Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File:                     o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier:          X0w+fitDonaZZRlgOBxUXDcaZleuvhm3Ci6GLcIquAw=
Subject key identifier:   91:37:3B:5D:0C:DB:FB:DE:91:11:AD:BC:23:6F:2B:2A:BA:1A:CB:78
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer:       /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial:       01A1189917DFDC385A4031D12EA86C536B9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number:          16D5
Signing time:             Wed 07 Oct 2026 23:00:48 +0000
Manifest this update:     Wed 07 Oct 2026 23:00:48 +0000
Manifest next update:     Thu 08 Oct 2026 23:00:48 +0000
Files and hashes:         1: nq8_lKkxUGSnEnuUf5aIJh8XOp8.roa (hash: 4zAGZ6DVsgtkjmO+59u3bkrnGCMoQnzivE/ro2iUVRA=)
                          2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: li8yjoIkSDa3T5JgJFfDfESPH/d2gshQSEeaZgZuKVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:18:99:17:df:dc:38:5a:40:31:d1:2e:a8:6c:53:6b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
        Validity
            Not Before: Oct  7 23:00:48 2026 GMT
            Not After : Oct  8 23:00:48 2026 GMT
        Subject: CN=91373b5d0cdbfbde9111adbc236f2b2aba1acb78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:ca:10:bc:bc:66:84:ab:f8:47:5c:4d:ff:
                    57:1c:37:8d:ae:3e:62:2f:c5:78:2d:d1:8a:d2:88:
                    16:d4:d2:68:d2:60:e6:19:c6:07:8c:e4:cd:dd:45:
                    7b:58:50:90:ca:84:6c:d5:77:ee:c0:a4:c7:32:40:
                    c6:fb:b6:f5:04:cc:ad:ee:05:b0:73:7a:4f:88:2a:
                    50:77:cb:1a:af:25:6c:43:73:06:73:89:eb:53:44:
                    33:77:2d:5c:c0:40:4d:31:bd:a7:8f:47:37:6f:e8:
                    b0:c5:a4:01:83:7f:5d:b3:fd:c6:07:cf:ef:5f:e6:
                    92:9b:bf:1a:01:45:f2:00:68:68:44:52:e7:32:2a:
                    ff:ba:81:b2:3d:0a:93:07:df:57:c7:a7:05:9e:15:
                    0c:ff:36:61:73:f5:06:65:f3:2e:0b:d9:1e:6b:68:
                    2f:2a:0d:91:87:2d:94:a0:98:45:70:5c:b0:65:f6:
                    e3:58:ab:fd:a8:ff:23:3b:6c:66:d3:5d:f2:53:28:
                    d1:31:c5:7a:63:3e:55:8b:60:29:86:8c:fe:29:49:
                    6e:5a:29:86:a8:a8:8c:95:d4:cb:c8:8d:96:14:55:
                    bc:69:09:e2:0c:73:ab:ed:4d:52:3e:0c:1f:17:df:
                    57:56:34:1b:91:37:31:ba:f0:92:82:01:d5:af:fa:
                    e7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:37:3B:5D:0C:DB:FB:DE:91:11:AD:BC:23:6F:2B:2A:BA:1A:CB:78
            X509v3 Authority Key Identifier:
                keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:2a:3c:12:f4:04:77:dc:e9:05:89:3e:b7:3c:bb:eb:48:6e:
         89:4c:61:ab:6f:0a:d0:47:77:e2:0b:aa:f4:82:d0:7c:5a:56:
         89:ba:46:11:17:3d:ff:a7:2a:7b:e3:72:0b:47:f5:12:c2:2e:
         88:ed:12:aa:c9:a7:e3:76:ed:87:fe:06:9f:ce:7e:79:fb:b4:
         db:ba:22:c9:ae:95:d5:15:0f:87:b5:c6:1c:3d:96:27:1b:4d:
         f6:18:6b:3f:dc:30:35:58:0a:ab:cc:bc:ee:30:e7:de:88:22:
         12:17:07:2b:1e:ca:4c:b3:d7:b5:8c:84:60:1b:cf:96:7b:30:
         e2:08:c4:75:57:d4:65:ca:53:50:17:37:85:1c:a6:9f:50:c3:
         b9:3a:33:7c:cd:e0:34:24:6d:51:65:d6:ac:ce:2c:96:d7:cc:
         08:3b:e5:3f:1f:20:b8:59:e8:64:61:6e:17:7c:28:40:8c:8d:
         74:8e:2d:bd:bb:d6:d9:5b:0e:a1:8c:7f:7f:8f:a2:f0:a2:d2:
         22:b5:0b:b6:fe:59:b6:8c:77:b6:39:6c:62:f1:35:5e:70:ad:
         0c:60:17:3f:48:82:bb:da:c7:6a:ef:b7:fa:6e:3a:3f:9f:54:
         39:5f:b3:1e:08:e4:9d:44:67:3f:0a:f1:70:fd:19:b2:00:0c:
         3b:7c:b8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:01:31 2026 by rpki-client