Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File:                     oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier:          N4PI4DOBmm91t3YgpmuLY2ctTHyQsGEV5YIIBpKL1GY=
Subject key identifier:   73:C3:FA:30:85:64:3D:16:26:F0:C1:B0:24:5E:9E:BD:A2:F6:C9:E3
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer:       /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial:       01A0D2DEA7BDD2701F034A1BDAC6CBD1F835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number:          144E
Signing time:             Thu 24 Sep 2026 10:03:22 +0000
Manifest this update:     Thu 24 Sep 2026 10:03:22 +0000
Manifest next update:     Fri 25 Sep 2026 10:03:22 +0000
Files and hashes:         1: 0an2pQXOSUa9Qv0CDLezuYXP9Rc.roa (hash: GI3HMCo+UnX0/WFi5FDffbeewol6/ny0qWi9o7/s4mw=)
                          2: 3-zjNQeLr2VYnGvtAQl3wPrAttQ.roa (hash: oZEc3kU6X6afeD3VVmtRDKKInN6hBgwdLqV0FrQL9OA=)
                          3: 3xEx3bVGfXIchqPcHOE-UCr11f0.roa (hash: y+CVyDs3ZBJgnuFTk7NR2y3nV9NJmzoB4Ik1Ns4joJs=)
                          4: U8YrDUVn3egAnNyXxX_1fs7ypak.roa (hash: 0J1ye72rXLmhonZZf0ebjERiurn0AgXIl7ABqMnbTn0=)
                          5: gr24W9hYxDP-t_iDnbRQ3OZdbjk.roa (hash: 3hVp+1R1qAZlY2bc8T6diQXm1af3Uw7Bq4eqKsz2fRA=)
                          6: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: iOjNBtPOYRBnwR/uWYCSYlBhQQC7ledhNxSrFBTrpsM=)
                          7: sA9dK_96uoFn9OzLmWPj0jDqoGk.roa (hash: qjwTSEU6zfUdrsc6+xbvb6xBiHxiA+zK04XvFe2R5m8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 10:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:de:a7:bd:d2:70:1f:03:4a:1b:da:c6:cb:d1:f8:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
        Validity
            Not Before: Sep 24 10:03:22 2026 GMT
            Not After : Sep 25 10:03:22 2026 GMT
        Subject: CN=73c3fa3085643d1626f0c1b0245e9ebda2f6c9e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d6:a4:45:91:c1:96:0f:81:a1:a8:10:e6:b9:
                    65:95:2f:a6:2c:c0:e8:d8:8c:65:1c:dc:19:87:0a:
                    e6:6b:3d:25:b3:89:f9:c7:26:a7:5f:63:93:c6:20:
                    c8:7b:49:bc:5d:58:f2:79:f0:e0:30:98:4e:07:ef:
                    c7:29:ec:85:d4:58:55:77:67:eb:f4:55:34:61:fb:
                    2c:5e:63:b0:bc:19:1c:5b:35:35:fa:5e:27:f7:d9:
                    b5:d3:75:e7:96:8c:96:7c:8e:0c:8b:05:dc:d7:b6:
                    9d:be:a8:dc:49:9e:a0:0d:07:52:c9:51:81:72:73:
                    9f:39:92:ea:e3:a6:5f:70:81:88:14:39:cc:67:c5:
                    f4:75:26:ef:29:7c:da:2c:41:4a:57:d6:7c:22:61:
                    a8:a1:53:2f:8c:72:f2:23:b5:77:40:66:b2:9c:35:
                    96:3a:cc:1f:8e:39:6e:01:4c:0e:69:f4:93:1e:b7:
                    be:6e:51:31:56:9e:1d:5e:44:97:9f:db:84:54:d9:
                    c5:f3:fc:55:8e:40:5c:f1:94:51:a0:7f:01:6d:93:
                    78:31:81:d9:b8:12:e9:77:95:3c:df:3d:ab:0f:2d:
                    33:3d:5c:4d:a8:64:f9:a5:b4:4f:0e:f1:dd:a3:4a:
                    55:3b:09:af:ad:ee:3f:67:38:58:7a:39:fd:e1:9c:
                    74:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C3:FA:30:85:64:3D:16:26:F0:C1:B0:24:5E:9E:BD:A2:F6:C9:E3
            X509v3 Authority Key Identifier:
                keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:4a:f0:0c:6b:75:54:9b:ab:1d:7a:61:96:13:20:9e:b9:70:
         ed:c4:37:45:e1:fc:58:35:35:d7:62:93:50:40:ff:7e:f1:02:
         0e:46:b4:84:fd:e9:9a:f7:e3:79:59:6b:3c:03:6b:b8:e5:f7:
         ce:65:1b:ce:70:9f:20:6e:e8:16:40:a3:41:47:85:79:59:e0:
         35:cc:ec:b0:cd:f5:d4:7f:0d:f9:62:af:c7:a8:07:b0:95:34:
         a2:70:d3:ea:b3:8c:2a:91:c5:57:b9:67:9b:ed:6d:dc:a9:97:
         c1:3e:a0:59:2f:94:12:90:e5:3e:94:21:32:1f:2a:fa:88:b7:
         fa:73:91:45:20:34:ad:d4:2e:93:2f:d9:64:20:0c:00:10:03:
         24:aa:f5:7c:51:98:fd:3b:0c:40:b5:dd:a9:7c:fc:30:fc:f3:
         a0:e7:b2:1f:58:6a:f0:a3:da:db:d2:f7:aa:3f:71:db:56:b3:
         ff:44:8a:c7:20:d1:cf:5f:2d:18:2d:cb:b1:6a:c7:49:92:55:
         1a:47:84:1c:74:8b:ec:57:91:34:8a:17:7d:df:7e:27:4c:9b:
         26:9e:f9:0a:9d:dd:13:c4:ca:8e:c3:44:6c:ed:aa:ae:6d:61:
         2c:7b:df:d1:6f:09:73:8b:c9:6d:1a:f3:b1:10:0e:bc:e5:eb:
         33:79:a9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:25:23 2026 by rpki-client