Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
File:                     0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json)
Hash identifier:          M2SeFMNHu6C9LMakfkHLAilb0U2zjFEF+cjoDHMPwMo=
Subject key identifier:   05:97:90:5D:A9:A1:38:F8:4B:4D:ED:2C:89:A0:B1:CC:61:C0:48:7D
Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
Certificate issuer:       /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Certificate serial:       01A12A31745D2B8A474F3D5CCAC51036E03C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
Manifest number:          116F
Signing time:             Sun 11 Oct 2026 09:00:46 +0000
Manifest this update:     Sun 11 Oct 2026 09:00:46 +0000
Manifest next update:     Mon 12 Oct 2026 09:00:46 +0000
Files and hashes:         1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: 1qoTHaIr14YocZO+xmgreER9v7bpgBHGyrIdjSUdYsI=)
                          2: 5yHtrBRoK5Q4zbFAHbMdThNdZIE.roa (hash: uoMSiABNR17F9m6eX/S3mZE2twR2jgvrbl3hf1Zk98s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2a:31:74:5d:2b:8a:47:4f:3d:5c:ca:c5:10:36:e0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
        Validity
            Not Before: Oct 11 09:00:46 2026 GMT
            Not After : Oct 12 09:00:46 2026 GMT
        Subject: CN=0597905da9a138f84b4ded2c89a0b1cc61c0487d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:73:94:12:cb:71:d1:dd:fd:cd:8b:52:a5:41:
                    2b:e1:08:49:02:0a:98:9d:f8:a0:92:a4:3c:4b:1b:
                    39:ab:15:e1:b7:16:30:80:ef:40:69:88:de:de:a3:
                    44:5b:c0:db:e9:b6:32:c9:a4:12:d8:a1:09:09:ad:
                    25:54:1d:2d:6e:f0:37:42:35:b5:d2:dc:1e:e0:19:
                    33:70:ef:5f:c6:39:2f:2c:3d:c6:f4:65:f9:f4:e5:
                    73:10:e2:21:a7:ef:b9:3a:27:51:7a:cf:de:60:e2:
                    25:89:e9:fb:88:66:5f:47:7c:a0:cd:f1:34:af:71:
                    2a:32:84:e6:31:4d:d0:29:6f:65:ee:1b:49:3f:d9:
                    f5:d0:d6:06:53:51:d2:17:04:43:42:a2:72:95:69:
                    43:3d:d5:05:39:23:f8:6b:b6:03:03:80:06:58:ef:
                    35:2c:0d:3f:69:0c:28:35:cc:67:ed:41:e1:41:ea:
                    9d:67:8a:cc:55:03:0a:02:14:b7:be:05:35:17:4c:
                    6f:6e:89:64:34:21:68:d3:8d:a9:32:ee:27:4d:59:
                    27:e3:f4:a1:aa:cc:be:21:4d:ed:50:13:3c:38:48:
                    42:0b:c8:0e:f3:30:44:f6:f2:3f:38:46:e2:24:0b:
                    b5:30:78:51:a7:d7:6f:78:e0:e8:5d:fa:86:53:6e:
                    30:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:97:90:5D:A9:A1:38:F8:4B:4D:ED:2C:89:A0:B1:CC:61:C0:48:7D
            X509v3 Authority Key Identifier:
                keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:9d:bd:f7:96:73:e6:2e:91:57:33:15:53:8d:a2:9d:81:42:
         74:63:55:fe:fe:59:55:58:de:73:0c:b5:eb:f4:05:72:ce:13:
         2c:54:a7:5d:34:51:90:44:85:c8:87:3a:15:92:bc:df:f7:73:
         69:89:8b:63:11:4e:0f:73:ef:70:80:50:39:c9:8a:de:28:ab:
         6e:7e:0f:97:04:e7:d6:f6:94:9e:93:86:2d:0e:d8:8b:92:77:
         ba:fb:86:5f:5f:50:6a:61:50:69:02:cd:df:56:66:37:fe:d4:
         19:d6:70:3b:f3:d2:62:b4:61:67:7b:4f:11:9b:27:8f:37:c8:
         e4:7d:11:cd:69:c5:6b:6c:16:b3:d8:2b:95:56:c6:41:18:3c:
         5f:a9:1b:66:aa:75:41:b1:42:45:5c:01:b3:c2:f4:ec:a0:8e:
         74:63:b3:df:6b:6b:0a:51:07:b9:4c:03:3a:88:16:16:c0:44:
         3e:ce:67:1a:97:cf:df:ac:b2:91:94:82:f4:0f:dd:03:39:e3:
         bb:3d:05:a4:20:5b:37:8b:31:a7:26:ca:ed:f7:62:a9:c0:5f:
         12:7d:3b:f5:5e:de:13:95:af:67:37:11:ff:f2:de:7b:9f:25:
         b6:15:e2:2e:bf:aa:46:c3:a8:c1:08:87:30:62:f3:d4:ac:ee:
         bd:b7:6a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:32:00 2026 by rpki-client