Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
File:                     D_jpPzRy6mvljz_rdElUcAlaF30.mft (raw, json)
Hash identifier:          rcKC01ZMNO+16OCI+BorKICNKvKfINJM/vDMDe07zkM=
Subject key identifier:   C8:51:21:E4:3B:65:87:F8:EC:F1:38:69:AF:BB:F6:04:01:61:58:ED
Authority key identifier: 0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D
Certificate issuer:       /CN=0ff8e93f3472ea6be58f3feb74495470095a177d
Certificate serial:       01A13E25C568E5A4575CB6C71C48E71180DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
Manifest number:          1AA5
Signing time:             Thu 15 Oct 2026 06:00:25 +0000
Manifest this update:     Thu 15 Oct 2026 06:00:25 +0000
Manifest next update:     Fri 16 Oct 2026 06:00:25 +0000
Files and hashes:         1: D_jpPzRy6mvljz_rdElUcAlaF30.crl (hash: 8U3+90Cl2sTz1A43q3a/Z+87r54cad+xPqH2VFj0ot8=)
                          2: Lacc-4_5zErIhaLObDnS5evETUo.roa (hash: E1jD2Nnvra6sUfCdyofjtOGms4KS2srmXM/6u5x0Za4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:25:c5:68:e5:a4:57:5c:b6:c7:1c:48:e7:11:80:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff8e93f3472ea6be58f3feb74495470095a177d
        Validity
            Not Before: Oct 15 06:00:25 2026 GMT
            Not After : Oct 16 06:00:25 2026 GMT
        Subject: CN=c85121e43b6587f8ecf13869afbbf604016158ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c4:07:6c:16:39:8a:f4:30:38:30:33:ec:06:
                    f1:e4:5b:9d:07:b8:42:53:e0:cd:11:ed:9c:dd:72:
                    55:1d:57:5a:7c:18:47:83:34:cf:71:97:24:f2:aa:
                    7e:da:5b:7c:94:a1:ab:0a:f8:aa:ff:8f:6e:23:cf:
                    7c:12:a9:34:db:24:a7:9e:a3:87:bb:b2:2b:ac:18:
                    8c:8c:95:79:3a:59:be:c9:67:41:1d:5d:e0:1b:3b:
                    3c:36:a3:d6:b8:2e:56:cd:97:8c:9a:d0:2c:68:7f:
                    cb:88:7b:df:96:5f:8b:81:90:a6:15:7f:92:87:1f:
                    88:84:75:6d:51:b5:4e:e0:32:17:af:80:3b:fb:98:
                    c6:cd:c8:12:38:78:33:bd:be:79:59:18:a2:56:12:
                    05:0f:64:d4:25:8c:f4:5a:85:af:cd:2c:89:1b:2a:
                    80:dc:62:d1:6d:01:77:4c:a1:b0:69:32:02:84:02:
                    e5:d8:2a:b8:0a:c9:a5:7d:20:b0:0f:21:5b:d2:40:
                    99:e0:ca:86:57:c2:0f:8a:72:74:ee:b8:41:b2:9a:
                    ce:8f:24:13:29:fb:96:0d:49:ed:91:e5:8b:00:3e:
                    08:cb:ff:38:6c:29:8f:01:11:d3:6b:86:79:36:41:
                    ee:cb:34:6c:48:01:5d:73:76:cb:36:e1:df:a4:8e:
                    ec:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:51:21:E4:3B:65:87:F8:EC:F1:38:69:AF:BB:F6:04:01:61:58:ED
            X509v3 Authority Key Identifier:
                keyid:0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:33:b4:0c:7f:78:97:7b:fe:01:6a:00:a1:76:45:9c:a0:ab:
         0f:c6:47:63:24:b6:07:b4:60:59:c9:95:8d:d9:c4:e6:f4:60:
         7d:31:11:97:51:a2:7e:ce:c0:c0:c5:9d:6f:c2:af:5a:d9:58:
         9b:f1:2f:1e:e3:e0:93:8e:93:d7:46:66:e5:da:f0:b1:f8:91:
         7e:81:7b:22:6a:ed:70:37:c6:15:05:47:e3:88:4c:1e:41:bc:
         fa:05:2c:0d:82:b1:71:cd:65:28:db:4e:ab:5b:2b:15:8a:aa:
         75:b7:b4:4d:c2:66:62:fc:71:ac:fc:61:3d:35:89:a0:d4:f4:
         e2:01:d2:14:f8:b0:ad:3a:fb:7e:f1:3c:b9:05:1c:da:58:4b:
         42:68:1e:9b:08:26:67:09:e7:a0:fa:98:b7:8f:97:f8:df:2d:
         65:98:34:ea:05:ea:41:59:7f:72:f1:cd:e4:08:7f:f8:2d:04:
         99:47:23:a7:0b:80:02:73:9b:de:41:05:eb:04:10:72:57:64:
         b7:fd:4f:8b:89:a2:17:30:e5:6b:a3:1e:98:e3:9b:14:95:ad:
         7e:8d:4a:3b:68:d7:08:dc:21:b3:f8:94:32:52:cd:2b:87:f7:
         15:d5:54:c0:84:8d:19:fe:05:3c:ff:42:41:95:59:12:56:de:
         f8:16:a9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:06 2026 by rpki-client