Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
File:                     O849R0p3XOR3Y3FjK8GWyh9Owjs.mft (raw, json)
Hash identifier:          KYar7uc83DeOqO+WSGBCq9PE3fbVmdscmXXOZtI7OE0=
Subject key identifier:   C7:24:F5:51:FA:5D:DF:EB:C4:9C:0C:3D:23:61:5F:1D:F8:F2:CD:8A
Authority key identifier: 3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B
Certificate issuer:       /CN=3bce3d474a775ce4776371632bc196ca1f4ec23b
Certificate serial:       01A0F83281D519CC7256CCC14F35899A917B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
Manifest number:          071B
Signing time:             Thu 01 Oct 2026 16:00:54 +0000
Manifest this update:     Thu 01 Oct 2026 16:00:54 +0000
Manifest next update:     Fri 02 Oct 2026 16:00:54 +0000
Files and hashes:         1: O849R0p3XOR3Y3FjK8GWyh9Owjs.crl (hash: 7NVcoeki4rj3YTbfuiZtT6e0Y0sFkrS/7mlUhaoWHRo=)
                          2: VbL2QWZ9Kg8L1pE36SvfZYyr8Ts.roa (hash: sfB+nZS7Puz64duDQmVXVvH/Ydql31OyVDJAMGHxmwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f8:32:81:d5:19:cc:72:56:cc:c1:4f:35:89:9a:91:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bce3d474a775ce4776371632bc196ca1f4ec23b
        Validity
            Not Before: Oct  1 16:00:54 2026 GMT
            Not After : Oct  2 16:00:54 2026 GMT
        Subject: CN=c724f551fa5ddfebc49c0c3d23615f1df8f2cd8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c4:5c:d5:c9:05:bc:eb:95:13:37:39:72:d1:
                    e4:0d:47:90:ac:fc:d4:3b:1b:9f:88:be:9e:70:43:
                    58:b4:5a:3a:00:a7:a3:84:77:82:b8:e4:ee:fd:12:
                    52:1c:ff:81:34:af:68:b3:ca:0b:1d:1c:70:b3:9e:
                    bd:86:8e:b5:d1:a4:fb:2f:62:42:4d:ad:f9:19:4c:
                    6e:d3:62:00:1e:5f:f7:ee:8d:86:bb:c0:88:78:90:
                    ba:e5:1d:fd:a7:28:55:8f:92:5a:d9:53:bf:3f:bc:
                    e7:a3:74:a2:3b:0a:b9:0c:fb:a9:79:71:97:a1:ee:
                    08:49:a4:06:75:e1:a1:59:4d:f8:e0:4b:3c:61:13:
                    32:4f:c2:88:2d:e8:5a:11:10:f7:f3:7b:66:73:60:
                    f8:e7:03:82:1c:ad:2b:40:f9:64:6c:f0:69:b3:13:
                    63:64:d4:4b:81:fb:1e:e8:84:92:64:d8:04:a1:ad:
                    36:ec:c7:77:87:89:3a:a5:d4:99:b3:3a:60:34:29:
                    d8:45:15:c6:1e:5c:88:28:a7:e5:d7:2d:30:f8:5d:
                    61:44:c4:9d:fb:8d:30:4d:0d:bf:6a:c2:0c:54:ed:
                    bf:2e:24:c0:1c:7b:90:a0:7b:58:57:f3:ac:2b:15:
                    44:1f:4e:db:2c:a9:ce:9e:f9:6f:eb:37:2a:2b:27:
                    a4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:24:F5:51:FA:5D:DF:EB:C4:9C:0C:3D:23:61:5F:1D:F8:F2:CD:8A
            X509v3 Authority Key Identifier:
                keyid:3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:0d:4d:a3:14:52:53:8c:54:87:ab:c5:7f:ce:01:89:15:ec:
         16:0a:f3:db:d6:b6:76:9d:46:ae:be:c4:f2:8a:39:22:87:59:
         97:1f:9c:48:65:f4:e7:97:c6:d2:ac:7b:48:0c:3b:3a:f3:c6:
         39:4f:00:51:ea:31:a2:3f:0e:74:b9:51:f6:72:b6:83:e9:d7:
         4a:4c:2d:de:f0:19:35:f1:bd:47:d7:cf:80:20:18:f2:b5:9d:
         48:c7:04:ca:65:8f:09:44:d5:dc:cd:1a:aa:5b:ee:57:ab:08:
         b9:34:02:00:e3:84:69:17:b8:a0:ee:7f:fe:02:ea:b7:50:35:
         2b:ee:4a:58:57:84:27:2f:09:f4:83:c2:65:15:d1:bf:44:9d:
         85:2d:b1:d0:30:c3:0a:5b:b4:a8:be:37:a5:0b:7a:e5:96:b6:
         b5:5a:8b:23:61:10:aa:16:f5:79:a4:0f:1a:b6:b0:f9:32:cb:
         47:57:45:65:c8:ee:30:e6:f6:12:44:fe:54:6c:c5:3a:ce:d0:
         e6:52:33:a6:9b:f8:c0:83:57:25:85:65:d2:10:5d:32:9c:27:
         fb:36:91:37:1f:2f:81:9c:a5:e0:2d:91:46:9c:8d:17:eb:7c:
         e9:72:48:f5:5c:f8:c7:ad:3d:83:d2:03:f2:b2:14:1c:3e:5b:
         cb:2c:81:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 21:01:29 2026 by rpki-client