Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
File:                     dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json)
Hash identifier:          ZhZupL71tZnK81JqUra8migpnkOX6MqRIoIQEpkSKwo=
Subject key identifier:   E4:73:1D:49:4D:BD:94:54:6F:ED:F6:CB:D9:C7:71:8B:15:CB:6B:5A
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Certificate issuer:       /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial:       01A17213529DC3DD6EBDCBF4BFF64DA14E5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
Manifest number:          0F7B
Signing time:             Sun 25 Oct 2026 08:00:31 +0000
Manifest this update:     Sun 25 Oct 2026 08:00:31 +0000
Manifest next update:     Mon 26 Oct 2026 08:00:31 +0000
Files and hashes:         1: KMvjq5V4Ksx01k9TjiIKtXCe5pA.roa (hash: 1beuOrWqdA+O+erqVb2gqs5tEOIpMoZMwqBtE6QzSbA=)
                          2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: 5LyIwvvxlie5imsoWI4kxk9pd/2A1uwIqT71ckWjPy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:72:13:52:9d:c3:dd:6e:bd:cb:f4:bf:f6:4d:a1:4e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
        Validity
            Not Before: Oct 25 08:00:31 2026 GMT
            Not After : Oct 26 08:00:31 2026 GMT
        Subject: CN=e4731d494dbd94546fedf6cbd9c7718b15cb6b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bd:98:d0:d3:a1:5b:63:4f:9d:4d:65:e0:a7:
                    2e:17:8e:e6:2e:c1:03:3b:fa:4a:00:d6:c0:cf:03:
                    6f:f6:cc:b5:40:3e:cc:2a:25:2e:02:dd:31:23:f5:
                    ba:3f:c2:b3:02:b9:66:b1:cc:b0:ac:6e:63:8f:bd:
                    35:f2:8d:78:93:7e:08:44:82:fa:a4:d6:a2:3d:4c:
                    8b:5d:67:60:a7:13:98:36:09:4c:6d:08:b8:4e:65:
                    ba:87:fd:89:19:d6:04:8c:00:25:5d:83:67:88:04:
                    5a:48:7f:8e:ee:28:d1:b6:0e:4c:6c:e8:b9:74:56:
                    3d:e4:70:37:91:1f:84:69:fd:91:f7:d5:f3:a4:68:
                    bd:dc:f5:0e:3e:22:99:1c:69:85:30:16:a4:ca:d7:
                    0b:dc:22:17:7c:d5:cd:27:cd:48:38:cc:87:38:af:
                    bb:c8:f4:61:77:41:60:93:50:bf:06:35:0c:16:fc:
                    bb:6a:2d:15:43:6d:0c:0b:bb:0a:bb:64:5e:d2:28:
                    ea:15:46:a8:a9:54:ea:b7:82:55:e5:b8:ab:a7:2b:
                    c0:32:14:bb:f2:45:82:e5:27:69:01:a5:23:9b:8d:
                    ab:6f:c1:a5:f7:18:59:5a:04:fa:eb:57:cc:a7:62:
                    a4:5b:66:63:92:ec:3d:05:98:66:86:33:7b:f5:34:
                    62:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:73:1D:49:4D:BD:94:54:6F:ED:F6:CB:D9:C7:71:8B:15:CB:6B:5A
            X509v3 Authority Key Identifier:
                keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:9b:73:da:24:40:b8:77:09:b7:a8:81:34:c7:ca:6a:9a:4b:
         67:10:48:b0:62:0c:b2:f8:83:23:d2:26:f9:86:9d:74:de:20:
         71:d8:5d:23:b9:9c:ab:55:de:f2:28:69:32:d1:b4:43:c2:5f:
         ab:42:31:65:0f:9a:9f:35:d1:a4:dc:06:58:32:f6:d2:89:1d:
         ea:33:c0:6f:3f:0c:29:c5:da:d6:81:66:52:eb:20:db:24:fb:
         c4:f7:da:09:d6:4e:91:42:bd:c2:58:fc:a0:b1:a6:c7:4b:b4:
         68:d8:ab:82:c1:ce:eb:27:d5:31:74:b0:cd:7a:27:de:d1:ba:
         16:4c:7b:00:94:b3:96:e1:b8:b0:ee:f0:6e:ed:af:ae:b4:f1:
         90:ed:35:7d:d6:40:70:10:33:46:f1:a0:91:87:15:63:30:b4:
         80:1b:81:64:cb:f7:00:1b:06:96:cc:5d:1d:b8:98:f5:7e:51:
         0a:f1:7e:dc:a7:bf:01:dd:94:d9:d5:0d:38:de:a7:69:8b:08:
         f4:fa:11:fc:7a:21:f6:22:39:56:d3:b0:94:38:6f:ae:0f:7d:
         94:5f:22:ea:af:b3:f6:e2:e2:89:e3:eb:58:e0:45:80:79:ac:
         40:fb:b5:b9:0c:d9:f7:5d:69:01:fb:46:f0:51:15:80:5a:9d:
         85:dc:d8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:29:40 2026 by rpki-client