Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
File:                     oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft (raw, json)
Hash identifier:          gz1+qyq6CDfKr1z82AjxfiyqiHu9SmVs9ksrvc9zHHE=
Subject key identifier:   AC:0F:37:0C:E2:8B:14:77:1D:2D:8C:59:69:E3:98:DB:9E:FE:8E:93
Authority key identifier: A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3
Certificate issuer:       /CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
Certificate serial:       01A0D64C5436184E4E239F5D74135C505BCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
Manifest number:          018D
Signing time:             Fri 25 Sep 2026 02:02:01 +0000
Manifest this update:     Fri 25 Sep 2026 02:02:01 +0000
Manifest next update:     Sat 26 Sep 2026 02:02:01 +0000
Files and hashes:         1: aPHgHDs8wZHtsWjj-BGNDzZUqVw.asa (hash: xCblPYPS0g+4wFl3k4nN7Rdc1pcGx5xLzvzdxGTb7kU=)
                          2: oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl (hash: gdOU6vbF6CiRVyDjY4IMPk7e9qWyb9y79FL9G6bM8ds=)
                          3: rfnpKAqIl3YHBE0u0rKLog4npJ8.roa (hash: e2aXB5iCVJvKeAcAsidwehVczzB3FZGwEfrPbuvBxKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:4c:54:36:18:4e:4e:23:9f:5d:74:13:5c:50:5b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
        Validity
            Not Before: Sep 25 02:02:01 2026 GMT
            Not After : Sep 26 02:02:01 2026 GMT
        Subject: CN=ac0f370ce28b14771d2d8c5969e398db9efe8e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b5:c6:50:f0:4b:c5:6d:9a:e9:d5:24:02:83:
                    35:ff:49:f6:89:69:18:5c:e5:d6:c3:41:74:32:d8:
                    dc:3f:19:c5:13:1e:ba:9e:80:5b:0d:4d:c6:0d:6a:
                    6e:a0:1f:17:4e:88:57:21:4e:ce:4c:be:cc:79:dd:
                    45:9a:2f:99:b1:02:f5:ff:a2:58:9a:06:e1:da:54:
                    44:c6:98:25:bb:37:6c:6f:a4:1e:f0:81:98:4f:e6:
                    dd:72:e5:8d:a9:89:47:47:f6:5c:80:12:a1:56:30:
                    00:6e:fc:97:1e:5e:38:1c:d9:2a:0a:d2:45:02:49:
                    6f:92:ad:a1:49:ad:d5:00:8f:e3:c4:3a:c8:b2:62:
                    fe:8e:5e:c8:5b:2b:33:bc:fc:2a:ed:29:c1:d0:d9:
                    da:f9:ca:b4:84:e8:2c:b8:2b:1b:07:55:7b:4d:18:
                    ac:47:4c:e4:9f:87:85:04:12:83:73:70:69:ab:fa:
                    a9:ff:0e:85:ab:ae:98:70:68:bc:1c:33:bf:fa:1d:
                    57:0c:3f:0f:30:34:66:95:8c:e2:1c:c8:8d:60:d5:
                    f5:93:41:98:23:98:ed:bf:c5:6e:48:7e:8d:df:83:
                    a7:ba:40:d6:d0:8a:8f:cc:13:fe:8c:38:af:3b:fd:
                    dd:73:dd:cc:67:7d:21:da:45:15:dc:b6:b8:a3:1a:
                    b0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0F:37:0C:E2:8B:14:77:1D:2D:8C:59:69:E3:98:DB:9E:FE:8E:93
            X509v3 Authority Key Identifier:
                keyid:A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:aa:aa:c4:b8:74:fc:a7:48:b9:0d:72:6c:53:be:16:4a:69:
         e5:32:e1:0b:67:4b:42:36:a4:32:68:f1:6b:96:91:80:bf:25:
         7f:92:12:ce:f1:93:8b:09:b3:bf:16:5c:5b:ea:90:c5:49:4e:
         2c:98:f1:f5:ab:62:1e:a3:cd:7f:95:7b:d9:c0:40:a7:9f:46:
         50:fe:a0:27:9c:1c:85:48:ff:33:7d:e2:f2:c4:75:be:ea:74:
         76:e7:b2:c2:97:34:8b:40:33:e7:57:29:7e:d0:92:fa:4b:a2:
         c8:8c:60:00:50:19:bf:bb:65:14:94:40:d6:63:0d:84:f4:c9:
         29:10:1c:1e:35:8b:a9:d0:ff:ca:d4:43:e3:0e:a9:87:75:c7:
         33:f7:ee:c8:fe:25:c7:21:db:87:8a:7b:3e:10:f3:a4:f7:bb:
         06:77:c1:42:e0:24:a1:88:e8:76:ed:d9:22:e9:e9:05:5b:c2:
         c4:46:bd:0c:88:74:99:be:82:a4:8f:13:2f:1b:ce:51:67:7a:
         1c:85:04:68:92:6b:9b:f2:b5:bf:2b:36:51:36:bb:c8:b2:ea:
         eb:f0:e3:ad:72:f3:5d:2d:11:e2:5a:c4:fb:b0:c6:6f:31:3a:
         a4:cc:78:a1:2b:99:54:08:69:94:ed:38:03:47:87:d3:57:77:
         b0:54:31:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:30:41 2026 by rpki-client