Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
File:                     rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft (raw, json)
Hash identifier:          XntthjSI82+qO5bFL8VX1BB8wSF4TWdf/3xFlVIUmCM=
Subject key identifier:   89:78:14:99:8C:67:4E:C7:CC:00:F8:4B:38:FE:42:38:C4:30:2B:A6
Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
Certificate issuer:       /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Certificate serial:       01A1081437EDD8C51A0CFEEE09742A65BE1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
Manifest number:          06AB
Signing time:             Sun 04 Oct 2026 18:01:45 +0000
Manifest this update:     Sun 04 Oct 2026 18:01:45 +0000
Manifest next update:     Mon 05 Oct 2026 18:01:45 +0000
Files and hashes:         1: D1uepCAmRlFVjKTUqfMxFmzOti0.roa (hash: pf7DS73sBkltlYtAHV2Wkt/8vgHhRENJ2syRZHBzVdQ=)
                          2: rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl (hash: 5may5gNIQIWsuG68+wJ06hbO8/SIu9kaPHRmkIZtZJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:08:14:37:ed:d8:c5:1a:0c:fe:ee:09:74:2a:65:be:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
        Validity
            Not Before: Oct  4 18:01:45 2026 GMT
            Not After : Oct  5 18:01:45 2026 GMT
        Subject: CN=897814998c674ec7cc00f84b38fe4238c4302ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a0:ad:1e:c2:d3:e2:aa:f4:45:c4:3b:c0:00:
                    3d:d5:2a:08:b8:bc:d4:a7:5c:91:1c:5b:d3:b4:79:
                    f5:19:da:56:2a:75:c7:cc:e8:8d:98:46:88:c0:e8:
                    6b:c0:10:12:7a:73:8e:8c:35:a4:c5:b2:35:e7:1a:
                    0e:be:c7:c3:3f:f4:18:b5:a6:05:51:c2:00:b3:e4:
                    0f:5c:fb:cb:77:89:9c:f9:fa:c5:df:8d:8e:a0:76:
                    a2:be:12:d9:b3:7c:c5:e8:f2:74:19:38:f1:4d:60:
                    9f:ac:cb:54:8f:54:a2:32:db:6a:b8:42:1c:f2:2c:
                    03:a4:69:80:13:27:29:50:ee:33:0a:81:9a:b9:96:
                    2d:57:68:8e:8e:36:3a:c2:be:f1:04:64:3b:e6:07:
                    42:9b:44:ab:8b:7f:59:cd:5a:19:9c:a5:68:38:6b:
                    b8:5e:86:81:9d:ef:fc:cb:9e:b9:56:50:6b:41:d2:
                    f3:04:e5:b7:8f:1c:d0:12:36:af:fb:aa:eb:81:8f:
                    b2:e1:4d:8b:3b:8f:f4:7d:f7:6b:3c:7c:b8:a7:5b:
                    26:20:08:ec:e4:bd:54:81:e6:c2:5b:86:83:c0:5f:
                    6e:eb:a9:f6:f0:c5:e3:00:31:a5:35:ca:eb:c4:86:
                    8c:39:9e:7b:3b:55:30:a1:c3:89:71:3c:00:b3:ae:
                    bf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:78:14:99:8C:67:4E:C7:CC:00:F8:4B:38:FE:42:38:C4:30:2B:A6
            X509v3 Authority Key Identifier:
                keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:94:c4:42:a6:66:c7:07:d7:6d:ef:33:75:bf:d0:b1:d4:3e:
         70:77:3f:ba:18:90:15:1b:76:30:08:37:1d:9f:ee:eb:17:20:
         a8:6a:11:a9:d1:5b:86:63:7b:cc:91:c4:35:04:69:77:82:60:
         3b:e2:aa:39:fa:e8:a5:ac:05:59:30:80:ae:c4:a2:eb:b7:b3:
         d0:8a:a9:0f:8b:19:50:65:72:74:23:62:e5:05:f9:10:de:b0:
         85:d3:e7:39:57:80:7a:b4:2a:e1:fc:c6:6e:a9:44:5d:b8:78:
         6e:ac:f3:21:88:97:8e:21:0b:1e:b3:57:b6:28:3a:7d:ac:08:
         c7:af:02:17:f8:e0:7e:67:e9:84:70:70:98:0d:d2:d3:19:51:
         e2:c5:c1:f0:1d:f8:db:67:dc:9e:4e:1a:11:e0:13:23:37:27:
         e2:a6:97:96:a8:47:a1:9b:a2:54:64:ee:ef:2e:c7:2d:e8:17:
         84:56:ce:7c:db:bc:15:3f:03:31:4d:c1:50:66:57:5a:cf:be:
         53:83:7c:9f:84:5f:e0:24:cc:61:d8:1f:41:6f:e0:10:d4:ee:
         d5:a9:dd:3c:dd:8c:53:5e:2f:e1:5e:75:e4:de:9d:35:89:1d:
         9b:25:4e:da:28:48:e6:a3:a1:a8:75:32:61:e9:72:03:b8:91:
         53:42:ca:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:36:12 2026 by rpki-client