Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
File:                     6_OFztCQ2_HQRHNOEqJw7muEHJY.mft (raw, json)
Hash identifier:          7MlZPQg9dAtSdoMsAxcnsa2pCPeXo8uLzBrhF5Drdjw=
Subject key identifier:   BC:E3:2D:55:79:7A:09:20:70:3C:ED:09:07:59:13:1D:10:31:98:99
Authority key identifier: EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96
Certificate issuer:       /CN=ebf385ced090dbf1d044734e12a270ee6b841c96
Certificate serial:       01A125B03FD06F7C38AF67A45CBF943550EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
Manifest number:          0A5A
Signing time:             Sat 10 Oct 2026 12:01:09 +0000
Manifest this update:     Sat 10 Oct 2026 12:01:09 +0000
Manifest next update:     Sun 11 Oct 2026 12:01:09 +0000
Files and hashes:         1: 6_OFztCQ2_HQRHNOEqJw7muEHJY.crl (hash: 1Et26mhb1Op89ti4GmtG4X9xByVHKdTtdClbNM1MKCY=)
                          2: XpRtGgpQMgfYPr6Ae4n-CrXAlUE.roa (hash: NDYAShaJd5oq4XV/s8UZ9bjqNMFDxRAsxUeNLahhptc=)
                          3: fj5bsSjuUc6EOcUYU_AbknjdJUU.roa (hash: j5vvkFepIgEH6bOjdslOXR9IOh2ESlxcKkI5N8rCJlk=)
                          4: x4UYcdufAL3ng8pGSqFjgdXSCz4.roa (hash: 2STBeULPzfa883nzmJW1aoNIl1q/BlYpn/a/MGYClPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:b0:3f:d0:6f:7c:38:af:67:a4:5c:bf:94:35:50:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf385ced090dbf1d044734e12a270ee6b841c96
        Validity
            Not Before: Oct 10 12:01:09 2026 GMT
            Not After : Oct 11 12:01:09 2026 GMT
        Subject: CN=bce32d55797a0920703ced090759131d10319899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7f:32:55:26:16:c1:03:5e:d5:93:e2:89:36:
                    01:48:4c:5e:69:fd:08:f7:c9:bb:2e:e4:9f:89:4b:
                    54:83:d5:4f:37:cb:80:87:48:50:59:d3:b5:3e:27:
                    75:b1:ce:98:3f:c5:92:5a:d2:05:b7:44:e6:a7:65:
                    1c:3d:56:41:fa:6f:e8:16:d8:b6:7a:1f:af:82:41:
                    56:6e:c8:21:56:3c:44:11:62:3f:71:99:49:16:74:
                    a8:ee:86:43:b3:3c:57:e0:7b:4b:65:01:65:34:c4:
                    f3:ef:09:84:cc:5d:14:2c:95:a9:28:7e:49:33:72:
                    21:c3:28:75:96:c7:dc:8b:d1:ab:5c:33:63:0e:07:
                    f1:d2:fb:69:07:54:c7:a8:f7:04:4f:99:cc:b6:1c:
                    1e:b4:e7:37:2d:e1:ed:61:03:57:0e:ee:cc:74:48:
                    8d:c1:22:5e:a9:9d:58:9a:0c:df:f2:10:99:9f:d2:
                    d7:63:8a:ca:34:5d:ad:a5:98:7c:e2:4d:21:45:ba:
                    1d:11:be:2d:e4:b8:87:36:40:46:6a:c3:24:27:4c:
                    53:93:35:8d:0f:5d:e2:19:08:33:80:aa:6d:0c:45:
                    57:9a:6f:4d:8b:b4:67:84:96:6b:b9:53:01:ab:31:
                    82:fd:b7:75:5e:80:92:0c:03:93:78:ca:48:1f:72:
                    dc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E3:2D:55:79:7A:09:20:70:3C:ED:09:07:59:13:1D:10:31:98:99
            X509v3 Authority Key Identifier:
                keyid:EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ae:b2:e9:9b:22:90:2a:48:4b:bf:3b:0d:ae:d3:06:13:a4:
         22:02:46:ac:3f:6d:2e:fe:ee:17:12:3c:96:ac:ff:7c:4e:79:
         a4:fc:f8:15:f7:e1:2c:eb:5d:63:b4:5f:ef:83:77:73:0d:69:
         32:6f:26:ee:4a:62:07:7d:0e:fc:7e:21:f2:bd:a9:33:a3:e1:
         b8:dc:c0:db:a4:e3:dd:37:31:cf:9e:8b:be:71:bb:82:36:3d:
         b7:11:37:c9:62:de:cf:5c:fb:ec:a6:08:b2:25:88:e3:83:6c:
         cf:92:aa:ca:5b:bf:54:17:b0:b1:7e:d6:5e:c3:12:2d:0b:83:
         de:13:f9:8a:42:1b:63:a8:3a:1d:63:45:c0:60:e5:cf:a1:41:
         7a:9e:96:25:82:52:0c:b3:ea:c9:6b:56:de:5d:8e:8a:0a:95:
         9f:f0:9a:68:3c:f7:ba:29:da:9e:33:b5:9a:a6:95:ba:84:8b:
         28:1f:56:f2:3d:69:46:b0:bb:2c:15:e4:0f:ad:64:6f:33:fd:
         4e:02:b6:4f:73:73:a0:97:ea:9a:d1:61:76:9b:4f:22:91:73:
         8e:51:ed:22:b4:f1:08:4d:64:7f:35:c6:c0:14:3d:6b:68:45:
         16:33:25:1f:f1:75:e9:49:e7:cd:60:08:ed:3f:fd:84:be:a4:
         4d:c1:3b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:20:34 2026 by rpki-client