Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
File:                     0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft (raw, json)
Hash identifier:          6co19yCKBEOQOgPmIEtSYeppBoqYibyHBAGmp9x/JTA=
Subject key identifier:   E9:98:35:15:17:C8:DC:27:76:13:9A:27:D5:21:6D:D2:89:96:34:E7
Authority key identifier: D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A
Certificate issuer:       /CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
Certificate serial:       01A0D2009DF42478536B4D18F379B131E320
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
Manifest number:          1A6B
Signing time:             Thu 24 Sep 2026 06:00:50 +0000
Manifest this update:     Thu 24 Sep 2026 06:00:50 +0000
Manifest next update:     Fri 25 Sep 2026 06:00:50 +0000
Files and hashes:         1: 0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl (hash: cWFn2Iq449/xbaNqTCQQse4nWoqT3KclaVg8CapMP0Q=)
                          2: UFUNHcp59zFp-s7epnaBCk3fSDI.roa (hash: 5JNnpeUYOHWtCY7aisWTKc4iY+kJ/fdA3iBaqT6fPPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 06:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:00:9d:f4:24:78:53:6b:4d:18:f3:79:b1:31:e3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
        Validity
            Not Before: Sep 24 06:00:50 2026 GMT
            Not After : Sep 25 06:00:50 2026 GMT
        Subject: CN=e998351517c8dc2776139a27d5216dd2899634e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:b4:77:df:97:00:f2:1c:37:32:ee:4e:2c:
                    18:a6:0d:01:c4:fe:57:13:45:db:71:3e:fe:34:9e:
                    dc:72:b8:2e:16:f5:67:99:7d:43:43:19:09:82:a1:
                    48:e8:92:4f:cf:0c:67:ad:ca:3c:bf:b9:51:32:dc:
                    2e:7d:e6:a5:65:f8:4a:3d:6f:77:8d:0a:3d:0e:1b:
                    ed:a9:fe:8f:77:44:3f:20:26:9b:fa:29:bc:b3:6b:
                    ff:60:07:41:9b:eb:56:9f:68:42:23:6c:5a:48:48:
                    e1:62:7e:c6:75:d0:8f:55:92:0b:af:c7:86:86:77:
                    e5:eb:fd:89:62:1a:34:39:f6:cb:db:52:cd:fc:44:
                    a9:c7:69:c4:be:69:fa:78:16:71:13:3c:ae:f6:63:
                    da:43:e1:c4:66:6b:fa:d5:e4:18:b7:66:89:2e:b4:
                    60:e6:ed:84:24:1c:19:19:1b:1b:83:eb:a3:4b:3b:
                    72:27:a4:c2:64:6c:00:f8:e7:8a:c2:68:35:0a:d6:
                    1c:7d:df:2d:6a:6f:81:fe:87:c2:9f:55:d9:1d:4d:
                    af:bf:65:89:57:a1:e9:ef:42:1c:ac:5d:bf:25:82:
                    7a:fe:c8:55:92:1c:cf:f4:ff:69:06:82:08:99:cc:
                    0a:65:2d:e1:48:f1:1d:36:4f:33:94:12:8a:90:df:
                    32:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:98:35:15:17:C8:DC:27:76:13:9A:27:D5:21:6D:D2:89:96:34:E7
            X509v3 Authority Key Identifier:
                keyid:D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:e1:74:0a:0c:97:a6:ec:92:f2:aa:8e:27:0b:21:a1:bc:1d:
         f0:e8:d8:ed:d5:fb:22:aa:5c:a6:7b:d4:7f:4d:9c:27:74:38:
         b5:8b:39:a4:8b:4e:e3:c1:7b:7a:45:4c:62:74:c5:e5:3b:47:
         88:a4:cb:f0:0f:ed:37:8a:ce:88:07:32:a4:84:5c:2a:ac:55:
         df:ba:76:08:10:1c:9b:07:00:53:c9:e5:de:7b:14:c4:24:3a:
         7a:51:1f:e2:ad:46:24:23:75:ed:73:79:43:9b:c8:9f:c7:0e:
         11:79:cc:3b:ac:24:5a:17:03:06:95:72:ce:61:66:e8:82:4c:
         8b:8c:d7:96:1d:3d:e9:63:df:5c:9b:66:64:35:e8:bd:18:65:
         1b:a4:47:6a:dd:07:6c:92:a0:4b:fb:b2:e7:b4:39:ab:4a:b0:
         ed:64:4b:60:7d:2c:8b:90:14:88:fc:28:63:b9:36:02:9c:37:
         ec:25:48:14:f3:d6:7d:71:28:2e:f9:e0:95:92:50:aa:36:a5:
         b3:70:74:20:1b:2b:b9:c8:dc:dc:e8:e5:21:8b:9d:a2:fb:df:
         4a:33:ff:33:03:e3:a7:33:f7:cf:db:39:37:75:1e:c8:7e:31:
         68:ba:f5:f7:8a:0b:0b:05:fb:66:fd:d7:32:5b:f8:f4:44:68:
         d2:7a:99:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:36:18 2026 by rpki-client