Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
File:                     obtQVKF8yU__wrwpWhW_74qQQwo.mft (raw, json)
Hash identifier:          3hG4DEjyHD9nJyxrlVotUNaxAufRt+2e2Eqh0kwmINY=
Subject key identifier:   01:60:41:E9:28:FF:09:30:10:E4:12:98:A5:9C:04:92:A1:4F:B8:EB
Authority key identifier: A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A
Certificate issuer:       /CN=a1bb5054a17cc94fffc2bc295a15bfef8a90430a
Certificate serial:       01A0D012C78E62761EB77FE57C251F12101D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
Manifest number:          0A81
Signing time:             Wed 23 Sep 2026 21:01:26 +0000
Manifest this update:     Wed 23 Sep 2026 21:01:26 +0000
Manifest next update:     Thu 24 Sep 2026 21:01:26 +0000
Files and hashes:         1: 7PC27OPKTmB0TCcSiVXYJK9WFIs.asa (hash: yw12opdZtS3FAbe5nCehts1Uh2Vll7TupGePhAN8/WY=)
                          2: obtQVKF8yU__wrwpWhW_74qQQwo.crl (hash: MJYDu2ah0LEDxoEW9AdH+JSH2dsZpDjTuWtHe7mm2Xg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:c7:8e:62:76:1e:b7:7f:e5:7c:25:1f:12:10:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1bb5054a17cc94fffc2bc295a15bfef8a90430a
        Validity
            Not Before: Sep 23 21:01:26 2026 GMT
            Not After : Sep 24 21:01:26 2026 GMT
        Subject: CN=016041e928ff093010e41298a59c0492a14fb8eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:98:26:8c:d3:52:91:fb:f1:cb:b9:40:68:34:
                    3f:5e:cf:9c:9c:02:e2:51:b7:e6:0a:4a:a2:6f:75:
                    51:42:74:4b:b9:22:92:57:f2:39:cf:e2:a4:5c:1d:
                    a9:5a:17:23:8b:6e:05:c0:1c:63:3f:b8:98:99:ec:
                    fd:cf:c8:0f:d6:f4:c6:c2:32:92:f0:9b:53:6a:95:
                    7f:de:be:a3:fe:bf:e3:8a:ed:db:16:cd:5c:61:90:
                    fa:e9:a6:31:f3:18:36:15:0f:d1:e7:6a:a4:fc:75:
                    b6:df:f8:ff:5d:5f:9d:ab:ee:51:4e:82:21:2b:42:
                    5e:60:c0:13:8b:c6:b3:a3:08:c2:a3:ec:ef:67:db:
                    ee:a9:5e:3d:3a:dd:ff:38:88:2a:b8:1b:35:91:a6:
                    d7:ef:a8:9a:6d:1e:4a:92:7b:40:0c:f8:e2:04:87:
                    78:2b:fb:7a:5b:35:68:1d:8f:61:aa:4a:5d:e6:46:
                    0e:42:0f:6d:15:08:f4:be:a6:33:08:6a:cc:b5:43:
                    eb:cc:a4:73:2d:27:b6:55:dc:e3:8b:ec:ed:72:4b:
                    18:63:22:21:32:52:8f:94:dd:71:01:a4:fb:16:e4:
                    aa:18:8f:a4:34:b8:82:60:31:d7:13:c8:bb:bf:21:
                    60:50:03:60:cf:fd:44:52:ba:b0:24:89:45:d8:67:
                    68:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:60:41:E9:28:FF:09:30:10:E4:12:98:A5:9C:04:92:A1:4F:B8:EB
            X509v3 Authority Key Identifier:
                keyid:A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:be:ec:7f:f0:dd:da:02:0b:32:cc:6e:cb:ec:57:e3:b1:70:
         1d:c5:93:66:d6:1e:f3:26:3c:16:c3:64:ad:49:30:d9:fc:8a:
         7a:01:ed:26:a5:d9:a9:85:f1:e8:e3:d7:0d:ca:51:2c:e8:2b:
         88:e7:ff:f1:61:b5:7f:b0:ab:a2:05:1c:21:ba:38:04:ca:81:
         2d:a0:e1:8e:25:6a:6f:e5:20:0a:71:7a:49:46:cb:b3:85:b1:
         7a:f5:57:11:87:76:1d:2d:70:31:5a:03:ad:44:3a:34:53:38:
         f9:72:a1:ee:05:68:8a:13:71:3e:e6:b5:08:f9:59:02:8d:98:
         7a:99:12:50:0e:71:e6:99:f0:32:50:fd:1a:bf:1a:c1:ee:81:
         f2:96:87:e4:10:91:38:45:32:d4:8a:25:05:aa:5f:fb:92:94:
         4e:9e:2d:29:95:16:2c:f1:42:61:42:54:a5:f9:cd:f5:c9:c1:
         73:ca:61:29:7d:b3:17:32:85:75:b2:86:9f:0d:15:4a:b7:39:
         1e:7f:d2:d3:52:ab:4b:2a:9c:46:80:34:ad:08:e1:fa:74:a2:
         cd:3a:52:2d:38:03:92:1e:09:f2:7a:ef:bc:bf:7f:c9:f8:d2:
         02:39:87:5e:08:75:83:e7:65:4c:95:9e:00:28:59:49:bc:02:
         90:a0:ff:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:46:50 2026 by rpki-client