Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
File:                     0RE68_NruSoPL72v47Zx9rn876g.mft (raw, json)
Hash identifier:          da7KOImdDc+5dR+urR66Km/Mk6o0N6W5LsW7hCStG94=
Subject key identifier:   AF:33:47:D3:05:F2:5B:74:65:7D:C1:99:29:7E:70:FD:07:EA:87:B6
Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Certificate issuer:       /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Certificate serial:       01A14014CAE90CD28A1528A656E431C5C90A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
Manifest number:          0AF6
Signing time:             Thu 15 Oct 2026 15:01:06 +0000
Manifest this update:     Thu 15 Oct 2026 15:01:06 +0000
Manifest next update:     Fri 16 Oct 2026 15:01:06 +0000
Files and hashes:         1: 0RE68_NruSoPL72v47Zx9rn876g.crl (hash: G86jnoHzwys9YeRUAhcLin2ucguVnEDF2OFSg0rLaSk=)
                          2: BvyJ9VlIpALPuyQE8sebxED-YP4.roa (hash: 5Go0Jt+Ko1P3sZc36GUqZasMZpi+yqnYoeBDKhqHQ94=)
                          3: Ca0R-mhrFY6HFoHS1b5WT3pwjYg.roa (hash: o7q7JRHvs80nHIVjNQ3bsCLMG4wGtstYaFpsR/bUbvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:14:ca:e9:0c:d2:8a:15:28:a6:56:e4:31:c5:c9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
        Validity
            Not Before: Oct 15 15:01:06 2026 GMT
            Not After : Oct 16 15:01:06 2026 GMT
        Subject: CN=af3347d305f25b74657dc199297e70fd07ea87b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:53:2a:00:0d:de:2b:d9:c4:09:99:c2:9a:2f:
                    64:b4:fe:92:68:9d:72:44:97:bc:ac:cf:36:1f:e7:
                    8d:66:c3:a2:4a:70:f6:93:62:10:4e:22:52:c7:66:
                    0d:c2:54:dd:16:7e:bb:e4:21:2f:68:4a:26:23:ff:
                    83:90:e9:ef:ad:d0:5f:3b:1e:27:76:d9:83:d7:44:
                    f1:ec:2e:c6:14:76:b6:1a:43:6b:e9:50:51:22:f2:
                    eb:50:b7:8f:b8:c5:a2:87:a9:aa:61:e5:3e:66:71:
                    4c:0e:82:e4:61:78:15:01:d0:97:65:b0:3e:8d:45:
                    b1:6f:78:44:62:84:98:0a:cc:e7:a3:21:2b:59:ea:
                    de:51:50:e4:eb:07:d6:c8:5c:67:10:e7:65:e9:49:
                    59:05:a3:ad:3b:cf:c2:b4:9a:61:3d:77:75:a5:e6:
                    f9:a4:98:7c:f0:5e:07:75:a1:53:45:a0:69:98:f4:
                    30:bd:59:ba:ac:88:8f:6c:1d:77:69:fd:9a:4c:60:
                    c0:f9:b1:ed:47:3b:4e:f0:dd:40:5c:d6:1d:3a:6e:
                    c7:2d:e4:8f:84:85:f5:26:07:fe:d1:b6:ea:ca:20:
                    73:33:05:60:96:9e:92:08:9d:c5:2d:e4:b9:d3:29:
                    8e:de:71:23:04:85:47:76:dd:f1:13:b1:bf:50:97:
                    d3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:33:47:D3:05:F2:5B:74:65:7D:C1:99:29:7E:70:FD:07:EA:87:B6
            X509v3 Authority Key Identifier:
                keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d0:22:5e:1a:c0:ed:9b:43:b5:a7:f3:fa:17:fc:5a:24:fb:
         c7:3f:74:b4:f8:63:cd:86:55:27:ae:dc:9d:36:a7:1b:cf:1c:
         10:ea:f0:65:08:ad:14:5e:3a:72:c8:bf:c7:09:1f:83:e3:98:
         0b:04:4c:89:33:71:e0:4f:a4:38:47:fc:2e:1f:27:c8:af:2f:
         57:e5:27:c1:1c:ad:0a:6c:10:21:5c:99:60:1e:57:a7:f5:be:
         f3:39:8a:0c:94:39:eb:53:d8:cd:03:27:fb:52:a3:ba:92:ff:
         29:3d:3e:36:de:11:29:2b:eb:98:32:e3:48:4c:f3:2f:10:a8:
         50:8d:6c:6e:cb:38:2d:87:ab:b6:97:2d:a3:78:45:6e:3a:14:
         2d:4a:d2:0c:8f:0a:58:41:6b:f9:7b:98:0a:fb:65:28:64:26:
         49:3b:bf:6b:48:07:ab:2f:f3:4a:fb:3e:83:c9:0e:8f:8a:38:
         8e:9a:18:50:47:09:b9:02:44:1f:8d:ae:df:eb:b1:eb:c3:8d:
         97:96:74:10:60:a3:9b:2f:d1:5f:8a:05:36:85:6b:e8:36:fb:
         c8:e6:28:fe:04:3c:1b:7c:8a:95:dd:91:1d:d5:7d:8a:d4:7b:
         c4:44:d5:6a:7d:2d:70:13:e2:93:bf:35:49:56:ab:74:88:86:
         53:d8:90:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:50:46 2026 by rpki-client