Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
File:                     Oexx3D1ozej5B3069mdRwp_O6kw.mft (raw, json)
Hash identifier:          uQ4lp1muZz/u4FqmtWwVYqv/FUdd0/78JXYOB6B9L9U=
Subject key identifier:   C1:C2:DC:31:BA:02:3D:D8:84:6A:09:82:8D:D2:DD:E4:9A:15:A6:6A
Authority key identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
Certificate issuer:       /CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Certificate serial:       01A1871A731F90A56AA42EFB52B5F514EF19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
Manifest number:          0E25
Signing time:             Thu 29 Oct 2026 10:00:19 +0000
Manifest this update:     Thu 29 Oct 2026 10:00:19 +0000
Manifest next update:     Fri 30 Oct 2026 10:00:19 +0000
Files and hashes:         1: GWIPuzYrr1ZkVb6zUh724dGRI1w.roa (hash: 8ZDylGUDk0rJ7fPM3ZJJKDsoUpKFNi+95rGt5nvLIKg=)
                          2: Oexx3D1ozej5B3069mdRwp_O6kw.crl (hash: ktzQNmAX/+xcQKPz5Cpu79Kb16bMe6NSQiFPpc3RWLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 10:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:87:1a:73:1f:90:a5:6a:a4:2e:fb:52:b5:f5:14:ef:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
        Validity
            Not Before: Oct 29 10:00:19 2026 GMT
            Not After : Oct 30 10:00:19 2026 GMT
        Subject: CN=c1c2dc31ba023dd8846a09828dd2dde49a15a66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c0:ee:e7:db:bc:c0:db:04:bc:f5:be:ba:5e:
                    56:3b:9b:50:b2:cc:ad:26:4e:ea:04:39:a4:a7:e6:
                    65:1f:7b:6f:7b:4c:8c:28:fb:4c:61:33:05:61:23:
                    22:79:61:db:ec:c2:e9:ba:d7:31:ed:9f:99:b3:72:
                    6e:8d:61:5d:a8:fd:f0:ba:cf:1d:02:fd:1e:0a:62:
                    59:8b:31:af:b0:f7:d6:34:3d:39:7b:ba:39:8d:4b:
                    38:a6:f2:ed:0d:4e:a8:bc:44:6b:89:c8:ce:94:8e:
                    a4:76:15:69:81:47:cd:b2:22:0b:70:35:22:ce:7c:
                    30:16:0b:40:76:88:32:4f:44:8d:5a:b6:b6:a3:f0:
                    ac:5d:8d:01:83:bb:46:b4:ea:26:88:4e:38:37:9e:
                    7e:56:80:4b:71:e1:3b:02:77:39:1a:8b:87:b3:4f:
                    bc:bd:dc:51:eb:6a:7c:59:c5:7a:cf:e2:f6:4d:be:
                    48:68:2d:f6:f0:2f:82:4e:b6:d8:a8:81:54:06:94:
                    9f:f3:88:39:a9:25:fb:03:1e:09:bd:88:f0:ec:6a:
                    cd:7a:a2:3a:ac:a3:58:d5:b5:fd:74:57:0b:24:03:
                    a1:51:16:9b:5a:1a:e2:d7:23:ee:6f:0a:91:af:f0:
                    fa:69:6b:75:54:a0:1e:11:5d:f1:a2:5f:e5:b1:26:
                    e4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C2:DC:31:BA:02:3D:D8:84:6A:09:82:8D:D2:DD:E4:9A:15:A6:6A
            X509v3 Authority Key Identifier:
                keyid:39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:34:ad:35:09:43:4f:43:a4:2b:47:57:fa:69:ab:be:8c:33:
         44:f7:37:f8:7d:79:72:58:b2:78:7d:98:01:1b:4f:71:de:75:
         9e:15:ac:aa:0e:7b:db:a6:87:5c:20:c3:1c:f7:e2:4d:df:91:
         cf:3f:3a:e4:3e:1e:bf:78:aa:b7:a4:8a:e7:fb:8e:75:25:c7:
         fc:72:d4:58:c4:dd:f6:af:3e:9c:d8:6b:41:cc:68:12:43:0c:
         b1:f2:e5:0a:69:62:80:86:b4:40:7d:b4:11:f4:d2:a7:02:5b:
         b5:d5:68:8d:1e:52:42:16:3a:95:75:6c:05:b9:5b:82:90:51:
         bb:a7:46:26:6e:70:d0:07:4e:d8:ca:65:cf:62:f1:87:43:fb:
         75:5a:f4:1a:8b:c7:c3:b6:cc:4b:ce:a8:01:ca:d9:d9:ca:e5:
         9a:c9:1e:6e:f9:95:65:57:b1:01:0c:c3:1c:17:33:c2:4c:20:
         b4:00:9a:30:fd:74:17:1e:45:55:c6:e8:a6:20:4b:f0:c8:78:
         13:56:d5:1a:2c:5e:30:f1:5e:cb:99:e8:80:66:dd:a6:b3:e8:
         45:4e:ae:06:b4:63:d5:83:7b:cb:4b:c8:26:2a:cd:7d:fb:7b:
         6c:67:75:a8:d5:d6:16:73:99:92:85:e0:67:34:93:b7:ee:7f:
         3c:9f:ea:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:03:56 2026 by rpki-client