Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
File:                     CcUO_hOq31QjsE8N3KizKIOVgj4.mft (raw, json)
Hash identifier:          sL0MyzEvhSqb3V0vAAVOUfTc+/MT6lBtF1CIC+x9kQc=
Subject key identifier:   8B:F4:6E:D1:69:F8:02:44:23:81:4C:5F:CF:D3:3B:05:CE:ED:0F:95
Authority key identifier: 09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
Certificate issuer:       /CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Certificate serial:       01A10701714C3F9B35A6BA3E0541AC224C36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
Manifest number:          1A8B
Signing time:             Sun 04 Oct 2026 13:01:37 +0000
Manifest this update:     Sun 04 Oct 2026 13:01:37 +0000
Manifest next update:     Mon 05 Oct 2026 13:01:37 +0000
Files and hashes:         1: 0v42-yuEzObgwInMahxldfZmrHg.roa (hash: spJCO+lQpC/r9TzdhrE3WFFw5uBpamaSo1GrCaKj4Fg=)
                          2: CcUO_hOq31QjsE8N3KizKIOVgj4.crl (hash: R62jEspoa+amt3Pnci3FWO2XMZZws+D5RwfwlsGh83s=)
                          3: OIwvLVG14Er178GMxwrh7ig3kjQ.roa (hash: rrrKwVzY5LibLzq9ZeJSCRsjD6gQ33lRLKMuzjoUt44=)
                          4: gD3TW1PF3JAEZdLvATbmgeJVunI.roa (hash: t6EoCKHR2D/E7ctxbU4crKBTLrkD21MXceMX9ltMJKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:01:71:4c:3f:9b:35:a6:ba:3e:05:41:ac:22:4c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c50efe13aadf5423b04f0ddca8b3288395823e
        Validity
            Not Before: Oct  4 13:01:37 2026 GMT
            Not After : Oct  5 13:01:37 2026 GMT
        Subject: CN=8bf46ed169f8024423814c5fcfd33b05ceed0f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5d:16:9a:b3:cc:54:30:92:92:58:7f:38:6c:
                    e7:b9:e5:bf:0b:07:a0:e1:4d:70:c3:7d:ad:56:60:
                    7c:c2:7b:37:cb:a7:7d:f7:1f:8f:c2:2a:08:1c:1c:
                    5e:6e:fc:d1:4b:47:f7:b3:02:3c:dc:a9:f4:61:ce:
                    27:7b:65:f7:40:ea:ad:d3:5c:55:92:6e:93:53:e4:
                    23:87:f7:c7:66:c5:bc:e9:d7:0d:0f:ca:bf:72:52:
                    32:e8:2d:b6:aa:01:09:a7:6e:9a:a6:8c:9d:54:fd:
                    01:e2:b1:39:0f:eb:85:33:df:a7:75:8d:02:f3:7e:
                    b6:0b:e0:ed:ca:7b:19:9e:fc:3c:f6:09:3c:bc:e5:
                    3b:ac:43:e9:66:9d:85:66:66:6c:2e:0b:48:be:84:
                    54:64:7d:88:73:84:ca:52:83:14:66:99:41:80:c7:
                    73:ce:50:36:bc:d0:bc:de:3f:cd:88:42:dc:5e:07:
                    4a:03:68:a4:0d:64:51:db:b1:6c:5c:34:af:7e:5c:
                    75:b9:7c:52:dd:fd:ef:17:99:b8:a6:56:fb:a9:2b:
                    14:26:e7:f9:7e:a8:9f:a1:2b:72:03:e3:8a:23:72:
                    d7:91:ae:17:69:38:66:0b:62:47:ba:b4:88:23:44:
                    33:16:0d:56:49:04:7a:9d:e3:6f:4e:ea:8a:e1:85:
                    e2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F4:6E:D1:69:F8:02:44:23:81:4C:5F:CF:D3:3B:05:CE:ED:0F:95
            X509v3 Authority Key Identifier:
                keyid:09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:47:ce:1f:4d:e4:f8:d4:21:6d:e6:6a:93:5f:21:85:7e:19:
         c2:c7:6b:36:b2:48:aa:4b:48:60:c9:3b:30:25:0b:3b:96:3d:
         fb:11:00:aa:b4:26:94:cc:bf:6f:46:d9:f7:c5:a5:9e:ad:ab:
         55:63:dd:9d:00:b6:d7:97:a5:80:b4:8c:f1:c4:40:cf:26:50:
         42:78:24:f7:2b:af:bd:e9:bb:f6:49:bb:87:4d:92:f0:fa:2f:
         c6:e6:28:a8:d8:ff:38:d2:d7:35:c3:e1:99:e0:08:26:88:c1:
         59:da:5d:22:f1:34:09:c0:1d:bb:ae:35:e7:f9:17:85:62:d1:
         17:75:97:ff:4c:7c:54:90:ac:87:84:8f:1a:a5:96:c8:52:78:
         13:7d:79:7b:64:8e:fb:45:b4:45:cd:76:d6:95:23:09:00:a3:
         7a:26:92:a5:c9:93:24:96:24:7b:c0:c3:f0:05:ea:27:1d:19:
         c8:dd:ff:f1:ff:33:c7:2c:73:0c:52:8e:83:95:9e:aa:4a:2c:
         61:05:f8:53:2f:19:f1:4a:5b:a2:e5:47:d4:c2:d9:c0:25:6a:
         35:c9:33:3d:13:e0:11:3a:b0:d6:db:b0:56:e6:af:e3:81:10:
         7a:71:cd:62:12:6e:c6:0a:df:c0:e5:d5:79:33:8e:bf:87:75:
         16:21:81:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:05:31 2026 by rpki-client