Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.mft
File:                     oEGdRgkuRJjImA9ydB3ICBKViRM.mft (raw, json)
Hash identifier:          4QvaXk3WQ5ItTLwPJW0ojpZ0FVGdkHTnWBdeoguxDfQ=
Subject key identifier:   67:CC:8B:D0:84:0C:4B:11:83:0D:D6:EA:0B:86:AF:44:83:BB:5D:8E
Authority key identifier: A0:41:9D:46:09:2E:44:98:C8:98:0F:72:74:1D:C8:08:12:95:89:13
Certificate issuer:       /CN=a0419d46092e4498c8980f72741dc80812958913
Certificate serial:       01A1347DFAEFA1E1696CB38E7BA67475C2D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oEGdRgkuRJjImA9ydB3ICBKViRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.mft
Manifest number:          0119
Signing time:             Tue 13 Oct 2026 09:00:33 +0000
Manifest this update:     Tue 13 Oct 2026 09:00:33 +0000
Manifest next update:     Wed 14 Oct 2026 09:00:33 +0000
Files and hashes:         1: bYlwrMMouNe0wX8geEjx6w5BJcQ.roa (hash: L0irFgfGqAy5AaADSGRWA2XK+/VEh5b8QXvaP7jtIlM=)
                          2: oEGdRgkuRJjImA9ydB3ICBKViRM.crl (hash: R4V8FtCYP5ertrerxsggrUH3Qzbe3R2DnGcVTRn0LTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oEGdRgkuRJjImA9ydB3ICBKViRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 09:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:34:7d:fa:ef:a1:e1:69:6c:b3:8e:7b:a6:74:75:c2:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0419d46092e4498c8980f72741dc80812958913
        Validity
            Not Before: Oct 13 09:00:33 2026 GMT
            Not After : Oct 14 09:00:33 2026 GMT
        Subject: CN=67cc8bd0840c4b11830dd6ea0b86af4483bb5d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:ef:ff:04:6f:88:71:78:75:74:a8:9d:3c:
                    67:14:b0:72:b4:99:5e:d0:9a:18:7e:c3:b6:9c:08:
                    12:1e:43:b0:9c:c3:42:1e:0a:02:79:bf:31:a4:ec:
                    cf:a4:20:13:c5:28:41:1d:19:e8:c1:4b:67:41:6c:
                    cf:2a:e7:62:3d:cd:92:a7:91:50:f9:6c:13:1e:2b:
                    62:07:9b:06:0d:75:95:79:ed:ff:4a:63:ff:d6:b7:
                    15:d6:33:42:c8:df:70:16:7a:45:73:6d:5b:fd:08:
                    c5:40:68:4c:1a:fd:51:57:d7:d8:2c:54:b1:ae:55:
                    0f:25:dd:d1:86:28:88:a8:30:cb:04:69:a8:65:c9:
                    90:68:8e:c3:1c:c4:87:9f:3c:e7:69:54:c0:cb:3f:
                    13:93:85:eb:95:e6:73:3a:f8:d3:55:d9:ee:75:23:
                    a7:eb:22:51:bb:16:c2:88:7b:d7:f4:4e:6e:b0:0d:
                    7a:5d:67:74:5d:ed:93:14:de:6e:15:93:dc:96:8d:
                    90:7b:68:0e:65:62:09:0a:80:2b:5a:f7:48:b2:c2:
                    c1:ec:3b:15:11:4e:73:8a:29:d7:55:eb:45:36:81:
                    b7:34:f1:39:0d:6b:ca:88:08:bd:1a:4c:7c:06:eb:
                    ac:f7:50:4c:c0:84:26:60:eb:57:7e:42:ff:7c:b6:
                    69:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CC:8B:D0:84:0C:4B:11:83:0D:D6:EA:0B:86:AF:44:83:BB:5D:8E
            X509v3 Authority Key Identifier:
                keyid:A0:41:9D:46:09:2E:44:98:C8:98:0F:72:74:1D:C8:08:12:95:89:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEGdRgkuRJjImA9ydB3ICBKViRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:0c:f0:e4:ac:2d:46:8b:0f:3a:bb:b8:c3:9e:c6:70:a7:63:
         db:08:1d:da:7e:2a:3f:88:1f:92:3a:66:a2:38:0f:5e:c2:69:
         78:46:85:cc:1f:9e:03:58:88:19:5c:2a:3b:2a:0f:32:f1:d4:
         8c:e5:df:62:a9:62:cd:09:e3:02:46:b3:01:12:fe:4b:06:ef:
         52:c4:e7:df:f2:11:2f:6a:05:10:1d:50:e0:6b:05:53:78:8a:
         fd:a9:8e:df:20:bb:d2:f9:d3:25:3d:fc:82:21:30:5c:8f:26:
         2b:ca:5e:22:60:4c:19:43:48:4a:36:35:b5:45:9c:34:76:b4:
         c8:e0:be:c4:d2:0d:4d:7c:07:60:3e:42:c8:25:45:8b:76:a3:
         a7:1d:c6:7e:c0:db:35:16:27:cd:a2:02:f5:3d:ee:71:b5:a4:
         df:9d:ae:cc:24:70:4d:e7:7b:2f:29:30:0a:bf:ac:6b:39:29:
         a2:2d:aa:6a:08:c3:f2:77:0b:64:b1:e1:58:04:62:5c:62:b4:
         67:ed:44:9c:06:c0:d9:7c:f4:4b:c8:9e:f5:be:c9:da:90:83:
         14:b9:95:fe:80:25:9c:e2:70:a2:1d:78:8b:a5:f2:b6:b7:c2:
         8f:06:5b:af:85:d2:9d:63:b5:ed:53:a8:8e:5f:7b:f5:24:d9:
         ca:2f:86:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:32:14 2026 by rpki-client