Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
File:                     A0sO7SxaeHrYf7SfBNP989D0nUw.mft (raw, json)
Hash identifier:          hBo8LtpdrBMnBrWPtO3JzSIPH8fyEcJoz6gCnLcebio=
Subject key identifier:   85:47:86:48:40:4A:18:6B:51:B0:BA:D0:8C:E9:25:32:B1:F2:75:65
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Certificate issuer:       /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial:       01A14616E4D90F7CC7BDD6810255654AEE4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
Manifest number:          1AAD
Signing time:             Fri 16 Oct 2026 19:01:07 +0000
Manifest this update:     Fri 16 Oct 2026 19:01:07 +0000
Manifest next update:     Sat 17 Oct 2026 19:01:07 +0000
Files and hashes:         1: A0sO7SxaeHrYf7SfBNP989D0nUw.crl (hash: qWvsy8tONQNwuP+CX+SEYWvXatCqjbgCTI9yNJX/Qz0=)
                          2: AnjhFMrWNEvE6l4HScTxK_j27SU.roa (hash: q/okpxUfXsi/Ghlksygzoe9SFHbeI77lnOKud4Wi2WM=)
                          3: ZRqL0ZQYom47oCvdLADk1vcBuk4.roa (hash: GIVmQ7w9VSaVEEGnKk80w5fPNmlaYNBnsxkMwqLM9S8=)
                          4: s-hYEuR7QzCMZYkhMtC8P1oHx24.roa (hash: xVxCRO6iWAgbZPNlY9qjziiMXXmRZfi75ei52vrfj30=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 19:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:46:16:e4:d9:0f:7c:c7:bd:d6:81:02:55:65:4a:ee:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
        Validity
            Not Before: Oct 16 19:01:07 2026 GMT
            Not After : Oct 17 19:01:07 2026 GMT
        Subject: CN=85478648404a186b51b0bad08ce92532b1f27565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:46:6b:aa:fc:49:a1:85:25:4c:03:0e:13:
                    c7:c4:27:c4:78:0c:b3:7a:56:81:60:fc:57:f4:0a:
                    5d:f5:0c:d4:e7:80:86:de:02:a7:8c:b0:44:80:07:
                    97:0f:87:e0:ab:c5:91:4c:eb:4a:57:fe:98:aa:4f:
                    4d:c5:76:e6:4e:66:9d:82:7e:91:72:fc:83:e7:0e:
                    96:8e:38:f0:59:c1:b5:ec:e0:91:d6:1e:6f:92:e8:
                    45:f0:17:d0:49:c1:88:7f:e5:3f:a4:02:20:52:e9:
                    bd:97:49:38:0e:8c:b0:9b:d9:54:24:2f:ae:7c:f4:
                    d0:d0:8a:1e:7c:b0:54:92:99:e1:44:2e:5c:f1:e2:
                    6f:f5:a8:66:a5:bb:92:ed:8f:bb:b4:3b:bb:fd:a9:
                    46:bb:50:07:52:48:b2:62:9a:df:b0:27:31:97:e8:
                    c0:2f:2b:0e:0d:17:61:d3:17:05:34:5e:39:6e:44:
                    f6:87:24:05:ab:21:5b:03:4c:32:38:27:5f:c7:83:
                    22:29:93:1d:0d:0f:65:c7:b1:87:b8:43:c4:8a:b6:
                    85:78:b3:55:f7:8f:4e:8b:94:7b:bb:97:91:a1:69:
                    59:68:06:21:46:7e:96:3a:8c:fc:3b:de:0a:0b:7b:
                    99:51:3e:3c:24:a1:46:53:85:dc:15:93:c2:f4:fa:
                    5e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:47:86:48:40:4A:18:6B:51:B0:BA:D0:8C:E9:25:32:B1:F2:75:65
            X509v3 Authority Key Identifier:
                keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:4b:2d:8d:b4:eb:1b:a9:ef:22:3a:6d:90:f5:e6:23:80:a1:
         34:75:b1:5e:35:62:bb:0e:d4:5e:77:f7:89:9a:1a:26:7f:a8:
         a7:f6:43:f5:d3:35:61:2b:91:36:3f:92:54:5e:06:ed:92:39:
         cc:23:fb:db:63:7a:d5:0a:ad:3a:c9:57:88:9c:4e:c7:eb:13:
         5c:65:e6:15:9e:da:c7:55:f1:53:30:33:cf:27:45:7a:53:a1:
         05:db:ec:ec:4d:d9:ff:3e:e4:4a:53:90:98:db:de:13:52:b0:
         1d:1e:9d:4e:96:a8:f3:de:e6:b6:96:7a:be:9a:a5:37:5d:a9:
         e8:e7:ae:58:49:7f:8f:9f:b6:18:99:37:af:02:5b:60:d1:9e:
         ee:9c:67:a4:3b:e1:d9:de:9d:88:7b:1a:4d:b4:ad:be:d9:09:
         c7:86:ba:71:2c:fd:a6:7c:79:c0:f6:d4:5e:e8:a7:3c:c5:d8:
         df:a3:5e:59:fe:dd:40:5b:99:46:29:24:7f:d8:ff:ff:1f:e0:
         22:e5:10:1b:63:0b:94:a2:62:c0:9a:02:3c:f0:ba:9a:de:b5:
         72:51:b4:9f:70:48:31:8a:e5:46:05:cf:6e:85:40:e4:92:5a:
         95:07:e5:d9:8e:ef:0c:55:a3:a0:43:b2:32:00:be:7e:eb:99:
         71:b5:a0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:58:40 2026 by rpki-client