Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
File:                     0VZGo8mstqSyAbtjJqnwB0Ik84c.mft (raw, json)
Hash identifier:          S7RYjnmMnXqxh0biEIPsncmNDwe3Cm6z2DpaiZ2UEkw=
Subject key identifier:   D8:16:D4:34:9B:13:A3:A5:C8:17:FD:95:B2:EA:17:CC:98:47:8C:6E
Authority key identifier: D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
Certificate issuer:       /CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Certificate serial:       01A0D04916BB5E2F2312171E4A664B369C7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
Manifest number:          0C01
Signing time:             Wed 23 Sep 2026 22:00:45 +0000
Manifest this update:     Wed 23 Sep 2026 22:00:45 +0000
Manifest next update:     Thu 24 Sep 2026 22:00:45 +0000
Files and hashes:         1: 0VZGo8mstqSyAbtjJqnwB0Ik84c.crl (hash: nnR2kqaLpNfbyzo8dzDFimChJaIJjuRMcGDwP33A2z8=)
                          2: svbZ3xnzSZtEiOKXO_TW25acCTk.roa (hash: opv9wDSI8/zZJZrpAhEN95Q4AkFIV4SP2QjFUJ853yU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:49:16:bb:5e:2f:23:12:17:1e:4a:66:4b:36:9c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
        Validity
            Not Before: Sep 23 22:00:45 2026 GMT
            Not After : Sep 24 22:00:45 2026 GMT
        Subject: CN=d816d4349b13a3a5c817fd95b2ea17cc98478c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b5:07:58:15:04:95:2e:41:61:e0:77:08:df:
                    03:1d:e8:97:c1:3d:46:47:24:c8:28:59:a0:d6:2d:
                    03:da:1b:90:a7:92:59:5a:c5:b9:c3:c1:17:85:d8:
                    ac:ca:b2:60:26:36:80:90:ee:73:e8:33:63:9f:db:
                    b7:df:25:b4:dd:21:27:86:d2:08:1f:5a:3b:2e:c4:
                    5b:f6:87:fc:ad:16:ef:df:b0:58:29:16:fb:0e:9c:
                    84:d4:1e:85:c3:79:fa:94:64:3f:18:39:be:fb:47:
                    d6:c6:1d:2d:c1:5a:91:94:60:06:12:ac:4c:f7:aa:
                    41:a1:ee:77:36:ca:d0:e6:d6:7d:ad:13:a0:44:6d:
                    52:04:4f:76:c0:6b:77:56:79:a0:64:6a:7f:62:bc:
                    a9:9e:e0:d7:28:2c:2d:c8:b7:f1:f6:e1:11:7c:82:
                    b2:7f:5a:c9:56:dd:fb:c4:cc:b9:94:28:23:b9:02:
                    10:98:03:67:c2:b9:0d:55:bf:13:42:f8:45:af:cf:
                    a3:9c:ed:24:14:7e:9a:b4:4e:61:47:7a:ea:9b:7a:
                    6b:f5:98:87:1b:24:9f:24:a4:44:86:d4:f6:10:89:
                    b7:36:b5:42:d7:c2:55:d2:ec:c8:b4:35:44:d3:73:
                    79:93:2f:e7:d9:86:be:08:83:ea:9d:3f:35:43:50:
                    a2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:16:D4:34:9B:13:A3:A5:C8:17:FD:95:B2:EA:17:CC:98:47:8C:6E
            X509v3 Authority Key Identifier:
                keyid:D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c5:24:9b:a1:78:ac:0f:6b:4a:39:7f:2a:2f:59:e0:42:8a:
         73:0f:26:0e:f7:7b:df:7b:c3:bc:6b:d6:bc:51:cd:b0:b3:eb:
         ae:b0:3d:ed:a3:71:0c:bc:f2:e4:9b:05:52:68:de:fa:c2:a6:
         18:e5:db:24:93:d9:a2:98:fa:65:99:1e:6b:ec:3b:1b:c9:9a:
         53:17:da:4e:80:fc:4d:e4:5d:7c:99:ca:ca:ce:06:6d:0f:d3:
         ec:ab:12:ed:4e:72:7d:f9:c7:37:09:12:f6:55:dc:dd:32:77:
         13:22:a9:9c:a2:7a:68:cc:48:cd:0f:88:c9:50:54:2d:14:db:
         fd:30:c7:8c:df:59:76:b5:1a:02:8f:0b:44:03:1e:6d:97:44:
         58:26:cd:af:77:61:e9:bb:c9:89:83:cb:85:c0:8e:e7:09:8c:
         c7:17:3b:a7:79:53:7e:20:d6:8f:d9:6c:70:a5:33:04:f5:d4:
         36:6d:e3:0b:07:e1:cb:27:9e:d6:94:11:f7:84:5e:82:c0:da:
         57:42:cb:1d:0b:e2:a2:ca:97:5c:f2:38:6f:5c:f0:db:04:9f:
         7f:09:87:f7:a4:17:5c:fd:00:96:41:c3:ca:fb:87:ec:21:d2:
         ca:c6:fe:f5:2a:e6:32:ce:4c:7e:fc:b1:8f:0d:cf:81:7e:c6:
         97:ee:68:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:41:33 2026 by rpki-client