Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
File:                     o2dNWISlCoTgfb32eY3cu5zCAy4.mft (raw, json)
Hash identifier:          qjXXBZ0W/z8VNb5423sg2JTD9zc9fW4a4qxmA7McV+Q=
Subject key identifier:   A4:3C:77:EC:08:E2:A4:A9:2F:3C:FB:57:23:00:A3:47:42:49:29:85
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Certificate issuer:       /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial:       01A0D5701E6DABCAC9AF3EBE49E25E116BA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
Manifest number:          17C1
Signing time:             Thu 24 Sep 2026 22:01:29 +0000
Manifest this update:     Thu 24 Sep 2026 22:01:29 +0000
Manifest next update:     Fri 25 Sep 2026 22:01:29 +0000
Files and hashes:         1: 1-LhYy5O9tb6HzVJhfevYGoe7Cio.roa (hash: vJCAr67NRf6C/SpjKV8FnklMKW5pSoRJKPp1iuCTt5k=)
                          2: CGNHFzHbF7-8UJqTLN4QMjGnXyU.roa (hash: rE1Gl4R/o9ubCNpESm4El4VIv8yy2mTFqLawhPoXG4E=)
                          3: GoGer3q61c1pv0WO9PNQkJUUi5k.roa (hash: K6VSlR6KNtxl21mECje8zFLv1N7LMc4/FDZa2iJw4VM=)
                          4: V6LgfABtzULswIbwgWkk1QCYEfs.roa (hash: bkqwmyw/v3/xFtzX8+VyDP6uHq9Nb9Kq0ZMb1n78bks=)
                          5: o2dNWISlCoTgfb32eY3cu5zCAy4.crl (hash: 7OE7OsiBjm45xpAiXpGMJCsqXqv1Yf4M+0abL6+jsmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:70:1e:6d:ab:ca:c9:af:3e:be:49:e2:5e:11:6b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
        Validity
            Not Before: Sep 24 22:01:29 2026 GMT
            Not After : Sep 25 22:01:29 2026 GMT
        Subject: CN=a43c77ec08e2a4a92f3cfb572300a34742492985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:13:d5:11:70:5c:0d:17:70:b1:4d:d4:0b:30:
                    cf:6e:88:32:07:57:e3:cf:96:45:af:78:29:24:a4:
                    fd:a4:53:9e:27:1a:22:0f:ea:6d:59:a2:10:d0:ed:
                    21:2d:f9:95:d5:4f:5f:55:e4:c7:4e:b9:6f:d1:12:
                    72:16:6f:4c:f1:5f:46:d1:96:52:22:ad:50:83:e1:
                    aa:4b:b0:53:71:60:87:93:61:ff:45:ef:30:41:1b:
                    d8:d3:ef:74:e1:f4:f8:1a:6e:3d:61:d2:57:d5:69:
                    68:64:f7:8d:12:76:d4:3f:d0:6b:63:f8:f0:5f:07:
                    7b:ab:b0:52:0d:a1:58:80:f6:09:e5:39:3b:f5:52:
                    9b:56:d1:c8:18:ac:ce:46:32:59:9e:61:f4:4b:f5:
                    3d:31:5a:29:92:28:22:b9:9a:36:b5:89:2d:e8:2a:
                    79:69:ab:42:32:f5:aa:8c:85:ea:cf:5e:c2:1d:ab:
                    42:9c:45:e8:ec:b3:a7:4e:b0:4d:2e:a1:74:64:dc:
                    51:99:d1:fd:3f:16:f6:33:46:ad:0f:77:0b:bb:1a:
                    7d:a6:b6:fa:82:e6:17:2e:05:b9:7b:ee:90:4c:c6:
                    93:00:71:2b:dc:62:f0:24:76:23:b9:f7:ee:9f:c7:
                    36:73:ea:4b:40:21:fa:04:71:de:15:81:5b:ea:fc:
                    cf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3C:77:EC:08:E2:A4:A9:2F:3C:FB:57:23:00:A3:47:42:49:29:85
            X509v3 Authority Key Identifier:
                keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c5:18:ca:ac:0c:ce:a9:c2:f9:7f:e9:c8:b4:d3:b7:14:30:
         f7:72:94:15:19:46:fa:4a:59:ff:54:d8:da:a8:bd:63:16:48:
         cc:23:48:19:60:7a:bd:85:1f:a7:0f:4f:06:49:95:84:27:c3:
         14:4d:00:6e:7b:d9:0b:9e:3a:59:b7:09:d3:04:39:bf:0a:d4:
         e9:09:b7:ef:c4:31:29:eb:53:8c:6b:d7:6c:6b:c4:8a:c6:9f:
         52:1a:9b:db:cf:9b:14:31:0d:d9:c9:29:fe:b0:3b:17:12:62:
         5c:6f:6a:8f:aa:ae:68:b4:b7:a0:01:74:e0:b9:96:c0:fd:cd:
         87:f2:ee:65:48:8a:0b:76:b3:b1:87:ca:19:cc:c9:8a:ae:d2:
         cf:19:d3:b0:8d:7b:5c:53:55:51:53:cc:aa:c7:57:af:4e:68:
         de:9c:dc:df:1b:ee:73:d3:8e:4a:ce:12:9a:82:28:22:7a:9f:
         cc:c1:bd:5a:27:db:1e:84:18:05:fb:dd:5c:38:cf:c0:04:a3:
         c7:2f:8b:40:0c:f9:3d:d6:2d:68:22:0f:40:6f:47:d9:04:ff:
         b2:c3:ef:3b:60:d0:75:25:75:d2:4d:6c:e4:bd:17:ab:bb:a5:
         b3:22:c5:d4:5c:cc:0a:94:4a:88:1a:ca:5e:55:98:46:e6:6f:
         6c:0d:14:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVcB5tq8rJrz6+SeJeEWukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNjc0ZDU4ODRhNTBhODRlMDdkYmRmNjc5OGRkY2JiOWNj
MjAzMmUwHhcNMjYwOTI0MjIwMTI5WhcNMjYwOTI1MjIwMTI5WjAzMTEwLwYDVQQD
EyhhNDNjNzdlYzA4ZTJhNGE5MmYzY2ZiNTcyMzAwYTM0NzQyNDkyOTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBPVEXBcDRdwsU3UCzDPbogyB1fj
z5ZFr3gpJKT9pFOeJxoiD+ptWaIQ0O0hLfmV1U9fVeTHTrlv0RJyFm9M8V9G0ZZS
Iq1Qg+GqS7BTcWCHk2H/Re8wQRvY0+904fT4Gm49YdJX1WloZPeNEnbUP9BrY/jw
Xwd7q7BSDaFYgPYJ5Tk79VKbVtHIGKzORjJZnmH0S/U9MVopkigiuZo2tYkt6Cp5
aatCMvWqjIXqz17CHatCnEXo7LOnTrBNLqF0ZNxRmdH9Pxb2M0atD3cLuxp9prb6
guYXLgW5e+6QTMaTAHEr3GLwJHYjuffun8c2c+pLQCH6BHHeFYFb6vzPDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQ8d+wI4qSpLzz7VyMAo0dCSSmFMB8GA1UdIwQY
MBaAFKNnTViEpQqE4H299nmN3LucwgMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTct
OWUyMjBmMDRhOTAxLzEvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTctOWUyMjBmMDRhOTAx
LzEvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMUYyqwM
zqnC+X/pyLTTtxQw93KUFRlG+kpZ/1TY2qi9YxZIzCNIGWB6vYUfpw9PBkmVhCfD
FE0AbnvZC546WbcJ0wQ5vwrU6Qm378QxKetTjGvXbGvEisafUhqb28+bFDEN2ckp
/rA7FxJiXG9qj6quaLS3oAF04LmWwP3Nh/LuZUiKC3azsYfKGczJiq7SzxnTsI17
XFNVUVPMqsdXr05o3pzc3xvuc9OOSs4SmoIoInqfzMG9WifbHoQYBfvdXDjPwASj
xy+LQAz5PdYtaCIPQG9H2QT/ssPvO2DQdSV10k1s5L0Xq7ulsyLF1FzMCpRKiBrK
XlWYRuZvbA0Uow==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:26:26 2026 by rpki-client