Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
File:                     0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft (raw, json)
Hash identifier:          Hmrc9sVznqn/fiU9lBJT2VsY2TuqmjRwvJPf4nBfuIs=
Subject key identifier:   63:56:2E:25:0E:18:C8:2B:29:A0:E2:C3:BB:6F:53:C8:36:3B:5D:51
Authority key identifier: D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
Certificate issuer:       /CN=d09ef2093da15eec90efb837b950164669f6198b
Certificate serial:       01A13E269A4A716BFDF8948343A0573F787F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
Manifest number:          0A5C
Signing time:             Thu 15 Oct 2026 06:01:19 +0000
Manifest this update:     Thu 15 Oct 2026 06:01:19 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:19 +0000
Files and hashes:         1: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl (hash: kttQRsICfiWnpp/b02oVo3ZbrwkkylJZnwh6UhDCDlI=)
                          2: y0R9OFgldF2xPpgLWZUCfSkApQg.roa (hash: K3dYxSYTTkLjGKIU3PEtGoJyW8WxL0sMjVKEq6R8Rf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:9a:4a:71:6b:fd:f8:94:83:43:a0:57:3f:78:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d09ef2093da15eec90efb837b950164669f6198b
        Validity
            Not Before: Oct 15 06:01:19 2026 GMT
            Not After : Oct 16 06:01:19 2026 GMT
        Subject: CN=63562e250e18c82b29a0e2c3bb6f53c8363b5d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:30:bd:14:87:b0:47:f5:66:5d:7b:de:25:63:
                    eb:a0:d2:1b:4f:55:e1:ab:26:83:a4:2e:af:b1:19:
                    96:69:aa:98:39:69:c6:de:3a:34:14:04:fd:48:12:
                    a7:1f:d5:71:ad:af:50:85:fe:62:1b:ac:34:0e:e0:
                    69:d0:e4:e0:a1:5d:f8:88:81:c4:ad:8a:dd:b6:28:
                    3a:30:6f:d8:0a:4c:ba:52:b6:f8:56:cc:51:78:56:
                    3b:e8:dd:c5:24:a5:f9:09:0a:41:36:41:de:47:7c:
                    0c:fc:82:d7:2d:7f:37:62:11:ba:ed:77:77:20:34:
                    e7:44:26:a9:70:82:a3:3f:ca:cc:55:b9:c3:c5:19:
                    01:3f:cf:ad:64:a2:ac:89:9d:7b:9a:4a:b9:f1:56:
                    46:2a:91:89:5b:de:90:a5:cd:f8:b5:fe:4d:23:fb:
                    b8:0a:fd:e8:a4:bb:34:e8:5a:ed:ba:d5:8d:30:81:
                    e9:07:48:11:cd:d4:31:72:38:d1:7b:9b:a9:c9:4b:
                    34:7e:02:10:d6:8d:5e:74:5b:8d:5d:c6:bd:da:d5:
                    1d:f1:bf:1c:17:83:56:3f:6f:e3:f2:2d:d5:b4:a4:
                    4c:64:f6:10:26:81:e7:46:74:0e:0d:4d:58:8f:d2:
                    87:af:65:b4:7b:8b:ae:ee:38:70:98:f5:e1:2b:d6:
                    27:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:56:2E:25:0E:18:C8:2B:29:A0:E2:C3:BB:6F:53:C8:36:3B:5D:51
            X509v3 Authority Key Identifier:
                keyid:D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:63:ed:34:b7:0c:99:65:7f:14:38:27:46:c3:10:bb:96:f4:
         c1:43:4f:58:70:56:eb:b2:ec:84:e6:8e:82:2e:4d:52:11:00:
         e9:a7:7b:dc:66:8d:7d:c1:e3:02:d3:85:f5:0a:dc:3d:73:75:
         88:51:3a:0a:ba:e3:cd:ba:d4:dd:da:4b:b0:aa:d6:4e:d1:69:
         17:75:76:b9:28:b8:ea:a7:80:4a:db:67:42:04:50:1b:4f:8a:
         1e:f8:33:71:15:ee:e4:2f:64:9a:d3:a3:18:23:b6:11:3c:b0:
         04:41:18:3a:ea:a2:1d:b3:c5:f9:d4:e5:cf:aa:30:0c:30:4f:
         3d:93:03:cc:98:9e:3d:74:35:d8:d4:8f:6e:ce:e9:a5:09:0e:
         f0:7c:a0:84:8c:23:ec:f8:44:6c:b5:ef:d5:02:5e:7a:27:a9:
         e6:cb:94:75:9c:1a:c8:73:4c:86:45:fa:e4:aa:7a:d6:fe:a8:
         0c:60:f4:b2:18:3f:f1:c8:28:ad:77:d9:37:2f:a3:01:70:e6:
         80:11:d3:16:bf:56:64:95:57:58:57:50:66:a9:a2:65:58:fb:
         a6:dd:ae:49:14:a3:3a:ee:86:54:04:90:34:23:fc:f7:74:7b:
         ef:ff:6f:e9:5a:9a:4e:85:c3:75:a6:0a:6b:5c:68:ba:af:25:
         cc:33:0c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:35:00 2026 by rpki-client