Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/03aad0-9be8-42b3-b412-35f4e352ce9e/1/ConodBYCObrwmOLj3QRnPovIL_0.mft
File:                     ConodBYCObrwmOLj3QRnPovIL_0.mft (raw, json)
Hash identifier:          UfzxjfrKHJ1VUpxegJh4n7T26vWAMHDImP21N012R1I=
Subject key identifier:   EF:6A:2D:40:D2:81:5F:6D:33:71:08:53:A2:CC:18:AA:45:62:C2:59
Authority key identifier: 0A:89:E8:74:16:02:39:BA:F0:98:E2:E3:DD:04:67:3E:8B:C8:2F:FD
Certificate issuer:       /CN=0a89e874160239baf098e2e3dd04673e8bc82ffd
Certificate serial:       01A0D1C9308F66D6B2F19173441883690650
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ConodBYCObrwmOLj3QRnPovIL_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/03aad0-9be8-42b3-b412-35f4e352ce9e/1/ConodBYCObrwmOLj3QRnPovIL_0.mft
Manifest number:          49
Signing time:             Thu 24 Sep 2026 05:00:18 +0000
Manifest this update:     Thu 24 Sep 2026 05:00:18 +0000
Manifest next update:     Fri 25 Sep 2026 05:00:18 +0000
Files and hashes:         1: 8bE78mpMyT-fzMopFI6agt1LIHQ.roa (hash: 18ves12NZPDEDkbnslIxRHI/+HnQh65e8LkrDzNVrd8=)
                          2: ConodBYCObrwmOLj3QRnPovIL_0.crl (hash: 16sS52ORuHvWozQFdQ4yCDFO/bFQYjehvxY2XBNfNrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/03aad0-9be8-42b3-b412-35f4e352ce9e/1/ConodBYCObrwmOLj3QRnPovIL_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/03aad0-9be8-42b3-b412-35f4e352ce9e/1/ConodBYCObrwmOLj3QRnPovIL_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ConodBYCObrwmOLj3QRnPovIL_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:c9:30:8f:66:d6:b2:f1:91:73:44:18:83:69:06:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a89e874160239baf098e2e3dd04673e8bc82ffd
        Validity
            Not Before: Sep 24 05:00:18 2026 GMT
            Not After : Sep 25 05:00:18 2026 GMT
        Subject: CN=ef6a2d40d2815f6d33710853a2cc18aa4562c259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7b:2a:6c:6c:8a:88:6d:4b:b4:bb:30:a6:12:
                    e3:47:57:40:62:94:22:df:f7:21:1b:54:30:11:c1:
                    7f:d4:0e:74:ee:2e:54:c4:8c:95:fd:11:66:e6:0e:
                    26:94:56:75:56:b4:c2:64:f9:f8:8e:79:5e:94:4d:
                    32:6d:d1:1b:aa:b5:33:85:34:77:2a:2b:71:43:f0:
                    47:ea:a9:c3:e6:63:c8:3c:ab:f1:1f:44:00:4c:2f:
                    1e:7b:96:f0:9c:d0:44:28:8d:01:fa:43:70:11:a4:
                    ed:8e:ab:f9:c9:17:59:6b:c0:17:37:e4:b7:33:e6:
                    47:92:d6:9b:84:de:fc:8e:a1:e1:d8:37:79:6f:cb:
                    ae:4e:af:ac:aa:b3:c6:7d:c9:32:b1:5a:cf:bb:c1:
                    d9:eb:8d:48:f9:73:7a:14:75:60:31:8d:40:16:57:
                    80:3c:29:54:4b:a8:96:38:85:c9:62:c7:85:81:08:
                    a2:96:ac:b8:eb:43:7f:ea:83:98:92:78:e4:30:bb:
                    e3:1a:ba:a1:46:f2:ea:51:68:b2:8a:a8:c0:3c:d7:
                    2c:e1:2d:8e:be:02:91:f3:20:61:2b:b8:7d:80:75:
                    a1:2f:60:09:e8:04:36:60:09:b7:96:7a:15:e9:db:
                    fa:fa:05:e6:34:b7:86:52:8e:90:1e:18:37:0a:58:
                    7d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6A:2D:40:D2:81:5F:6D:33:71:08:53:A2:CC:18:AA:45:62:C2:59
            X509v3 Authority Key Identifier:
                keyid:0A:89:E8:74:16:02:39:BA:F0:98:E2:E3:DD:04:67:3E:8B:C8:2F:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ConodBYCObrwmOLj3QRnPovIL_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/03aad0-9be8-42b3-b412-35f4e352ce9e/1/ConodBYCObrwmOLj3QRnPovIL_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/03aad0-9be8-42b3-b412-35f4e352ce9e/1/ConodBYCObrwmOLj3QRnPovIL_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:26:57:c2:27:49:f8:87:73:ad:4c:51:75:b8:db:62:c5:00:
         2f:cc:08:95:fb:36:a9:4c:2e:4a:ab:93:05:24:7b:ba:8e:84:
         95:c3:d4:99:24:57:dd:78:c3:7a:0d:ac:c0:f1:62:91:df:d6:
         07:54:ea:97:58:db:54:32:8f:62:b9:6c:a4:43:9a:f5:c5:ee:
         cc:7d:19:82:af:fa:30:89:e1:27:b9:a9:ee:fb:b8:e8:a3:8b:
         94:73:5b:8f:6f:69:06:67:fc:df:bd:cc:11:9d:96:50:ea:c6:
         b9:ac:d2:7a:6c:81:be:5f:87:5a:8f:97:f0:06:7a:fe:ea:0a:
         31:a3:d3:ac:25:33:20:0a:0f:a3:02:5f:6d:54:31:c5:4e:6c:
         84:84:ff:cd:42:e2:4d:70:08:9d:85:95:f2:d7:07:12:c0:73:
         61:aa:5c:62:e6:99:88:c0:df:b6:0e:ec:31:34:46:3a:34:18:
         1c:3b:dc:25:47:d4:33:cf:7f:92:11:40:0b:fa:41:d5:8e:0e:
         79:b8:c0:68:21:34:e1:2d:21:43:0c:3b:a5:f0:a6:f2:09:1e:
         25:fb:94:6c:ee:99:1f:2f:d9:40:a9:b2:74:00:4f:28:2a:8a:
         fe:84:9d:24:b4:10:33:da:45:6f:51:ff:70:ca:0b:ab:f0:48:
         29:19:a0:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRyTCPZtay8ZFzRBiDaQZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhODllODc0MTYwMjM5YmFmMDk4ZTJlM2RkMDQ2NzNlOGJj
ODJmZmQwHhcNMjYwOTI0MDUwMDE4WhcNMjYwOTI1MDUwMDE4WjAzMTEwLwYDVQQD
EyhlZjZhMmQ0MGQyODE1ZjZkMzM3MTA4NTNhMmNjMThhYTQ1NjJjMjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnsqbGyKiG1LtLswphLjR1dAYpQi
3/chG1QwEcF/1A507i5UxIyV/RFm5g4mlFZ1VrTCZPn4jnlelE0ybdEbqrUzhTR3
KitxQ/BH6qnD5mPIPKvxH0QATC8ee5bwnNBEKI0B+kNwEaTtjqv5yRdZa8AXN+S3
M+ZHktabhN78jqHh2Dd5b8uuTq+sqrPGfckysVrPu8HZ641I+XN6FHVgMY1AFleA
PClUS6iWOIXJYseFgQiilqy460N/6oOYknjkMLvjGrqhRvLqUWiyiqjAPNcs4S2O
vgKR8yBhK7h9gHWhL2AJ6AQ2YAm3lnoV6dv6+gXmNLeGUo6QHhg3Clh9GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9qLUDSgV9tM3EIU6LMGKpFYsJZMB8GA1UdIwQY
MBaAFAqJ6HQWAjm68Jji490EZz6LyC/9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ29ub2RCWUNPYnJ3bU9MajNRUm5Qb3ZJTF8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8wM2FhZDAtOWJlOC00MmIzLWI0MTIt
MzVmNGUzNTJjZTllLzEvQ29ub2RCWUNPYnJ3bU9MajNRUm5Qb3ZJTF8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8wM2FhZDAtOWJlOC00MmIzLWI0MTItMzVmNGUzNTJjZTll
LzEvQ29ub2RCWUNPYnJ3bU9MajNRUm5Qb3ZJTF8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCZXwidJ
+IdzrUxRdbjbYsUAL8wIlfs2qUwuSquTBSR7uo6ElcPUmSRX3XjDeg2swPFikd/W
B1Tql1jbVDKPYrlspEOa9cXuzH0Zgq/6MInhJ7mp7vu46KOLlHNbj29pBmf8373M
EZ2WUOrGuazSemyBvl+HWo+X8AZ6/uoKMaPTrCUzIAoPowJfbVQxxU5shIT/zULi
TXAInYWV8tcHEsBzYapcYuaZiMDftg7sMTRGOjQYHDvcJUfUM89/khFAC/pB1Y4O
ebjAaCE04S0hQww7pfCm8gkeJfuUbO6ZHy/ZQKmydABPKCqK/oSdJLQQM9pFb1H/
cMoLq/BIKRmgEg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:39:01 2026 by rpki-client