Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
File:                     v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json)
Hash identifier:          GHUC3OcsLgsOhVorHwfcW40b8RehQso45Uf8s6WSpyo=
Subject key identifier:   00:6E:A1:7E:14:EE:B6:4F:2C:4D:03:BB:6A:BC:49:FF:27:D2:A8:DB
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Certificate issuer:       /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial:       01A10391FD28C500CA035E8CB2A574FA74DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
Manifest number:          0ED8
Signing time:             Sat 03 Oct 2026 21:01:01 +0000
Manifest this update:     Sat 03 Oct 2026 21:01:01 +0000
Manifest next update:     Sun 04 Oct 2026 21:01:01 +0000
Files and hashes:         1: 5KeRhOyb086eeciztDQbKFDzrso.roa (hash: ySXvhH64ggwnsQNYdFNSvhmS1S+iYiesXOZvpdcRhg8=)
                          2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: 68qRPgxAGd9DE5acW+SXbG0UozuqCv79M1aDZvZfe44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:03:91:fd:28:c5:00:ca:03:5e:8c:b2:a5:74:fa:74:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
        Validity
            Not Before: Oct  3 21:01:01 2026 GMT
            Not After : Oct  4 21:01:01 2026 GMT
        Subject: CN=006ea17e14eeb64f2c4d03bb6abc49ff27d2a8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f0:fc:4c:42:bd:18:9d:70:64:fc:71:56:08:
                    cf:e0:8c:e1:80:34:8e:3c:f3:1f:30:6f:97:17:75:
                    95:02:98:cc:d7:3a:d7:98:b0:cc:db:2b:24:a8:17:
                    24:2b:2b:5f:83:7e:6a:91:a6:27:52:d9:7d:fc:79:
                    16:17:d3:f3:8e:1b:00:c6:08:23:77:77:33:32:f2:
                    15:48:d4:66:90:7f:54:7b:1b:2c:49:e0:a9:c5:4d:
                    65:0f:bb:33:25:36:73:55:b8:7a:36:5f:06:0c:95:
                    0a:4b:d9:fa:4f:62:4e:da:89:e4:c7:7c:88:43:a5:
                    7a:f4:97:85:34:76:7f:dc:d9:f8:f8:c2:a3:8a:a2:
                    ff:20:2a:ec:d7:f8:bb:96:ce:6e:1e:46:dd:df:e9:
                    14:41:21:7e:d6:2e:10:bc:50:f5:04:d1:4d:c0:77:
                    ef:38:ec:2e:bf:b9:e2:3c:c2:bc:3e:36:fb:5e:aa:
                    cb:ae:e0:f3:55:64:3b:ae:95:c6:02:1c:b1:b7:b9:
                    eb:95:eb:a4:c2:c9:16:60:17:76:db:73:d2:53:6d:
                    33:74:68:a9:44:46:d9:2d:29:38:21:63:d6:d9:81:
                    e2:7b:86:2b:7e:ab:0a:ee:1b:7e:5d:a5:45:58:81:
                    fd:d0:86:ec:8b:73:2a:18:02:03:17:fd:03:7e:4b:
                    be:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6E:A1:7E:14:EE:B6:4F:2C:4D:03:BB:6A:BC:49:FF:27:D2:A8:DB
            X509v3 Authority Key Identifier:
                keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:de:7d:6e:bb:55:c1:49:ac:ab:ef:4a:b3:c9:bf:d0:81:40:
         f0:a8:26:92:c8:52:73:9e:57:00:ce:17:bb:93:ce:dc:eb:fa:
         24:07:91:35:2a:41:1f:16:85:b8:5f:a0:56:52:6c:15:bd:01:
         93:8f:45:e4:f2:73:79:15:1b:77:14:f2:2e:bd:13:c5:ca:67:
         7a:3d:fc:83:55:ad:61:03:af:e6:a6:74:74:f0:92:b5:59:e1:
         19:f3:d1:08:7d:77:13:53:e2:b1:1b:f5:27:8f:83:86:88:b1:
         51:bd:55:6a:07:33:94:5f:1c:87:b2:56:6d:ca:51:2c:55:48:
         ef:65:39:d8:35:88:85:fc:26:e9:48:0b:0a:1d:48:79:41:91:
         7f:ef:fe:78:2e:1d:d6:7b:4d:4a:65:4a:1e:50:0c:99:75:79:
         5f:9f:7e:1a:b4:cd:56:c4:61:81:24:2d:0c:b9:7d:e1:07:dc:
         12:b1:c3:ec:14:ea:74:1f:b2:5e:02:7e:57:0c:e6:63:45:06:
         25:5a:1b:41:69:02:69:d8:dd:6c:7e:f5:a7:2d:20:94:d4:e3:
         8d:49:30:06:40:a5:2f:8f:7f:e9:52:c8:91:33:25:cf:06:26:
         dc:33:33:33:06:7c:0d:8e:62:94:5c:f7:16:de:76:e0:f9:f2:
         d5:0d:95:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:39:57 2026 by rpki-client