Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
File:                     0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft (raw, json)
Hash identifier:          qdTSw57RJ7aCh8g9xIx014Vqkb6YPr0dBHckyl+BoCY=
Subject key identifier:   C0:DE:3C:D6:2A:B0:05:67:03:69:A9:2E:16:8B:37:DE:AC:DC:6B:E7
Authority key identifier: D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
Certificate issuer:       /CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Certificate serial:       01A0D383D05E1491B08EA97644C369B3239E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
Manifest number:          1A72
Signing time:             Thu 24 Sep 2026 13:03:46 +0000
Manifest this update:     Thu 24 Sep 2026 13:03:46 +0000
Manifest next update:     Fri 25 Sep 2026 13:03:46 +0000
Files and hashes:         1: 0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl (hash: UZW30AFfwd+B56gkvR3Vo6LJ7Xqyr69G74Xr5hdUt9A=)
                          2: qKlROkZlk3DYFTmipBNFAH2SseM.roa (hash: 4ZEDkg/LHUGlc95hTTGad49qSD826UApgpQuVs6AZok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:83:d0:5e:14:91:b0:8e:a9:76:44:c3:69:b3:23:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
        Validity
            Not Before: Sep 24 13:03:46 2026 GMT
            Not After : Sep 25 13:03:46 2026 GMT
        Subject: CN=c0de3cd62ab005670369a92e168b37deacdc6be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:03:60:5f:eb:7c:0d:33:cd:51:0a:1f:38:88:
                    1d:7c:19:96:1f:c4:47:a4:06:5a:a3:f6:de:b4:14:
                    bc:24:eb:59:30:76:df:77:d3:8a:b1:0c:5f:8f:29:
                    6d:53:c5:f5:75:e1:df:e9:25:e4:e2:40:22:1b:46:
                    4d:e0:33:60:f9:42:e8:af:7a:5b:84:ea:60:76:88:
                    e6:f2:89:8d:b6:66:3f:0d:e0:7b:e4:2c:8e:fa:52:
                    9f:2d:dc:99:dc:86:92:5a:36:e0:fc:5a:a7:8e:f7:
                    c3:69:85:44:c2:1d:7c:8a:2e:11:f8:cc:e5:81:ac:
                    eb:68:2d:9e:18:ae:49:0c:4b:77:e8:bb:7f:9c:fc:
                    6e:08:e8:67:ed:7b:09:e7:a3:f1:e9:73:c0:28:ad:
                    46:17:1b:d4:00:fa:44:c7:a7:e6:db:ec:3f:c4:83:
                    df:d7:84:12:64:39:4b:9c:f1:24:67:b5:4e:7a:8b:
                    2d:b6:f4:33:4f:5b:66:e7:22:3f:ff:8a:35:e3:e8:
                    b3:09:80:09:8c:8d:0a:36:44:94:2c:3d:14:99:4c:
                    cc:03:ac:4e:ee:35:31:24:6e:11:c0:4b:24:47:d9:
                    32:68:14:98:6c:9d:b9:65:3a:84:47:aa:9f:7e:d4:
                    69:f6:3a:b7:67:29:2f:3a:cd:58:a1:62:4a:58:d9:
                    74:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DE:3C:D6:2A:B0:05:67:03:69:A9:2E:16:8B:37:DE:AC:DC:6B:E7
            X509v3 Authority Key Identifier:
                keyid:D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:9c:b6:9e:10:c7:6d:79:94:79:db:a7:ca:a7:19:68:e5:1a:
         75:98:9d:92:ab:65:63:0c:ba:40:46:59:88:cf:1f:92:62:4e:
         5f:91:7e:23:4c:0c:1e:49:c8:01:86:16:03:a0:31:7a:45:a5:
         2e:1c:53:21:bf:ce:9e:63:fb:78:ee:9c:3e:3d:87:40:21:5b:
         a1:82:81:ff:04:df:6c:97:ff:1d:0a:e1:5f:44:6e:1a:e1:c6:
         fb:9b:9b:cc:51:e3:0c:d1:17:a9:a2:2b:98:31:81:d3:08:2a:
         c9:42:6d:6c:30:f9:c5:8e:65:9c:38:c8:a8:0c:20:a8:ab:e1:
         d9:43:4f:7c:7f:ac:ae:55:cd:02:d5:c6:47:a3:42:cf:b9:ec:
         1d:71:a3:d6:b3:fd:ba:64:c3:ff:97:fc:69:99:ba:f2:8d:8f:
         ed:dd:e6:62:52:f5:fa:92:d4:ee:67:97:66:d7:50:41:dd:5d:
         29:c4:99:84:14:b1:e9:1a:8a:ae:6b:2f:db:d9:74:15:4f:08:
         9a:83:eb:7b:60:c9:7b:15:e2:00:cc:81:19:4d:e2:3b:d0:71:
         66:9e:fd:e4:d8:69:6a:21:e5:29:a1:a3:f2:9d:86:7d:a3:b3:
         4e:07:59:31:b3:f1:06:9e:0f:73:c8:7d:e4:6b:f3:24:3e:d8:
         d5:6f:42:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 16:55:55 2026 by rpki-client