Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File:                     Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier:          bKOxjVpE3AhQruUVMhg8/d5AukJ9lCoTebeSrUnf+xU=
Subject key identifier:   BD:6E:68:2C:F4:D5:BF:A5:C9:B0:1A:88:C6:3F:C6:84:B1:04:1C:8E
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer:       /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial:       01A12B0D4440681DBD6F0D8B5E5CFC21AB75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number:          181E
Signing time:             Sun 11 Oct 2026 13:00:52 +0000
Manifest this update:     Sun 11 Oct 2026 13:00:52 +0000
Manifest next update:     Mon 12 Oct 2026 13:00:52 +0000
Files and hashes:         1: NwT9W71qDLuM68yfor7jaPtZ31g.roa (hash: Oy3RbTWtLZU6r3g8zZub3EsVqMVs7mpKUAZ+3t3L7eo=)
                          2: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: EhcXvoTdu7zL4yqWESgAz/Bl8yV98uDivYQV/xCUhjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:0d:44:40:68:1d:bd:6f:0d:8b:5e:5c:fc:21:ab:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
        Validity
            Not Before: Oct 11 13:00:52 2026 GMT
            Not After : Oct 12 13:00:52 2026 GMT
        Subject: CN=bd6e682cf4d5bfa5c9b01a88c63fc684b1041c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:65:9e:6b:a3:78:fa:77:67:30:a2:51:73:b1:
                    a4:88:0a:f5:c3:d9:f5:40:2a:c6:e0:e0:0e:68:f8:
                    d1:92:10:6e:d2:ea:81:fb:45:ce:a0:2f:45:4b:47:
                    dc:00:ce:f5:55:e0:dc:aa:7b:ea:54:e8:37:a4:f8:
                    c2:97:75:32:29:b6:cf:a8:74:8d:8d:4a:1e:97:08:
                    cb:b3:fc:aa:8c:de:80:92:14:65:b3:cc:9b:9a:f0:
                    15:7d:81:18:b8:e9:58:cc:aa:82:da:34:49:e0:a0:
                    a3:f8:c1:d9:95:27:a4:1f:b6:e3:f3:51:da:77:6d:
                    48:d1:3c:ea:57:98:a9:e9:d3:87:d4:84:23:bf:24:
                    a6:22:99:87:2a:0a:a9:00:be:b8:ff:b5:bc:72:97:
                    25:69:13:ee:02:7a:57:ff:07:23:e5:8a:c5:c8:1a:
                    c4:a7:c7:90:3d:e2:e4:f1:9b:04:e7:13:dc:9f:de:
                    b3:5b:7b:37:51:6e:a9:7e:ef:11:d1:19:e7:a5:d3:
                    c4:15:1a:04:a4:f2:da:51:df:e3:b9:3e:39:a9:4c:
                    37:b2:98:00:e3:82:c3:e4:1c:69:05:ff:41:38:db:
                    ff:e7:9a:85:37:88:3a:eb:43:eb:69:19:6d:ac:26:
                    0d:70:f0:bc:b7:98:78:89:30:45:45:ba:91:81:8a:
                    5e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6E:68:2C:F4:D5:BF:A5:C9:B0:1A:88:C6:3F:C6:84:B1:04:1C:8E
            X509v3 Authority Key Identifier:
                keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:48:fb:fa:17:d2:b1:61:64:73:a5:91:65:06:a8:c4:92:eb:
         c9:3b:74:f8:df:87:30:8b:e2:f8:5f:35:11:11:23:44:89:7a:
         95:1e:14:19:de:7a:23:b3:14:1a:31:d4:a4:b7:b6:ff:21:e3:
         29:de:fa:77:4a:54:4c:1b:5c:a1:d0:55:12:43:b6:e4:37:12:
         70:62:e7:e1:ef:26:5a:88:a6:4b:13:a4:e9:2a:e4:b5:e2:f2:
         f6:28:e1:d4:fd:df:0c:19:08:53:83:d4:19:0b:d6:d9:d0:64:
         48:26:ba:66:3f:9e:58:00:f8:8f:13:5e:6f:a1:bf:89:72:02:
         8d:ce:7b:99:f8:4d:35:21:f8:25:5d:30:e8:97:fd:65:30:8f:
         07:23:ce:8f:8c:14:ca:e7:a3:0d:3d:8f:3b:a3:14:55:12:99:
         82:f0:30:c3:9f:71:b5:1d:01:59:3e:98:bd:53:e0:0c:07:3e:
         16:51:6e:0e:f3:27:4a:6e:59:fe:b4:c3:f6:db:f2:56:65:1c:
         d2:17:59:95:4a:24:eb:8c:d9:71:60:f6:0c:83:70:2e:ae:9f:
         80:ac:d4:52:93:71:6b:7f:e3:35:99:ba:a6:69:fa:4d:b0:7d:
         cc:4e:aa:56:31:4b:c6:6d:9c:c2:a3:97:74:ee:39:65:bc:ee:
         6e:f8:9f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:31:08 2026 by rpki-client