwiQ8ibgqeEUhnaDcC1rR0VD27/YoaQNE56/C7m+NI5+tefpq7n5cYQDL3
vsXEokLg9Bn6oHyvPqDmNr49jm6MPxhJHVqXDlDJl0ICw19LIVKP9gIWyYCp0+AT
ABAvAH8zOKtYr+8WENvCubcgijcITWP7A3a18OBDkAn3lI3WKCjfRoWX5if2RwAK
X8lgY5LRdQJTH0Yv1cwnr3nk1YsMDnwDW6mnKPIaC0G078OxVWKlwhxiWwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAIWzmkbCFX6dWZBMcr1A4lhp2ISMB8GA1UdIwQY
MBaAFPvzgLZnW5zNX4EuBp//F1R4+zikMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1fT0F0bWRibk0xZmdTNEduXzhYVkhqN09LUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvZDEwODEzLWZlNjEtNDAzMy1hNDMz
LTVlZTliNjIyNDZkYi8xLzEtX09BdG1kYm5NMWZnUzRHbl84WFZIajdPS1EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzZjL2QxMDgxMy1mZTYxLTQwMzMtYTQzMy01ZWU5YjYyMjQ2
ZGIvMS8xLV9PQXRtZGJuTTFmZ1M0R25fOFhWSGo3T0tRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiAK
65W6G59ANLZWlNsdpibzD5Mny4YAeZTR7YkT4NRbDF4W6qdiUO/K9L/y5PY4dKe9
pBCyt0HPb/owoEMeoBfS7YfRXxO70xWH7VXuzaTDSN1wzW89jhgn6guOFijiA+au
TFAxLupibAicq/zeXpxZbQEoy4IUWawMvKRv7PCP/Aq9GMs6Sn/vKTLhW7609GdY
2SRAFWFWwO1x6bHTz/KMcBsb8MA9AO9Q4HPftJbtpquXyPOLKmVMkvDG91MZv8Hz
3fuqJmsGHVte9uXBlTViesdtR3LKHdNvSVEUoWX7PHVH2sOkn9CavMfTCOW1nPBA
E77SngEJ+czGXwaJEQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:27:30 2026 by rpki-client