Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
File:                     0vONSutNAojbuFTR6uC9itP4Qfo.mft (raw, json)
Hash identifier:          kAq1bXxXhCW9Dj8IAj+fwwxqicXvSUbOyAXaAroJddY=
Subject key identifier:   A6:74:52:55:BB:AD:2C:B9:77:B8:F3:B6:6E:A4:BA:2E:2E:07:5C:D8
Authority key identifier: D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
Certificate issuer:       /CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Certificate serial:       01A0DA5FBCDD60595C940D3D894E84F7FFE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
Manifest number:          1A71
Signing time:             Fri 25 Sep 2026 21:01:42 +0000
Manifest this update:     Fri 25 Sep 2026 21:01:42 +0000
Manifest next update:     Sat 26 Sep 2026 21:01:42 +0000
Files and hashes:         1: 0vONSutNAojbuFTR6uC9itP4Qfo.crl (hash: z3BqEZEZ/caW/x2hNBx3x9gz13HFpQ7ea2QheorO2ws=)
                          2: tquIiBHdfRgZoSkv66J5g5_rmsI.roa (hash: ewRKCXj1KUDIVFZwB0RpxCjNpMk+Zl5DzmkGO5LloCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 21:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:5f:bc:dd:60:59:5c:94:0d:3d:89:4e:84:f7:ff:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
        Validity
            Not Before: Sep 25 21:01:42 2026 GMT
            Not After : Sep 26 21:01:42 2026 GMT
        Subject: CN=a6745255bbad2cb977b8f3b66ea4ba2e2e075cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a7:25:4e:61:71:80:97:85:d8:d0:13:c9:f0:
                    a1:cc:4a:b4:fb:02:1e:50:78:0c:8d:91:9e:d3:52:
                    03:63:59:43:2a:90:18:2d:ea:9b:3b:f6:87:ed:4d:
                    a8:da:97:9e:d7:24:48:dd:39:3a:0d:0e:13:ac:62:
                    0a:f1:e0:0b:54:80:15:35:d2:96:cc:dd:37:84:f9:
                    4a:ad:a9:b9:72:88:a4:65:cc:0f:75:97:00:32:56:
                    c2:b5:8c:d1:05:4a:3e:9a:58:0d:04:cd:85:c8:e1:
                    3b:5e:6a:0d:74:fa:cd:27:4c:40:72:7b:22:0e:1d:
                    5b:fe:c6:ca:60:33:66:b2:3c:95:bc:4f:a7:e8:f8:
                    25:44:b3:31:74:35:18:68:f8:11:36:a8:07:b2:01:
                    60:68:ae:20:9a:0a:a2:80:0a:af:ec:ab:c1:57:53:
                    8b:2f:23:74:43:bb:bd:01:99:7f:e9:22:5d:92:52:
                    94:a7:54:9f:0d:5f:57:3f:f6:72:67:46:3f:65:06:
                    35:b9:5a:9d:54:f5:8f:7b:8f:a2:99:1d:df:3d:b4:
                    fb:11:7d:81:59:8f:9c:ad:d5:df:7b:1a:3f:7b:8c:
                    da:64:65:ae:15:32:c6:28:c3:04:8e:2b:54:24:88:
                    41:50:a3:84:b4:68:54:ba:9f:0c:6d:e1:d9:46:ce:
                    4d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:74:52:55:BB:AD:2C:B9:77:B8:F3:B6:6E:A4:BA:2E:2E:07:5C:D8
            X509v3 Authority Key Identifier:
                keyid:D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:86:08:d4:6f:6a:fc:11:74:5f:ae:7c:18:ad:0e:0b:38:e1:
         cc:56:fa:18:54:50:b1:e3:6c:0d:f3:0e:93:3c:60:1d:25:30:
         40:e5:6e:de:e6:2b:93:e6:2f:2d:8b:cf:a8:bd:d3:59:29:7e:
         cb:bb:14:c2:2e:d6:55:a7:57:41:d8:3b:aa:53:15:19:f2:1c:
         66:d5:c9:59:03:00:26:3c:a9:eb:f2:fd:e4:2b:ca:76:22:e9:
         61:26:b7:12:2c:db:ce:85:ad:dd:a9:44:12:6a:06:3a:7f:0f:
         38:44:db:3d:4a:8e:9b:60:3b:93:59:e3:1a:08:28:a7:a9:b0:
         71:78:7d:ed:62:38:5d:1e:02:33:7d:6f:66:ef:4b:03:42:e6:
         55:b0:bf:17:fd:21:5d:9b:01:b1:fc:86:00:4b:aa:5a:eb:2e:
         17:4d:a1:76:ef:ea:57:3e:a4:bd:3e:89:9c:9a:29:16:a0:c0:
         72:e4:80:99:6e:08:50:37:e7:b3:2c:c9:c1:5e:27:a1:54:5c:
         aa:61:d0:04:d5:89:34:47:c8:85:8e:52:cc:5d:03:fa:19:0b:
         ba:af:1d:71:ef:5e:24:d9:1c:5f:9d:8e:6a:c4:e7:7c:23:bc:
         87:b7:15:9b:da:19:59:6d:d6:3d:bd:c2:2d:c4:dd:4b:33:b7:
         1d:47:0a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:43:52 2026 by rpki-client