Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft
File:                     _08Gv_OluFFRtlcFtDCOmvsf2Pc.mft (raw, json)
Hash identifier:          53KrwbhGAWBplMU7tM/HxJIeqYmBcTQkXS27t1MePgI=
Subject key identifier:   E6:8B:33:0E:8C:9D:FF:2E:D2:AD:9A:74:3F:C1:27:0B:0C:3B:C2:B4
Authority key identifier: FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7
Certificate issuer:       /CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7
Certificate serial:       01A12E0EE6AD228CEF368B812275EB2CC1DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft
Manifest number:          1AA4
Signing time:             Mon 12 Oct 2026 03:01:30 +0000
Manifest this update:     Mon 12 Oct 2026 03:01:30 +0000
Manifest next update:     Tue 13 Oct 2026 03:01:30 +0000
Files and hashes:         1: ZZSujaCywYYBPGcUKJLCx-iYKGY.roa (hash: A7oLxvVZYFnaxAjlUArrfm3Zu1qybxKzD2ovuJ4kp4g=)
                          2: _08Gv_OluFFRtlcFtDCOmvsf2Pc.crl (hash: 0dFOpSCfoZrhgxjPcNBN4/8KaPEFThQ/+SvvaK9wNkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 03:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2e:0e:e6:ad:22:8c:ef:36:8b:81:22:75:eb:2c:c1:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7
        Validity
            Not Before: Oct 12 03:01:30 2026 GMT
            Not After : Oct 13 03:01:30 2026 GMT
        Subject: CN=e68b330e8c9dff2ed2ad9a743fc1270b0c3bc2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:f2:59:c4:df:04:17:a7:56:f8:17:06:dc:
                    ce:1d:c4:e4:76:fd:4f:dd:d4:21:6e:a2:8a:c3:27:
                    24:57:4e:6e:05:7f:89:ad:6a:b1:3d:1b:74:7f:80:
                    ab:c4:24:9f:c4:4d:e2:ba:a7:d7:ca:67:e8:50:74:
                    35:2d:0e:4a:78:ba:53:e8:a4:7f:1a:ad:0f:a7:b8:
                    98:d7:c4:bc:c4:5b:c2:d7:91:2c:7c:29:2a:8d:db:
                    5e:39:3f:72:5a:65:e5:b8:f6:9c:28:ad:f6:9a:46:
                    14:d8:34:8c:1f:38:df:85:b0:60:b1:ac:a6:41:e6:
                    9a:61:3b:8f:38:70:1f:26:f2:7b:7c:8d:6b:e1:14:
                    cb:e7:d5:42:6c:7f:cf:ec:59:88:f2:e5:a5:ab:9d:
                    ed:a9:0a:36:3b:34:48:ef:66:6d:36:3b:ed:60:7c:
                    23:44:90:f1:f8:33:67:35:b1:74:4b:ec:84:75:e7:
                    0d:a0:3f:c8:ca:3a:91:98:67:50:a2:f9:2b:b6:22:
                    57:30:10:68:b7:9d:b4:79:f2:a1:d7:a2:60:ac:97:
                    b1:e9:56:64:e3:17:ce:96:eb:36:1a:dc:e4:71:82:
                    0d:42:60:4b:42:82:6b:5b:69:e2:17:0d:22:39:a4:
                    51:48:71:c4:1e:e0:a5:71:92:b9:94:ea:ca:dd:04:
                    e6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8B:33:0E:8C:9D:FF:2E:D2:AD:9A:74:3F:C1:27:0B:0C:3B:C2:B4
            X509v3 Authority Key Identifier:
                keyid:FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:92:7d:d5:d5:53:0c:9f:16:59:1d:3c:7d:13:af:14:cf:a2:
         46:3b:04:1c:52:e1:ec:e9:d4:f2:60:02:40:f2:27:db:6f:61:
         3c:b4:98:dd:e1:f3:49:97:d6:cb:53:c5:91:36:d6:72:c2:cd:
         62:65:39:6a:2d:f6:cd:30:d0:9e:d2:74:06:04:3e:59:d6:bf:
         76:4d:70:a5:44:1e:fc:91:83:00:a5:92:e5:37:f1:49:e2:33:
         e9:53:35:db:5a:94:e1:92:75:0d:59:4f:03:89:c6:01:3d:b9:
         4f:64:d8:51:99:31:d6:c3:5a:61:a3:24:ee:55:56:c9:31:64:
         e1:a0:af:4e:c8:79:0c:3f:ff:53:b1:9c:ee:43:ff:19:6a:49:
         13:e6:ae:51:d0:54:6f:17:ae:06:60:18:b4:ad:3d:75:ba:50:
         74:e4:c1:70:84:9c:0f:5e:88:12:1f:77:57:70:5f:f1:95:4e:
         18:1e:b9:bd:52:90:d0:4b:81:3f:23:b3:f1:b8:fc:50:2b:29:
         60:07:8c:f0:9c:e5:c6:65:9b:06:f2:0d:ad:d1:8a:c7:f9:3e:
         95:5a:af:3e:54:ef:9a:46:4d:37:22:ff:9c:79:42:da:6b:1f:
         49:a3:06:63:24:96:f3:54:f4:8f:08:ec:cc:88:c6:17:a4:88:
         65:89:93:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:42:04 2026 by rpki-client