Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
File:                     oSCGrcccvsWuoqH4lU36ZCtTDDs.mft (raw, json)
Hash identifier:          Aj8dEHxS7Z6euaf8BFgk02se82SdAhXaAMjCGMyt1ng=
Subject key identifier:   DD:26:C6:A4:68:2A:CB:FE:26:F9:60:CE:23:CB:5A:84:99:71:0C:E3
Authority key identifier: A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B
Certificate issuer:       /CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
Certificate serial:       01A0DD2A5BF5596345877ABF9709C5102C5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
Manifest number:          1A74
Signing time:             Sat 26 Sep 2026 10:02:15 +0000
Manifest this update:     Sat 26 Sep 2026 10:02:15 +0000
Manifest next update:     Sun 27 Sep 2026 10:02:15 +0000
Files and hashes:         1: 0xOSlFF4qEJ0-V611FUixhfdX0Q.roa (hash: 2cl0zm8Cn1RFnkSxPtYibLq9wI+6x0kOdV+BL5DuDG4=)
                          2: oSCGrcccvsWuoqH4lU36ZCtTDDs.crl (hash: pQqyk5h5GfV0hcGpV4WNfKOhTlvUy/8FlwRIOaJMcTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:2a:5b:f5:59:63:45:87:7a:bf:97:09:c5:10:2c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
        Validity
            Not Before: Sep 26 10:02:15 2026 GMT
            Not After : Sep 27 10:02:15 2026 GMT
        Subject: CN=dd26c6a4682acbfe26f960ce23cb5a8499710ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a2:db:bb:5c:a8:14:1c:67:a3:01:cc:1c:bf:
                    b3:6f:6b:64:6f:d8:36:de:c1:2d:b4:65:4b:05:1a:
                    ab:59:44:91:2d:2d:8e:a2:a3:fc:39:36:b7:14:de:
                    1c:97:f1:38:fb:6e:98:d4:95:d8:65:58:0e:59:67:
                    35:41:cd:c5:57:e2:73:8f:1b:00:fa:f5:e8:40:3e:
                    61:89:f6:5d:45:b0:d0:98:00:6c:ae:c2:54:cb:83:
                    e9:c5:62:ec:7c:15:65:06:89:b0:21:45:76:93:32:
                    af:05:d5:be:64:d0:da:b5:88:fb:d0:37:45:49:5e:
                    08:80:b3:ed:ce:64:d5:5b:90:b6:ca:79:c6:1d:8e:
                    30:62:e1:3e:0a:ed:62:dc:a0:69:91:42:ea:9c:cf:
                    7b:ef:40:41:fa:58:58:b1:ee:a9:48:8d:24:06:9d:
                    33:76:4d:91:80:7d:c7:a8:a6:91:70:99:c3:0d:5e:
                    e8:97:43:23:01:65:1e:b5:17:7c:8c:e7:08:14:0b:
                    16:31:29:ff:44:fa:22:32:75:3c:0a:1d:d9:12:c7:
                    36:b9:88:65:de:ca:f3:20:13:bb:21:94:ef:27:54:
                    95:7b:56:37:01:c0:a9:48:97:3a:99:00:b1:a6:8e:
                    11:97:4b:d4:9e:df:fc:8b:0e:71:f6:89:49:4e:9f:
                    9b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:26:C6:A4:68:2A:CB:FE:26:F9:60:CE:23:CB:5A:84:99:71:0C:E3
            X509v3 Authority Key Identifier:
                keyid:A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:8b:f3:18:67:0c:90:7e:45:ca:01:b6:e0:d6:1f:e8:a7:03:
         f8:09:1a:4a:2c:cb:33:76:0c:f1:45:3d:65:03:4d:5c:5f:ed:
         19:cd:d7:ef:4a:56:b3:d6:cf:d0:3b:06:38:be:95:88:cd:98:
         48:d2:0f:a4:d1:08:45:a1:f8:c2:a8:4a:80:db:fa:5a:69:1a:
         b3:f4:aa:95:b7:b8:91:a3:f9:a9:12:91:39:47:4b:83:29:78:
         23:04:f5:17:19:4b:84:0a:b6:55:84:3b:87:11:15:2f:08:81:
         32:41:ba:80:3a:35:70:b6:3c:b0:22:fb:86:c1:9e:90:42:3c:
         f9:d2:da:23:4c:f7:06:01:d5:a2:8d:b4:f0:b0:84:14:2b:99:
         e4:13:04:89:78:15:ad:80:8d:85:a7:a6:68:e6:98:c5:55:bc:
         d2:87:91:eb:f4:82:a7:8f:eb:65:bf:5f:d3:98:9b:c0:88:b2:
         34:8c:06:ae:48:f7:c5:9d:af:f1:b4:33:bd:41:ef:3d:00:c4:
         7b:09:f3:29:c0:c3:c0:a3:83:41:12:ff:37:4e:e4:f1:d2:1f:
         30:94:2e:3d:4e:ef:82:d7:fb:68:5e:ef:2b:7d:6e:17:73:16:
         41:60:c0:30:7d:bc:1f:f3:ee:ea:41:23:c2:24:22:9a:ba:b9:
         99:81:28:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:18:13 2026 by rpki-client