Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.mft
File:                     0oig9ya30Z93nrHaEq3aNfze1fE.mft (raw, json)
Hash identifier:          NiAS77Wzt+nXhaJl6hpDHmmDiGRYYz0+MQ8Vdzt6Znw=
Subject key identifier:   CE:C8:43:5D:62:27:2F:92:2D:CF:91:E7:5D:E0:2E:42:C4:2C:EB:FC
Authority key identifier: D2:88:A0:F7:26:B7:D1:9F:77:9E:B1:DA:12:AD:DA:35:FC:DE:D5:F1
Certificate issuer:       /CN=d288a0f726b7d19f779eb1da12adda35fcded5f1
Certificate serial:       01A0D011895A0396E968F521AA252F266C1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0oig9ya30Z93nrHaEq3aNfze1fE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.mft
Manifest number:          E5
Signing time:             Wed 23 Sep 2026 21:00:05 +0000
Manifest this update:     Wed 23 Sep 2026 21:00:05 +0000
Manifest next update:     Thu 24 Sep 2026 21:00:05 +0000
Files and hashes:         1: 0oig9ya30Z93nrHaEq3aNfze1fE.crl (hash: XYJixwCXuh1V1wnmoJUbiKFGE2FWL74eUEE/Y5YoDSU=)
                          2: lxI2bP-RbOseqiIeg4ll7U67NmA.roa (hash: 9Z7qOwjkxiFujHt3P1/LDgIN/VCVJkJA0KjjP9BQQwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0oig9ya30Z93nrHaEq3aNfze1fE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:11:89:5a:03:96:e9:68:f5:21:aa:25:2f:26:6c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d288a0f726b7d19f779eb1da12adda35fcded5f1
        Validity
            Not Before: Sep 23 21:00:05 2026 GMT
            Not After : Sep 24 21:00:05 2026 GMT
        Subject: CN=cec8435d62272f922dcf91e75de02e42c42cebfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:61:37:23:5c:c1:a5:20:4a:2e:80:3b:96:a7:
                    51:42:57:c1:67:b5:a8:18:d5:86:6a:04:9f:da:e2:
                    0e:50:68:06:35:f1:d1:38:69:2f:92:94:27:6e:e4:
                    fe:26:d6:23:29:ca:94:e9:09:4b:1c:e3:c1:94:f8:
                    ec:59:49:9d:21:34:38:4a:40:8a:80:7f:d5:ba:ec:
                    39:13:ef:99:ce:19:02:56:d8:1d:50:3f:33:15:de:
                    c5:71:2d:28:7a:d6:34:16:5c:70:b1:7c:0b:e3:d3:
                    6f:28:40:88:26:7a:ad:b2:84:66:18:1c:ad:36:ff:
                    37:63:bb:d0:d0:cd:7e:c4:3b:cc:cc:f4:ed:c5:78:
                    fb:6b:6d:cb:25:bb:93:eb:f4:47:03:e1:fd:44:3e:
                    d8:23:2a:1f:8d:45:a2:d2:88:91:9c:16:42:75:44:
                    c5:86:ed:ae:6f:ab:42:81:99:54:36:ff:60:02:d3:
                    c2:85:17:1a:2e:7e:60:b4:d8:9f:58:5f:9e:98:a9:
                    d3:76:57:ae:2f:9a:74:f0:75:de:2c:de:3b:c7:aa:
                    db:60:6c:54:fa:c7:44:84:50:ab:ea:d7:5f:ef:4e:
                    42:55:23:2c:cf:6f:e2:a5:8d:f8:e4:e9:8d:cb:5c:
                    07:bc:4b:c4:60:c4:e2:91:86:42:7d:1b:4f:a9:6c:
                    e3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C8:43:5D:62:27:2F:92:2D:CF:91:E7:5D:E0:2E:42:C4:2C:EB:FC
            X509v3 Authority Key Identifier:
                keyid:D2:88:A0:F7:26:B7:D1:9F:77:9E:B1:DA:12:AD:DA:35:FC:DE:D5:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oig9ya30Z93nrHaEq3aNfze1fE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/0oig9ya30Z93nrHaEq3aNfze1fE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c4:91:c7:3b:d8:54:f8:4a:9b:0d:a4:aa:d5:d2:1d:f9:f4:
         77:75:04:52:ea:20:d6:e2:12:da:7e:a6:f4:ca:7f:85:6f:59:
         ce:e5:2f:e5:96:a6:9f:95:5d:bb:36:68:40:01:7b:06:89:99:
         70:4c:d8:31:c3:1b:34:04:be:2a:14:cb:c4:32:ba:ba:43:d0:
         ed:b4:cd:78:58:09:d3:c3:1e:a9:3d:64:c6:70:b2:3f:56:80:
         bf:e1:dc:9a:31:21:fc:ef:34:f4:61:ff:6f:1f:75:3f:7c:d3:
         2c:1d:e8:95:a1:d8:6c:68:1f:63:a8:64:d4:25:01:01:51:22:
         74:82:d6:aa:a1:5c:28:a3:71:30:ec:58:45:0b:99:e8:86:f4:
         e1:57:bf:8e:ca:66:f2:f9:38:52:23:a3:20:c3:03:73:3a:7f:
         83:dc:ca:f7:33:04:3a:bf:4e:b3:7d:23:8b:f0:60:e8:de:16:
         44:22:0e:6e:c2:e0:7e:ed:d1:23:32:bd:68:18:e9:f0:92:03:
         35:06:7b:ce:94:ed:d8:90:49:b5:6d:60:a8:0d:f0:ad:47:50:
         7e:77:9c:e7:14:94:10:53:2c:f0:82:84:56:3c:ff:23:36:25:
         3e:3e:cc:43:55:ee:a9:1a:2c:f5:ff:ee:af:c6:8d:a9:38:84:
         36:d7:be:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:37:44 2026 by rpki-client