Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
File:                     0dvzH9k3nKtcUK_TkqLukFcYg18.mft (raw, json)
Hash identifier:          3eA7ijAohcenAI/LUGalOvUrwlub3AHSFLXymuOpn8c=
Subject key identifier:   17:B2:20:92:3E:91:42:4D:D8:99:75:D7:BA:21:82:C1:FC:ED:6A:79
Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Certificate issuer:       /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Certificate serial:       01A0FD8FF7C153780BEC4468C0B91F837567
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
Manifest number:          159A
Signing time:             Fri 02 Oct 2026 17:01:05 +0000
Manifest this update:     Fri 02 Oct 2026 17:01:05 +0000
Manifest next update:     Sat 03 Oct 2026 17:01:05 +0000
Files and hashes:         1: 0dvzH9k3nKtcUK_TkqLukFcYg18.crl (hash: MyQ0Y60qUBbAfT7CPxke+ggdis0tTma6iGYlVim7i0I=)
                          2: vTP-a1JInjsi0zs43YUjMr0tQhw.roa (hash: AksN4qlHwN45fSCKy9ilLdGULzgppZOt64KCaKI1vlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fd:8f:f7:c1:53:78:0b:ec:44:68:c0:b9:1f:83:75:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
        Validity
            Not Before: Oct  2 17:01:05 2026 GMT
            Not After : Oct  3 17:01:05 2026 GMT
        Subject: CN=17b220923e91424dd89975d7ba2182c1fced6a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e4:30:7b:2f:b4:ed:fc:34:ad:cd:22:42:f9:
                    e4:05:cf:12:68:9a:57:99:17:bd:a1:ce:60:a0:c2:
                    93:bc:14:53:8f:18:d1:9a:8a:9b:09:56:6c:31:f0:
                    fb:1d:13:62:29:3e:e0:dd:0c:ea:60:b0:4c:cd:28:
                    07:8e:a4:de:a2:78:8a:34:34:1a:5a:4b:55:39:89:
                    a7:4d:72:1c:71:26:8d:8c:6a:df:f1:23:f6:6b:b9:
                    19:4e:a9:52:e7:c7:df:13:60:d9:f6:91:c7:45:f9:
                    b7:e8:38:e4:f4:35:7c:ee:e7:4f:58:6d:83:ac:29:
                    a7:a5:ad:e1:6a:81:c1:71:52:92:83:54:b0:5e:5d:
                    c8:33:b8:3f:0c:71:d4:d2:22:1f:52:2e:b4:3d:01:
                    89:03:6b:0b:f0:fb:24:d3:e7:35:71:5b:1c:c8:94:
                    cd:1c:9f:cc:d8:c7:e4:7b:3f:2b:b0:90:0c:de:ea:
                    9f:15:f7:c7:66:9a:f1:fa:d8:6d:0f:34:ae:a5:2d:
                    62:83:bb:66:7d:8b:3e:5e:79:ef:27:83:4e:6e:4e:
                    d7:9e:a9:d6:f1:be:fa:8a:71:f5:a9:d0:3a:18:de:
                    1b:53:46:da:31:e9:60:c0:46:f5:be:c2:20:77:1e:
                    6e:b3:e5:17:9f:54:1e:f0:30:20:8d:80:53:c9:b9:
                    56:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B2:20:92:3E:91:42:4D:D8:99:75:D7:BA:21:82:C1:FC:ED:6A:79
            X509v3 Authority Key Identifier:
                keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:cf:64:69:54:73:20:86:49:c3:78:bb:af:2b:e6:ca:a9:56:
         00:52:8f:d2:10:ed:8b:3d:ac:12:39:04:8d:5e:91:1a:c0:ba:
         a8:65:3a:38:ae:05:4a:da:f9:d2:32:dd:2f:f4:bc:05:bc:96:
         9a:cf:d5:7c:cc:2d:51:3b:74:95:80:f7:7b:bc:b7:83:a8:ee:
         30:ad:d0:dc:8f:09:9b:e2:84:1c:33:cf:a5:ea:6c:4e:42:b1:
         ac:40:32:6f:f1:d4:32:fd:f9:51:0d:41:c2:a8:9b:28:f7:15:
         d8:3f:79:fd:58:65:31:91:5e:3a:0b:c7:d9:13:bd:f4:92:83:
         3d:35:54:33:42:a1:35:96:b2:20:c5:57:fc:d6:15:ec:4b:96:
         c4:39:2a:85:2a:8a:79:f1:a8:f1:a7:0d:a0:dd:48:ff:f3:59:
         d0:19:b4:03:f5:3a:63:06:bd:b6:58:ee:39:9c:28:99:b4:70:
         e5:b7:2b:c3:47:94:21:83:b7:c7:7e:f3:97:40:00:43:1a:55:
         72:c4:af:c7:80:be:79:77:fd:fd:ce:bb:e7:c7:9c:f4:da:39:
         db:89:9a:69:b0:25:f3:0a:80:03:bd:c9:15:1f:25:65:49:94:
         29:ae:06:36:b7:4b:01:7e:11:87:4e:1e:93:39:af:55:7f:d3:
         a7:90:47:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 21:45:17 2026 by rpki-client