Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
File:                     A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json)
Hash identifier:          4ENhCUQkwMHOH7NWTQoerZ5O18ObEIAWtERLyN25ds8=
Subject key identifier:   3C:61:5F:45:E2:4F:78:EC:BC:25:82:C4:D0:6E:F8:FF:7F:89:D2:A4
Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
Certificate issuer:       /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Certificate serial:       01A13DEEC208D43633C2CE1BB63EFF69E1EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
Manifest number:          0788
Signing time:             Thu 15 Oct 2026 05:00:19 +0000
Manifest this update:     Thu 15 Oct 2026 05:00:19 +0000
Manifest next update:     Fri 16 Oct 2026 05:00:19 +0000
Files and hashes:         1: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: C+kbUGgCf2DOriFmGdcgqzkgSgOuNTM8jIcgoQbWSKQ=)
                          2: R_tuRGNyH8maQImtyJX8ka61Rts.roa (hash: CI3pZc4MmuEvMGaaRVV9hzb41var6bWscwqeDxkewRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 05:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:ee:c2:08:d4:36:33:c2:ce:1b:b6:3e:ff:69:e1:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
        Validity
            Not Before: Oct 15 05:00:19 2026 GMT
            Not After : Oct 16 05:00:19 2026 GMT
        Subject: CN=3c615f45e24f78ecbc2582c4d06ef8ff7f89d2a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:37:57:0f:f7:b9:8b:0a:c4:a3:1b:f0:fc:bd:
                    71:c6:94:14:5b:46:c3:86:44:6a:cd:fa:af:b2:ef:
                    ec:17:ce:26:3f:0a:45:ed:5f:18:c3:de:52:14:16:
                    68:fa:e3:a9:c3:c2:1b:da:ce:2e:49:0d:cd:c8:73:
                    69:db:c6:92:c7:f2:35:c8:45:a5:c0:58:b4:38:2c:
                    ef:5b:98:73:47:1d:c4:51:03:8d:12:4d:26:91:b4:
                    05:d0:a4:8b:c3:d0:1a:60:38:29:d9:f9:a0:5e:2f:
                    64:82:df:8b:73:61:bd:f1:ad:5e:d1:8a:cf:bb:41:
                    33:9c:e0:72:dc:cf:10:39:c8:7c:ba:27:a9:e6:8b:
                    0b:ca:33:c0:d3:cb:67:e1:49:3b:56:b6:70:68:ad:
                    58:61:48:9e:a9:09:b1:2e:a2:82:ce:c5:c8:a9:ea:
                    d1:79:b2:de:90:8a:d2:f8:94:62:53:2f:5a:ac:dd:
                    7e:74:18:0e:0c:7f:57:0d:9b:7b:95:43:26:a5:d5:
                    f2:4a:9e:11:53:ad:eb:e0:fc:da:df:0d:2c:6c:a9:
                    77:fa:ef:14:6a:7a:c6:38:6b:ba:67:90:70:7e:7a:
                    62:28:d4:06:8b:81:d0:90:ae:bc:a5:ad:ce:3f:ec:
                    8d:a5:5c:52:e0:be:42:e6:e7:dd:a2:3e:1a:59:2a:
                    21:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:61:5F:45:E2:4F:78:EC:BC:25:82:C4:D0:6E:F8:FF:7F:89:D2:A4
            X509v3 Authority Key Identifier:
                keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:96:b5:4d:a0:81:e3:50:c3:ce:8a:e2:b2:d0:d1:96:4d:59:
         47:97:89:01:48:ae:2f:73:a3:13:14:36:c7:a6:f1:2b:01:b4:
         30:26:75:2f:39:f6:57:ff:90:7e:e4:a8:fa:28:83:64:6e:76:
         4b:ad:4b:24:c7:79:ad:16:75:0e:cb:6a:c8:fa:67:2d:fd:41:
         c0:95:88:db:ae:e1:3d:08:a0:78:18:7c:2c:a3:88:d9:ab:2f:
         f6:4b:af:2c:ee:d8:c9:d8:ca:47:a4:29:7c:97:25:a7:e9:b0:
         fe:b2:04:e2:e0:37:b1:6a:a0:1c:ca:f9:d3:07:b9:9b:d9:30:
         ef:60:e3:87:b4:39:d3:83:4d:56:40:97:5d:82:6e:3d:e6:4a:
         56:54:3c:e8:fb:2d:21:3f:bb:c5:dc:dd:e6:dc:d9:d5:10:bf:
         5d:c8:4f:89:e8:2b:23:c2:56:bf:f1:e9:8c:3b:3e:4a:fa:90:
         7d:a8:74:79:0a:88:d7:c1:93:d1:d2:0b:7e:b4:be:93:63:f4:
         11:4b:9c:73:fb:5b:ce:91:c5:79:a4:9c:35:47:51:7f:c8:4c:
         42:ce:31:de:12:8c:d2:26:01:8c:70:0f:30:a1:aa:91:6a:5e:
         d1:86:e8:58:52:51:a0:d2:51:3b:84:a5:d0:ae:d7:0a:6d:18:
         a1:a1:c7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:35:20 2026 by rpki-client