Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft
File:                     b58jpjrWJaftMNptos3J6LW7gD4.mft (raw, json)
Hash identifier:          yZb1H8r3Nl/msboR88ScfxJikli7SnYZM64xTDThgg0=
Subject key identifier:   6B:7A:73:EE:71:32:3E:1D:7C:9B:86:1A:02:C5:06:63:AE:35:D2:3F
Authority key identifier: 6F:9F:23:A6:3A:D6:25:A7:ED:30:DA:6D:A2:CD:C9:E8:B5:BB:80:3E
Certificate issuer:       /CN=6f9f23a63ad625a7ed30da6da2cdc9e8b5bb803e
Certificate serial:       01A12955C1DA24DB433A1B4EC24133EEC410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft
Manifest number:          037B
Signing time:             Sun 11 Oct 2026 05:00:48 +0000
Manifest this update:     Sun 11 Oct 2026 05:00:48 +0000
Manifest next update:     Mon 12 Oct 2026 05:00:48 +0000
Files and hashes:         1: 7aMZ7Tnhqpd3dO5kGH-ltVT-Edk.roa (hash: F+aXagJfpXFb1BZvz603l6LLwlIqiSdjWHeDYjDB1Bs=)
                          2: b58jpjrWJaftMNptos3J6LW7gD4.crl (hash: aIvSB2cd+VGPr8yQ3V0WCk7hXf+fHl9dKkilc82dpC8=)
                          3: f7oJ5S7QhjbF7Hv3vAYtSNv0X-8.roa (hash: f3H5djjlFovDR3gNvScOu/4dBbS3OgO3hekLoTa++Qg=)
                          4: uOpNXNqtHI5fhaitzbdVAYNd-lI.roa (hash: rovI3vjkbKEi6l+iPvXBuVPVhZOqOPsoOuCNHyVt+3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:55:c1:da:24:db:43:3a:1b:4e:c2:41:33:ee:c4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9f23a63ad625a7ed30da6da2cdc9e8b5bb803e
        Validity
            Not Before: Oct 11 05:00:48 2026 GMT
            Not After : Oct 12 05:00:48 2026 GMT
        Subject: CN=6b7a73ee71323e1d7c9b861a02c50663ae35d23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f1:c4:4f:ea:e3:a5:81:50:46:d9:d0:59:e1:
                    0d:3c:cb:fc:cd:97:72:18:9d:57:31:b1:05:2f:cf:
                    7d:3e:0b:15:92:05:b7:8c:e1:00:80:2a:f8:ea:fa:
                    f9:45:08:b2:c0:f7:9a:d6:3b:e2:0a:b6:d2:d3:91:
                    be:cd:35:9a:2b:36:d2:dd:8e:b9:7c:c6:30:b6:4f:
                    d2:0c:cb:41:57:5f:af:a7:83:59:8b:65:c2:f7:b1:
                    ac:4f:5c:5e:fa:f8:c4:b8:34:72:c6:4d:8e:9d:50:
                    9b:75:51:e1:5c:9c:83:6a:bc:87:3e:6c:cc:70:f8:
                    a0:34:b9:02:77:4e:f4:70:b5:e3:51:00:07:76:9a:
                    9c:d6:ab:70:42:d7:58:a7:90:60:d7:e5:b6:95:14:
                    36:39:d8:62:7a:e2:e2:ca:b3:f5:9c:7c:1e:91:2a:
                    6c:68:50:56:e9:54:54:e1:e5:24:47:7f:bb:32:97:
                    d4:5d:89:a4:1b:1c:64:66:83:81:62:f1:e1:f4:b3:
                    76:5e:f5:5e:ba:ac:7e:0d:95:f6:02:46:42:57:a2:
                    b6:a5:42:e6:81:95:14:cb:0a:34:2c:4b:67:f0:a3:
                    7d:23:40:a7:78:a0:2c:7b:eb:7f:5e:72:41:a7:fd:
                    a4:b5:60:d3:08:99:47:39:6d:12:92:62:44:49:1c:
                    43:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7A:73:EE:71:32:3E:1D:7C:9B:86:1A:02:C5:06:63:AE:35:D2:3F
            X509v3 Authority Key Identifier:
                keyid:6F:9F:23:A6:3A:D6:25:A7:ED:30:DA:6D:A2:CD:C9:E8:B5:BB:80:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:66:fd:97:7e:80:92:c8:5e:2e:b9:d7:06:ef:05:17:3f:ae:
         62:32:0f:b2:a2:62:e2:00:f4:50:66:5f:13:57:7c:57:27:60:
         3e:81:98:01:25:cd:4b:01:20:1f:b8:70:93:81:7b:d4:2b:35:
         fc:08:51:04:35:5b:7c:f7:b3:17:5e:14:78:b5:e6:fa:6f:87:
         ef:0a:72:7d:86:67:f2:b5:d4:e5:4f:4a:cb:5f:cf:04:55:36:
         4f:d2:00:09:85:e9:9c:47:0a:6f:4f:0d:cc:5d:5a:d9:4a:ba:
         0d:7f:9a:61:e6:a6:b4:77:7b:82:13:0a:97:09:11:af:66:d0:
         d2:a7:8f:c7:9c:95:f7:6e:43:73:93:b1:7a:60:4a:c0:3b:fb:
         20:be:60:3c:6b:65:d9:2f:73:80:c1:c9:ac:eb:67:cf:bc:d3:
         c6:5c:e6:12:08:b8:76:67:2b:9b:15:0f:f2:4a:7b:a4:4e:df:
         d3:ad:6d:fd:1c:a2:09:0b:f8:54:9f:63:c0:a0:78:fa:65:03:
         b4:88:5c:85:38:7c:16:5a:af:bd:85:e9:c1:0d:e5:af:d6:53:
         50:66:37:47:3f:82:12:d7:84:02:43:88:16:a4:94:f9:f1:4b:
         22:3b:d9:5e:2d:9a:af:3e:38:79:b4:40:fd:8d:20:66:f4:91:
         55:e6:82:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:40:31 2026 by rpki-client