Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
File:                     OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json)
Hash identifier:          1dMtBvqtmP8+pl2A3uIuXmOWNS8JG46qMgAKT5+e07o=
Subject key identifier:   95:7F:45:DF:F2:68:52:70:92:17:71:0B:40:C0:F5:10:50:8E:27:9A
Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
Certificate issuer:       /CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Certificate serial:       01A0FCEBE46697922633240CE3F392869F72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
Manifest number:          0B61
Signing time:             Fri 02 Oct 2026 14:01:52 +0000
Manifest this update:     Fri 02 Oct 2026 14:01:52 +0000
Manifest next update:     Sat 03 Oct 2026 14:01:52 +0000
Files and hashes:         1: BtxvHCilSqt_99RwN54PMNqlIS8.roa (hash: FhEZYVel7CDKvGsL+NRAOlWLOkmBn5nDe2CgOk2RwyA=)
                          2: EK8_5y78AGqLmo0GGbxPtwvU6u4.roa (hash: DqcP+OCR4Q8YT44CeNIv9TZZJCGpzkYEM44m3rG+1XM=)
                          3: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: a7sr6QaWaTUzrhk4qYatYXuTxIjMnRCpw6ggt3YscbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 14:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fc:eb:e4:66:97:92:26:33:24:0c:e3:f3:92:86:9f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2
        Validity
            Not Before: Oct  2 14:01:52 2026 GMT
            Not After : Oct  3 14:01:52 2026 GMT
        Subject: CN=957f45dff26852709217710b40c0f510508e279a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d5:8f:18:98:23:25:68:10:96:e9:86:7c:fb:
                    ce:8d:14:71:aa:60:14:2b:8c:c8:2b:b4:31:9a:35:
                    bd:41:8f:05:62:20:ef:f0:71:aa:2c:e6:fd:a0:12:
                    8c:f8:3c:90:54:77:ae:09:42:78:50:fe:ea:12:f9:
                    a6:e3:4c:18:ae:4e:5e:b1:a2:30:e4:64:2a:9b:7c:
                    bb:db:89:85:a2:bb:06:2c:f8:60:dd:a8:97:4e:9b:
                    cc:33:c6:e0:ff:6f:e5:94:52:62:9c:18:23:29:6a:
                    8b:f6:21:54:58:da:d7:39:2b:3f:b9:a7:f5:18:ff:
                    61:f2:52:ea:df:8b:c8:9c:07:61:72:0f:7e:b9:e3:
                    c2:7f:13:af:95:94:e9:20:29:1f:05:67:3b:5d:08:
                    e4:5f:62:f1:2a:eb:37:82:b3:fc:98:10:a1:0a:22:
                    d7:9b:0d:41:57:42:27:0e:e4:0d:00:41:e6:f0:e7:
                    77:48:b6:5e:ed:f4:4c:93:a4:79:50:e1:63:49:47:
                    92:56:81:a6:db:aa:2e:9b:0a:dd:39:35:a8:39:87:
                    86:0f:c4:d6:b8:ca:5a:a7:5f:ce:2e:ce:fb:a6:dc:
                    19:cb:fe:e4:43:49:81:0a:32:a8:ce:e0:30:1f:72:
                    16:c2:ed:8f:52:0b:4e:86:35:ad:e7:de:82:20:ee:
                    b8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7F:45:DF:F2:68:52:70:92:17:71:0B:40:C0:F5:10:50:8E:27:9A
            X509v3 Authority Key Identifier:
                keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:3e:7f:82:20:3a:66:0d:f4:c7:40:1e:76:92:44:75:aa:3b:
         db:5c:6f:80:fc:25:38:65:47:e9:97:d1:2d:41:67:7e:fd:37:
         91:cd:4c:6b:db:67:1e:3b:e7:43:8f:7c:f2:1f:ac:15:e7:18:
         ab:61:cb:f3:6b:ee:8e:07:2b:6b:e4:f2:52:b3:e8:af:23:ff:
         94:ee:77:2b:6c:39:43:fc:28:de:21:9d:94:ba:c2:39:26:31:
         32:e6:66:00:8b:ac:be:78:2e:ce:c8:1a:ea:7d:2f:b1:56:c5:
         a2:a2:f1:1b:a8:7d:4f:2d:1a:4f:e8:3a:44:0f:7c:a9:00:63:
         3b:f8:aa:06:7f:0d:b9:8b:ec:e3:32:8a:9a:6a:d6:e6:3e:0f:
         9e:3e:3c:f5:c6:0c:52:1c:82:62:6a:43:05:24:a0:b7:ea:2a:
         f1:e3:ee:a6:81:da:6b:f8:34:72:56:df:fe:de:3f:33:04:72:
         d8:bb:3f:b0:7e:d0:bb:33:03:f2:45:10:f3:a3:b2:b3:2c:47:
         19:b7:f0:dc:bd:0d:2a:23:84:e5:be:ec:f0:01:68:de:51:93:
         c1:74:9e:cc:ce:e8:8e:65:41:31:5f:44:0f:b4:c3:f0:e3:7f:
         8c:6d:fd:ac:0e:58:41:38:f6:8f:25:c3:07:6c:65:d5:01:8f:
         26:9d:ad:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:11:20 2026 by rpki-client