Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
File:                     OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft (raw, json)
Hash identifier:          TAkoBkmiSm/QeBzeXpCNSFvIgv/kTyvmLpxKmL83PB4=
Subject key identifier:   80:2C:5B:2A:E8:F1:7B:33:7C:53:46:E4:BF:64:B9:D7:7F:10:83:BE
Authority key identifier: 39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
Certificate issuer:       /CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Certificate serial:       01A1141800DDC9D20443D1DF7A78CB40CE08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
Manifest number:          1109
Signing time:             Wed 07 Oct 2026 02:01:19 +0000
Manifest this update:     Wed 07 Oct 2026 02:01:19 +0000
Manifest next update:     Thu 08 Oct 2026 02:01:19 +0000
Files and hashes:         1: OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl (hash: Smu2ZeIgaVVQmyXJAx+n98qY15pbDE/IpNllqg7dGiw=)
                          2: U_9ae0dR5bvWF_m8_-n5IQjoXho.roa (hash: YhkIXrg11/s9MnoBurHE21hW+DopIbiFzMqganoNxbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 02:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:14:18:00:dd:c9:d2:04:43:d1:df:7a:78:cb:40:ce:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391e994a95012d92fb51a28c8a650ed9f97737b8
        Validity
            Not Before: Oct  7 02:01:19 2026 GMT
            Not After : Oct  8 02:01:19 2026 GMT
        Subject: CN=802c5b2ae8f17b337c5346e4bf64b9d77f1083be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:74:8a:6f:78:d1:1a:72:91:3a:7a:60:85:
                    3d:68:23:e4:b7:82:0e:dd:47:56:3c:ab:7c:1f:5c:
                    96:c1:c1:eb:c4:1d:2a:51:9e:8e:89:42:bf:5e:b9:
                    60:f4:43:d1:0b:58:f2:df:d1:d0:c1:29:41:47:1e:
                    a3:20:79:18:2e:26:bf:45:74:2c:30:0f:30:46:33:
                    05:81:e5:78:d3:e6:21:ae:f1:7c:cc:f0:8e:81:02:
                    1c:ab:ec:01:5b:fe:e0:5b:6d:cb:77:b0:bb:bd:19:
                    6d:56:70:78:48:1c:89:84:73:50:cd:8f:f9:35:f8:
                    09:ae:37:75:76:44:f0:81:3d:9d:10:a6:03:7c:4d:
                    c7:ba:d4:df:eb:bf:de:cc:7c:d6:8b:d5:83:df:17:
                    2a:68:e9:c8:36:cd:00:3b:88:46:57:d7:7f:70:4b:
                    f4:2f:84:10:24:50:28:db:84:e8:73:82:9b:c5:49:
                    af:3c:62:99:ae:77:84:8f:dd:91:83:ae:3c:e7:37:
                    51:82:99:f2:9a:71:51:08:36:7f:12:58:93:d9:7e:
                    4f:12:7b:bb:01:db:b5:6f:73:9d:71:8b:9e:4c:94:
                    a2:aa:02:3c:52:ce:75:ab:9a:88:fd:f6:b8:01:12:
                    fa:2e:32:5f:ab:48:92:88:93:d8:0a:fa:27:bf:be:
                    af:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2C:5B:2A:E8:F1:7B:33:7C:53:46:E4:BF:64:B9:D7:7F:10:83:BE
            X509v3 Authority Key Identifier:
                keyid:39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d8:3a:5a:0a:f8:7e:96:fe:ad:cc:ba:8f:b4:e6:82:23:92:
         d3:df:e1:1e:ac:70:26:98:41:5d:ee:5b:49:59:eb:d4:79:6c:
         cb:2d:53:d5:98:b3:73:5d:2a:6a:1e:ed:ea:fc:b5:a0:25:b7:
         b4:27:b0:2f:a7:78:a0:3d:f5:7a:f9:59:a0:80:97:0d:71:75:
         f1:19:22:9c:03:f3:91:0e:f8:cd:03:2e:f3:d2:31:1e:24:ae:
         fe:bf:bf:cb:25:d9:40:bb:e7:4c:d4:b5:37:cd:bd:c4:57:73:
         c0:53:5a:83:f1:56:0e:82:ac:68:e5:11:56:80:62:af:d2:2e:
         a1:b2:f8:ae:61:19:a3:e9:19:de:61:8d:d1:55:75:23:95:17:
         2f:3e:8a:6c:4f:bd:4b:1d:f0:10:df:4f:6d:17:c6:d5:aa:39:
         c6:1e:c4:3d:5e:44:a6:5b:4f:6b:ed:78:61:0d:66:c2:26:2f:
         97:7e:79:92:31:ad:a6:4d:20:d1:27:a7:eb:94:c3:8d:17:75:
         07:68:41:b0:9f:13:81:b0:a4:96:17:5b:fe:f7:ee:6d:62:d7:
         bf:7c:e2:db:79:77:6b:f0:d2:ac:6e:ad:d6:c7:0c:a0:63:a0:
         e4:6e:8a:cf:83:b0:80:a2:ee:4f:f2:34:be:de:a3:1d:3e:06:
         10:d3:9d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 10:09:09 2026 by rpki-client