Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
File:                     ogiOBtVTz_KT0nf012w6cQvYsvc.mft (raw, json)
Hash identifier:          R1JADoPibD5grTwAHulpwf1zlxKux3yIjqVPzd0Lh6M=
Subject key identifier:   E0:6C:AD:74:19:17:21:F1:44:FE:D9:53:B1:7F:C2:9F:CF:FF:B1:AD
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Certificate issuer:       /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial:       01A0D0EE52F2E09D716FC0B06B9387F12647
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
Manifest number:          1B09
Signing time:             Thu 24 Sep 2026 01:01:14 +0000
Manifest this update:     Thu 24 Sep 2026 01:01:14 +0000
Manifest next update:     Fri 25 Sep 2026 01:01:14 +0000
Files and hashes:         1: 0bKooLeEaBVaHZZ5sm_Mxin6SHU.roa (hash: fTg7hso6ct0mZc4J1RnwZCnteGZJ3YXa8o1ssxIWikE=)
                          2: 15YRYk0OOsur4nmbjHzqrTrzfeQ.roa (hash: WZaueawVRKmmS1Xzndpi76+h8hyQuijG+xnuMLZ7DTo=)
                          3: 51sMMW7XNb-MLf8Lv5YXdcOtSCk.roa (hash: mnXXWe8YXIcnA1Q/81dW5+gt1IIDz+CKkOS5vMvKy6I=)
                          4: JNZCYSb0eX2LiAhwYWr792VZYyk.roa (hash: 8a/oxkbq80RN3ANPAzfwubbSf0KUQs2EZXuphhCoNP8=)
                          5: Ngjw1vhloIp0UT-nauD8USjCudc.roa (hash: g4SQj8Dh7gq6fyHaa1thTApOrgQGR2g0qw8Of/lXJ6M=)
                          6: TQJC17LRiHCpRzm6vZH98Kx2YGE.roa (hash: CC6/FdzY8rWN99NywJxlTj8KoAeOw5QMq59YsrbSols=)
                          7: U8heiNj-1DXPnLIJw67QF28AxV4.roa (hash: 5br3lEsUqAMI9+vMDkaT1x3v1/JBeCswqWMLa9dVmwI=)
                          8: _MudUc0Pvd1GYebW0sO-A_Kjoi8.roa (hash: 0tsgFf8KNSTJt7JGL5ElSL3liAR6QXHJEZNRAwsMx5E=)
                          9: cw3p8OtDCLlC1go49KS1_MxGpnE.roa (hash: Jr8ERSNb16dhdPHQwE9WASS0GyFbBKLbh+bPj3R8bhI=)
                          10: ogiOBtVTz_KT0nf012w6cQvYsvc.crl (hash: ZTU1VCDbKELaX2UHOaWtVqltIQl1dpOSQGWTGMTlAEM=)
                          11: wdlcghHaFjBg9miwVhfBtTm1gyY.roa (hash: 0wwcVzuglC9MXrfZM5CyEXjj8UTs1IW/BCyl3V3syoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 01:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ee:52:f2:e0:9d:71:6f:c0:b0:6b:93:87:f1:26:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
        Validity
            Not Before: Sep 24 01:01:14 2026 GMT
            Not After : Sep 25 01:01:14 2026 GMT
        Subject: CN=e06cad74191721f144fed953b17fc29fcfffb1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:37:18:e9:57:e1:0b:4a:55:1c:35:fd:95:64:
                    71:24:4f:c6:bb:64:7a:26:65:2d:a5:48:c8:c9:e1:
                    42:70:30:b4:64:08:f2:1c:12:61:7e:10:64:a3:74:
                    9a:63:54:b0:61:4a:94:e0:82:42:fe:15:93:38:fd:
                    c5:ab:18:fd:e3:4b:f8:74:79:31:d2:1e:c1:f0:1d:
                    33:a6:10:70:99:5d:05:69:ce:3f:26:aa:2a:bc:e6:
                    c9:63:1d:cc:0e:51:88:b9:d4:71:14:a4:84:ca:73:
                    7d:b1:10:dd:1f:66:58:37:32:3b:d3:dd:4e:4f:97:
                    e0:00:bb:33:af:c3:e3:f5:8c:bc:51:ee:7a:01:dd:
                    84:8b:14:02:ab:9a:82:4c:92:27:63:3c:5a:54:1f:
                    17:57:34:27:f0:34:7f:c5:f4:52:d6:9f:7a:84:10:
                    e6:00:2e:dc:d3:9a:df:b7:19:22:cd:98:1a:53:fb:
                    7b:e6:24:98:d7:44:9a:65:87:93:88:8e:f5:35:f7:
                    7f:a1:88:34:33:da:d9:62:9e:a6:54:1d:0a:ce:fe:
                    2f:fd:6d:dc:fc:ba:32:f3:5c:6d:fc:8c:ef:f5:e2:
                    93:1f:42:e7:cb:02:43:d7:7b:5c:22:f1:3e:21:20:
                    a0:ed:d9:38:8b:eb:15:a5:dc:c8:aa:34:92:b9:c1:
                    df:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6C:AD:74:19:17:21:F1:44:FE:D9:53:B1:7F:C2:9F:CF:FF:B1:AD
            X509v3 Authority Key Identifier:
                keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:5b:b7:27:cf:71:da:c0:91:e2:cb:ad:98:83:5d:9b:66:b7:
         82:1e:78:60:54:db:3d:80:e6:e8:df:d1:0b:d8:69:27:0f:34:
         31:25:35:fa:b3:d4:f3:fb:8a:94:60:e3:90:74:15:5a:9f:43:
         a3:76:3c:b8:62:26:a3:aa:7c:27:82:a2:b5:32:33:11:43:41:
         ab:b4:bc:a1:76:79:70:95:af:f6:ec:4c:af:a5:f8:6f:ac:85:
         11:64:60:19:e3:2a:63:ca:ca:dc:74:39:73:e4:47:d0:a8:8d:
         1f:b8:77:a5:2d:6e:aa:ed:75:0b:ff:fc:65:88:86:2c:fc:bd:
         31:d9:c6:1c:98:5b:18:89:53:5a:18:ca:46:1d:5c:a6:93:01:
         b6:61:ec:e5:32:c7:25:d4:d0:e8:b3:75:6d:45:3e:ad:37:22:
         6b:22:c8:9c:37:5a:6a:d6:b8:17:33:cc:27:7c:a5:5a:2f:2f:
         b7:6a:39:86:de:36:41:c4:a8:77:df:a7:75:8b:55:03:51:4e:
         1a:9e:3c:a3:e1:69:e4:1f:19:35:44:ed:5f:07:16:19:ce:a4:
         0c:2d:e1:a5:2a:83:64:3d:d3:d7:fe:87:fa:9d:8b:98:1e:bd:
         c8:5b:d9:fb:43:44:a3:9f:39:67:42:7d:65:ee:00:ce:00:d4:
         0a:4e:82:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:07:32 2026 by rpki-client