Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
File:                     0RE68_NruSoPL72v47Zx9rn876g.mft (raw, json)
Hash identifier:          g8QboAgtqgXjWh3+BMpsrv0WFiChKnfKhJh7XNMf6Aw=
Subject key identifier:   55:25:AA:EA:18:33:6E:D8:D7:12:6E:B1:2B:3C:2C:81:DB:8A:06:49
Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Certificate issuer:       /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Certificate serial:       01A0D3EF3B6AB85777006D439E292CC2A7CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
Manifest number:          0ABE
Signing time:             Thu 24 Sep 2026 15:01:05 +0000
Manifest this update:     Thu 24 Sep 2026 15:01:05 +0000
Manifest next update:     Fri 25 Sep 2026 15:01:05 +0000
Files and hashes:         1: 0RE68_NruSoPL72v47Zx9rn876g.crl (hash: 6V39kfMb9/SfpF6OF+oUS4oxTAYCyKKeAK0tmrMb0uI=)
                          2: BvyJ9VlIpALPuyQE8sebxED-YP4.roa (hash: 5Go0Jt+Ko1P3sZc36GUqZasMZpi+yqnYoeBDKhqHQ94=)
                          3: Ca0R-mhrFY6HFoHS1b5WT3pwjYg.roa (hash: o7q7JRHvs80nHIVjNQ3bsCLMG4wGtstYaFpsR/bUbvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:ef:3b:6a:b8:57:77:00:6d:43:9e:29:2c:c2:a7:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
        Validity
            Not Before: Sep 24 15:01:05 2026 GMT
            Not After : Sep 25 15:01:05 2026 GMT
        Subject: CN=5525aaea18336ed8d7126eb12b3c2c81db8a0649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1d:9d:40:a4:23:47:aa:e5:10:a8:b2:a1:7b:
                    d0:68:b9:35:4d:b9:17:7d:37:ee:ad:23:4e:fe:7f:
                    f2:6d:a9:4a:cb:69:4d:8d:f5:d6:f9:52:2a:77:84:
                    d0:40:db:35:3f:30:0d:47:b9:a3:32:96:19:1d:f0:
                    82:1d:2d:7d:82:ac:f7:e6:27:79:49:74:de:70:28:
                    2c:f4:81:42:68:32:5f:c6:8c:39:5d:c2:07:b4:b8:
                    53:3c:c7:6a:17:e2:df:f9:a2:79:3d:cb:f6:5b:c2:
                    87:b5:dc:ee:e4:a8:6c:c2:be:d0:e8:8f:58:cd:0b:
                    74:80:1d:98:d3:15:9d:ea:ea:6d:3d:6c:30:98:c6:
                    7e:91:1f:78:89:2c:2f:7e:f5:d1:e3:5d:16:99:2d:
                    02:ff:00:a8:f5:eb:aa:5b:ef:69:89:f2:04:55:07:
                    07:77:6b:58:95:38:47:0f:9d:1c:a7:2b:55:36:a8:
                    00:87:f7:83:f8:c2:0d:78:f2:b0:81:f9:99:6f:4c:
                    12:3b:81:ea:0c:72:68:0c:ec:27:7b:df:06:7d:f9:
                    43:08:e9:07:90:77:fa:5d:4e:a5:45:9e:76:82:9d:
                    d5:1f:af:c7:38:31:f6:94:4e:85:10:63:f6:f8:6a:
                    81:46:55:f2:62:8b:2d:87:12:26:48:26:f0:12:80:
                    23:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:25:AA:EA:18:33:6E:D8:D7:12:6E:B1:2B:3C:2C:81:DB:8A:06:49
            X509v3 Authority Key Identifier:
                keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:26:d7:f2:b2:ae:2d:4b:c3:1e:58:97:18:4a:25:db:9f:c3:
         53:06:cc:f4:4b:87:1d:16:91:e2:4c:b8:b7:09:26:b7:79:5b:
         f6:dd:2a:b4:02:6f:03:07:f9:d6:a2:79:2b:c3:e0:d6:00:5b:
         a9:88:d9:bf:1f:73:a3:4a:63:ca:84:8a:df:b8:45:4c:77:40:
         41:96:77:ae:94:80:db:c4:c5:8b:76:b3:15:c3:1f:39:ca:71:
         a7:63:43:49:4b:57:11:10:b5:4b:4e:8f:09:60:06:3a:fd:4e:
         73:89:55:7c:22:a7:e5:78:bd:75:ef:ab:9f:94:21:7e:a7:79:
         cd:b4:5f:d8:90:33:00:03:d4:7a:a5:08:18:40:18:6d:e3:48:
         7c:69:9a:a0:6d:22:e8:ef:e8:ea:c9:fd:1a:56:70:c2:d3:80:
         7b:fd:2e:b1:e4:e1:ee:42:2d:08:80:46:04:e0:7c:22:ca:44:
         5c:55:0d:d3:77:8a:6b:ee:b1:b2:4a:c6:07:29:fd:5b:2d:ba:
         ae:8a:6d:68:2d:f2:f1:e6:c8:22:e2:22:a2:ec:f2:4f:66:49:
         56:91:05:66:0a:cf:cc:17:8c:9a:bb:7c:1d:59:57:27:fa:0d:
         42:cf:8e:80:e6:0e:3b:5f:fa:e1:33:78:5e:3b:29:1b:05:4e:
         a2:f1:49:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:09:36 2026 by rpki-client