Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
File:                     B67xkPRL_B2wxQ8ac_3wFwga_hY.mft (raw, json)
Hash identifier:          ZicIQQbBa/tKuIY7n2/U/gRFwKZtyUUx0Ywp3yD4a78=
Subject key identifier:   F8:36:B5:8F:A8:82:32:77:43:15:CA:EC:75:AF:B6:CE:8B:3C:CF:B8
Authority key identifier: 07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
Certificate issuer:       /CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Certificate serial:       01A13F395E6980132190AA4514CBBB012BC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
Manifest number:          0FFE
Signing time:             Thu 15 Oct 2026 11:01:26 +0000
Manifest this update:     Thu 15 Oct 2026 11:01:26 +0000
Manifest next update:     Fri 16 Oct 2026 11:01:26 +0000
Files and hashes:         1: B67xkPRL_B2wxQ8ac_3wFwga_hY.crl (hash: +BShb0KwwXVq8/8h9aVp4vJj9PtcwDHfGIE7VdTjlzU=)
                          2: g8AniT98jgfKG_IB19d9xu2syLw.roa (hash: 7R3vOrjrBzZjR9ZmhYF8VUus96RI5RYOknR8+bpyK+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:39:5e:69:80:13:21:90:aa:45:14:cb:bb:01:2b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
        Validity
            Not Before: Oct 15 11:01:26 2026 GMT
            Not After : Oct 16 11:01:26 2026 GMT
        Subject: CN=f836b58fa88232774315caec75afb6ce8b3ccfb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:5c:9f:e1:45:72:5e:98:7a:2b:f0:c4:2c:
                    ce:61:2a:b7:33:9c:da:73:89:5c:6e:56:47:3b:34:
                    f5:16:f0:69:a0:bc:32:90:39:f9:3b:e7:f1:ee:d7:
                    06:5b:8e:61:2c:81:34:c5:42:f3:e0:cf:b0:de:a7:
                    6e:5c:61:67:95:f1:79:7f:30:6f:65:01:2b:c4:ac:
                    a4:af:e0:12:6f:f5:1d:7a:48:91:2b:f0:eb:07:fd:
                    32:bf:1f:57:a5:3a:4b:7c:cc:2c:9a:4d:5a:d5:a0:
                    df:9f:3a:92:b5:d4:7f:2b:f4:8b:26:f0:0e:a2:da:
                    d7:35:1a:bf:41:28:05:36:55:33:29:63:ca:b4:60:
                    65:e5:f4:e2:71:f1:0b:d1:c0:9d:16:3b:e4:46:78:
                    6f:3e:d1:9c:cd:c2:e5:ef:1c:08:96:1b:ab:02:2a:
                    c9:7e:47:c5:13:56:08:53:b0:d3:1a:ee:e4:49:1f:
                    27:ec:f0:7d:c1:c7:35:37:da:4b:3f:a5:09:2b:fb:
                    97:15:11:55:f1:77:7f:a5:5e:7c:6f:c0:ee:46:d2:
                    e3:3e:ab:9b:1b:ab:19:2c:dc:71:c7:3f:01:f1:0b:
                    01:40:83:4e:19:6e:b3:08:e5:78:5d:c8:69:2b:da:
                    32:d3:d1:56:3c:56:b9:c9:60:8e:06:9f:47:ab:f4:
                    ed:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:36:B5:8F:A8:82:32:77:43:15:CA:EC:75:AF:B6:CE:8B:3C:CF:B8
            X509v3 Authority Key Identifier:
                keyid:07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:24:83:3a:ab:8d:36:34:20:89:cb:d5:61:98:22:e6:e9:e3:
         ca:72:2f:27:3d:f2:47:c6:6a:37:2e:3c:49:0d:67:bc:71:c1:
         a3:16:d7:25:ff:cc:c4:64:09:1f:80:d2:c2:6e:61:9b:18:e7:
         91:c9:e2:8f:ad:c3:26:dc:5a:42:e2:bd:52:e5:be:fc:1a:13:
         84:85:c2:ff:1e:eb:9e:ea:6c:05:a0:c0:17:b5:be:9a:5d:03:
         b7:a8:9e:c3:86:ab:22:be:6f:34:6c:27:3d:71:7c:35:db:70:
         b7:c2:dd:49:01:30:96:39:ea:e8:47:41:ab:48:a8:cd:39:6a:
         0d:02:c7:1f:2c:e0:0b:2d:19:65:f7:b1:83:10:8b:26:2c:6c:
         32:01:f1:26:03:94:ef:45:cc:48:dd:af:db:b6:5e:c5:b2:0b:
         23:5c:c6:bf:ea:26:52:5f:dd:d2:57:39:a2:ec:45:1e:cc:24:
         f2:a8:e0:bb:89:ba:66:90:7b:ea:16:ac:21:a0:bc:6c:90:ec:
         db:5e:0b:d0:3f:43:97:80:43:33:07:c0:b7:38:a0:20:10:aa:
         e8:f7:90:67:cd:3e:b2:a9:0b:81:d1:03:bb:01:17:3d:70:c0:
         e0:53:c6:1b:49:23:41:74:91:49:7a:24:f4:d1:9d:d5:fc:27:
         a3:c9:71:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:22:57 2026 by rpki-client