Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
File:                     _8OB9T8l28Kg76v4ifyjJBmVjdA.mft (raw, json)
Hash identifier:          rQIX6O8Q1OnCasyLPKfm4MLGG2p3iVcq8uUB+5eqIVo=
Subject key identifier:   C4:F5:3C:04:15:04:CB:3E:F4:48:A4:7D:00:9A:0D:F8:81:93:23:62
Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
Certificate issuer:       /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Certificate serial:       01A0DC16DABB952B589C2E5DABA59177093E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
Manifest number:          0B39
Signing time:             Sat 26 Sep 2026 05:01:20 +0000
Manifest this update:     Sat 26 Sep 2026 05:01:20 +0000
Manifest next update:     Sun 27 Sep 2026 05:01:20 +0000
Files and hashes:         1: ALLGVKP-5SXjVEpjuKZaujJ3frw.roa (hash: 2IbnRTYsIxpxMkgjyLztl2mAatRyrBZ2hVeLGo8g2qQ=)
                          2: ATMfOPn_iklWkDGZaU6nBEYrMIs.roa (hash: MkgqGmH4i1AY83gSH/fJ/hLhxo7uHROhQ+deiJMJQps=)
                          3: _8OB9T8l28Kg76v4ifyjJBmVjdA.crl (hash: oaCIENUsUB2hAYdFD6X2EMzJ1LUtQiDLp5VxmVasDpA=)
                          4: gd0apcrdYEI4bPnkTNGJSM4gRa4.roa (hash: p+dDYEXfjkS2FAsmztfw4NEl9rJExwTKxbBp/O3yJJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 05:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:16:da:bb:95:2b:58:9c:2e:5d:ab:a5:91:77:09:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
        Validity
            Not Before: Sep 26 05:01:20 2026 GMT
            Not After : Sep 27 05:01:20 2026 GMT
        Subject: CN=c4f53c041504cb3ef448a47d009a0df881932362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7e:94:3d:62:ca:70:8a:e1:f6:46:e6:68:8b:
                    a4:4c:1b:8e:e0:4a:a2:e3:74:3b:b5:90:f8:21:5f:
                    af:f1:d4:6f:b1:6f:77:b4:35:6c:bd:0b:68:eb:45:
                    7b:9e:b9:be:33:5f:60:bb:7f:9c:1f:bf:41:7b:3a:
                    80:82:eb:bb:04:d7:01:df:56:e4:1a:8e:b5:b7:74:
                    84:fb:67:fc:78:60:98:0b:3e:60:39:b9:d4:fd:ec:
                    51:23:e6:dd:73:f3:1c:b6:83:4f:c0:46:8e:d7:54:
                    99:94:c8:9e:8a:aa:83:3f:9d:b7:ff:29:67:41:63:
                    8a:12:04:14:d8:05:b4:f2:b9:9a:4b:0b:0d:2c:98:
                    85:8c:66:c1:8d:cd:32:ea:87:01:73:38:90:d7:8d:
                    05:85:84:d4:b4:d6:f6:85:4f:f6:99:cc:c1:71:74:
                    f1:fb:87:d9:fa:ae:f4:a9:1b:bb:a6:55:61:b1:1f:
                    6b:87:1f:f2:06:b1:86:91:e8:01:e2:3f:f5:2a:19:
                    0b:17:c4:1f:4a:f9:8f:4a:65:b8:5f:e3:17:51:77:
                    68:5c:b5:0b:fa:39:f0:98:46:58:1d:91:9a:02:05:
                    eb:c4:a8:64:63:3c:72:1d:0f:76:fe:62:8c:91:36:
                    b4:fc:0a:23:42:b9:4a:af:ab:5c:6a:a1:2b:db:85:
                    c4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F5:3C:04:15:04:CB:3E:F4:48:A4:7D:00:9A:0D:F8:81:93:23:62
            X509v3 Authority Key Identifier:
                keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:66:2b:4a:75:6f:a0:24:a5:c2:2c:ea:5a:ca:53:92:d2:35:
         06:3c:b7:a2:b0:dc:c0:ef:bc:b1:22:68:e8:a0:36:4d:d4:fc:
         21:52:d8:b0:2b:65:d1:e2:89:fe:eb:a8:4b:a1:6f:bc:38:4b:
         8e:57:4f:f3:1e:05:62:6e:7c:ff:93:8c:31:3c:ac:f1:9a:3d:
         70:6d:1f:f0:e5:31:bc:5a:bc:94:e4:48:7f:6f:62:b1:81:aa:
         36:e7:89:1c:78:a3:c1:1b:50:b8:ff:fc:20:68:4a:20:a3:20:
         be:47:3f:5f:db:69:28:3e:69:5b:f5:dd:bf:4c:8e:2c:d2:38:
         a7:7f:ee:72:28:dd:c0:5b:33:de:36:22:19:a7:3a:26:2a:63:
         9b:6c:09:ed:5f:12:fc:88:94:b0:9d:d2:bb:48:1c:31:91:76:
         02:28:17:a2:79:fe:68:a3:fe:66:6b:4d:16:d0:90:8a:fa:1d:
         6c:9c:c4:2f:f1:fe:81:44:78:9e:c9:2a:da:5f:b5:35:94:98:
         48:9f:6f:aa:17:04:8c:2c:43:71:7e:3d:40:da:ee:ce:38:0e:
         a6:45:16:a8:63:f2:ba:50:1d:37:e3:3f:7b:58:e2:1c:b8:8e:
         59:65:d8:a7:55:5d:ba:8f:cf:ea:67:4b:42:77:08:43:93:13:
         6b:cc:45:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:58:27 2026 by rpki-client