Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
File:                     o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft (raw, json)
Hash identifier:          EnyY2CELsYIEDerR6xTDqZDhlCcyvNabULr+YLq2Cfs=
Subject key identifier:   65:85:40:56:84:24:54:68:A1:DB:CA:4D:99:06:41:2C:22:BE:16:AD
Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
Certificate issuer:       /CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Certificate serial:       01A1DB3895EAA64F32C43B6FF7B6ACF40B0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
Manifest number:          0A34
Signing time:             Sat 14 Nov 2026 18:01:20 +0000
Manifest this update:     Sat 14 Nov 2026 18:01:20 +0000
Manifest next update:     Sun 15 Nov 2026 18:01:20 +0000
Files and hashes:         1: 3MFj15oSeUJYuJbY2U542UoSXGM.roa (hash: j9Y9LVF9WUhE5Tw8LMdWTvxog1CGJJ1rf8AUNlTnbFI=)
                          2: FGVsTKcXFHABDa_e0HM9Faa7r2M.roa (hash: 2Iqm//83hIlnGhnfsyksmZkIg0tX+MTyrQg6DXUyYdQ=)
                          3: SwB1iAgYjly4csbv4jz0oadyUZk.roa (hash: TuHJEn/9Xw5181UZ/VH/apXlrIOdLQGvmuNms8pxlNU=)
                          4: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl (hash: qLMsd6bRUuw3kL0cG+h+m3S6hLL5crPMntRHDMB7x0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 18:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:38:95:ea:a6:4f:32:c4:3b:6f:f7:b6:ac:f4:0b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e
        Validity
            Not Before: Nov 14 18:01:20 2026 GMT
            Not After : Nov 15 18:01:20 2026 GMT
        Subject: CN=6585405684245468a1dbca4d9906412c22be16ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:32:35:97:e0:5a:0f:ab:6d:14:65:e0:19:83:
                    12:2c:63:a4:c8:6f:f7:ac:8a:bf:25:84:41:e0:8f:
                    be:1b:b9:01:af:65:23:85:9b:a8:94:d5:94:65:53:
                    2c:55:3c:96:cb:3a:d8:17:0e:1a:a4:49:80:c7:c5:
                    d1:b7:73:fe:82:73:c1:d1:95:5c:76:61:d8:5b:14:
                    60:bc:25:ad:a7:a0:bb:15:9b:60:04:b1:fa:b9:7b:
                    91:19:d9:c1:b6:8d:90:9d:ea:9f:e1:b9:7d:62:22:
                    ee:9b:b1:19:fb:ce:b0:da:8e:40:f4:8a:f9:c7:f7:
                    33:45:ab:70:52:38:4a:29:a6:e5:d5:6e:99:2b:a7:
                    f4:99:b3:28:8c:0b:b6:96:c6:41:3b:8f:28:f1:38:
                    39:b9:5b:08:28:ee:17:d1:60:61:7d:94:f9:bd:4f:
                    62:ca:14:d1:b5:4c:ba:96:51:83:cd:a0:38:f7:16:
                    ee:07:52:3b:a8:c2:0e:ea:b5:22:c5:d8:1f:49:de:
                    c8:13:b2:d0:81:4e:2b:24:18:cf:06:3d:bd:80:1f:
                    dd:09:78:cf:9e:7c:e6:0f:8f:1c:b2:46:0c:21:61:
                    7e:2e:3f:38:e9:4b:b7:b8:ac:9e:30:65:66:74:f4:
                    b0:a8:ae:ed:c8:92:71:1b:34:87:be:ab:45:2d:db:
                    a5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:85:40:56:84:24:54:68:A1:DB:CA:4D:99:06:41:2C:22:BE:16:AD
            X509v3 Authority Key Identifier:
                keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:cf:4d:18:6f:8c:59:80:2d:15:2c:0d:5a:bd:3f:37:88:e9:
         5a:c5:55:14:0e:8d:f0:81:72:7c:a6:90:79:61:dd:7a:7a:9f:
         e5:c7:17:b7:da:13:ed:39:82:bd:b0:ea:6c:4d:e5:80:35:7e:
         b7:2b:a4:c6:90:6b:aa:f1:18:74:0c:3c:8c:71:5d:a5:09:22:
         64:c2:35:0d:2d:e3:58:55:0f:92:7c:ab:52:eb:bb:ac:4f:26:
         c1:71:5b:d1:66:d2:47:b7:cc:69:94:31:33:fa:b4:02:fa:d9:
         9b:98:6e:ea:2c:ed:fc:5f:17:c4:f2:7b:8d:91:1e:07:2f:4b:
         a1:65:af:8e:57:c8:d3:9c:b0:e5:92:d4:48:e4:3a:c9:62:9b:
         fa:4f:bf:54:d2:f6:90:28:04:ea:12:a0:45:b6:e0:30:99:ab:
         ca:ba:6f:26:32:ff:d8:12:0d:c0:0a:38:d5:eb:17:bc:36:ec:
         2c:05:a4:33:34:9c:0c:ab:c7:65:44:cf:ed:09:99:34:9a:46:
         3b:e8:38:bb:44:62:26:d0:de:b3:a1:6f:d5:9c:b3:e8:4d:66:
         7e:be:41:1d:2a:0e:15:b6:b1:0e:a5:b7:01:65:fe:56:c3:22:
         20:bb:1d:5e:ea:2d:70:ec:d8:fa:35:83:a2:f0:ca:2b:84:e9:
         7c:18:a4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:23:57 2026 by rpki-client