Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
File:                     oyLyKe3C8xSi-l7w168d3bSZ6jE.mft (raw, json)
Hash identifier:          pAMhObFyuxwSKg9RQMq6JC+z9RGbnzNb2LMtc3N4bow=
Subject key identifier:   DE:15:63:72:55:9F:50:8F:66:CC:8F:BE:78:E4:C2:55:01:BD:AB:B7
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Certificate issuer:       /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial:       01A0D0B6D255C3E6384DD2E97369BEFE4D6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
Manifest number:          1A75
Signing time:             Thu 24 Sep 2026 00:00:37 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:37 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:37 +0000
Files and hashes:         1: 99rTPUxETvNMqfh_u46spNvm14U.asa (hash: OYr40XHPvFduVqWreF0V2gPqIbJQNJPu2B4CaD9kosk=)
                          2: IEznk0K2jOJf0RAjHOt5CDCVLX8.asa (hash: uB1bFFV0qe10qLxLSlYG0HlTrXjZ4rIZEEW06Lw18P8=)
                          3: aKOg2Qlf1jhwBI08TxCbNxaldGM.asa (hash: +qzCT97QYuXyotwiBxnGvPknSk4Zw2ZUn8hoKsEK4QU=)
                          4: hmi29bDH7pvd0FedsYNLU_RmrhA.asa (hash: uNJiYqOqB5CD4fkOxxcK5N87GxluuemI20dLeQMwHGw=)
                          5: j9ww1jAwapmyeB5Mda6akaTrn0o.roa (hash: UwM+UovIswrmaEoszqiNrb1qkN6U8QlTDAf/jDU0nmE=)
                          6: k45hDQDW5QvPS-wSqExMPGV9b9E.roa (hash: rZfIBJAHm9qJyp7jxnj7VeKyOR2YVXy0cyWacYrYiYI=)
                          7: oyLyKe3C8xSi-l7w168d3bSZ6jE.crl (hash: 5cKGdKJKsT7RHh9B9DxcmYI8h7EOZiA8uBFhDNUXrFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b6:d2:55:c3:e6:38:4d:d2:e9:73:69:be:fe:4d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
        Validity
            Not Before: Sep 24 00:00:37 2026 GMT
            Not After : Sep 25 00:00:37 2026 GMT
        Subject: CN=de156372559f508f66cc8fbe78e4c25501bdabb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:80:14:0e:5b:e6:b8:a2:33:e7:69:55:1a:87:
                    09:d3:ba:d8:b4:8b:60:7e:59:dd:8a:6a:55:f2:de:
                    f8:b0:58:06:b6:5b:da:d9:fb:7c:fb:bb:eb:8e:cf:
                    78:83:d9:fe:51:d2:d7:35:fa:95:7d:30:5d:98:79:
                    56:36:5e:7a:6b:5c:a4:a7:5f:95:b3:38:f9:e0:88:
                    67:3d:2d:41:0f:d6:18:75:20:32:42:b4:7d:f1:38:
                    9e:8f:f4:ea:4d:da:ed:4c:c2:85:28:64:fd:81:a7:
                    ef:64:00:91:b4:1f:1e:fe:06:8e:58:ab:5c:38:de:
                    ec:76:b5:6b:ab:6d:5f:29:7c:b9:57:2a:97:b9:f9:
                    6a:ec:b3:1a:f5:ff:50:4c:81:ae:80:92:79:3c:ce:
                    7e:37:df:40:76:11:1a:3a:4d:06:dd:8e:22:97:f7:
                    ce:2b:21:f0:17:a4:02:5c:76:2a:5e:d7:d3:1c:fc:
                    da:64:86:a6:c4:f2:b9:43:59:e7:31:93:0e:99:53:
                    7b:b1:61:e4:f9:2e:f9:0e:0b:52:a2:e5:ae:64:2c:
                    d9:eb:4b:cc:32:cd:3e:16:4b:2b:04:0b:c1:53:51:
                    ac:67:99:ee:36:33:59:61:c5:75:f0:52:46:41:1e:
                    a7:f2:3f:55:19:a8:8f:d6:6e:72:f7:45:3a:7e:21:
                    02:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:15:63:72:55:9F:50:8F:66:CC:8F:BE:78:E4:C2:55:01:BD:AB:B7
            X509v3 Authority Key Identifier:
                keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:15:d4:87:81:0c:fd:58:2e:6d:85:cb:96:dd:f3:9f:64:ee:
         ed:69:0b:e0:9e:77:5f:cc:a4:4c:46:99:3b:f0:eb:90:2a:42:
         42:33:a5:26:64:2f:ff:cc:a5:39:83:8b:af:8b:ec:e1:bc:5e:
         36:90:40:22:a3:9b:53:6d:7b:f6:62:bf:cb:4d:fa:07:f0:82:
         b1:1f:d1:7b:20:26:42:e3:51:f9:0c:9f:7d:24:3c:25:cc:b5:
         ea:43:5f:de:5e:34:1b:02:97:8e:5d:db:79:b4:22:a0:80:3f:
         43:c7:0a:97:fd:c6:6b:9e:53:8b:82:79:36:03:e9:49:41:47:
         4f:ce:ab:4e:d9:cf:2a:ed:cb:d6:8e:4a:4a:dc:bb:ce:0e:55:
         14:a6:c3:da:39:6c:54:50:03:29:6d:d8:5c:2a:3e:b0:0c:92:
         b5:6c:fb:e4:b8:85:6e:9d:c7:b6:cc:e9:ec:bb:93:9b:f9:d8:
         4f:4e:af:b3:8c:c5:3a:2e:fc:cd:c6:2a:31:4f:8a:99:1e:38:
         67:4b:1e:cf:0e:bd:98:33:42:db:f9:64:94:7a:c3:ac:e3:95:
         fb:21:29:cf:af:e3:38:f5:7d:f7:0a:0c:8d:2c:0a:ab:88:fc:
         45:8c:a9:5e:72:54:a2:d7:1b:55:51:7a:7f:d6:0c:89:15:1b:
         83:83:b6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:40:33 2026 by rpki-client