Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
File:                     O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json)
Hash identifier:          qZ+d12s4hvZDlyLhsb5TkT1NXHpFfNr9psV8+ix+R3E=
Subject key identifier:   08:E5:BC:1E:75:24:94:17:73:F4:85:98:83:46:44:BA:28:96:7C:20
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Certificate issuer:       /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial:       01A1310FF1C831E96AE474014A1DB1264DDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
Manifest number:          082F
Signing time:             Mon 12 Oct 2026 17:01:30 +0000
Manifest this update:     Mon 12 Oct 2026 17:01:30 +0000
Manifest next update:     Tue 13 Oct 2026 17:01:30 +0000
Files and hashes:         1: 1UG_i4X68HiPHviRW1z0p_TSsXk.roa (hash: Rxi5VpSkCVYP7zpaawxiqgEVbztptEcbkSS6G+faZaE=)
                          2: 921A09PidqQ_DPqribEcJ4Ns9ic.roa (hash: 1p6ZvcbQbV5L2uaDpeFuyGxdzNA8guzksazYOvFT/c0=)
                          3: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: 5cOR/DR9ZoVpa7tq6nRkoI0aExYnCY1DXKzE4YFWxZ8=)
                          4: QakAbn2qL6zC8DUBjSIVZLBbpXc.roa (hash: 6xvVEYi0a4GqVQ6WMVJR2REYvzQK/KHG+c6HRFsJwKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 17:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:0f:f1:c8:31:e9:6a:e4:74:01:4a:1d:b1:26:4d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
        Validity
            Not Before: Oct 12 17:01:30 2026 GMT
            Not After : Oct 13 17:01:30 2026 GMT
        Subject: CN=08e5bc1e7524941773f48598834644ba28967c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:57:85:6c:09:aa:62:85:3a:38:4c:c4:49:7d:
                    ab:2e:4d:63:71:05:fc:22:f9:83:3b:81:28:76:2e:
                    0b:be:ed:cb:13:69:94:a2:7a:a8:c0:07:3c:dc:55:
                    40:6a:47:38:27:2d:39:5c:c8:fa:5c:d2:74:58:9b:
                    36:b8:78:93:28:6b:44:96:e7:8f:6a:ab:7e:8a:72:
                    19:f2:18:72:37:01:4b:60:2e:8b:ab:ab:66:16:b5:
                    db:04:54:b3:4e:9b:cc:6f:8e:77:5d:06:ee:17:64:
                    a5:c6:e1:b2:88:bf:b1:c2:16:21:d9:45:4b:de:05:
                    13:85:17:0a:47:a4:56:95:04:c3:80:e1:37:7d:c8:
                    6b:68:7d:fd:4d:db:e0:42:ff:8b:97:0f:d9:92:42:
                    4a:2c:2d:29:4e:ed:44:ee:75:c0:50:16:47:27:b9:
                    58:cb:70:1c:9e:2e:3e:af:34:90:bb:dd:5d:37:99:
                    03:a4:a0:7f:76:e1:ee:24:f3:7a:f4:a6:31:f1:a7:
                    f2:1f:63:c5:f4:83:94:30:a6:8f:7a:1a:cb:52:ed:
                    6b:ae:11:e9:5e:e2:23:4e:ee:fb:e2:4f:e1:b8:09:
                    4f:cb:21:22:1d:40:55:f2:33:63:ae:80:45:9a:10:
                    f3:63:04:19:b1:f5:bf:36:15:b4:57:4d:71:6f:56:
                    44:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E5:BC:1E:75:24:94:17:73:F4:85:98:83:46:44:BA:28:96:7C:20
            X509v3 Authority Key Identifier:
                keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:73:fc:d6:35:9a:d2:6b:8c:b6:1b:0d:7b:26:3e:7b:5e:d2:
         2c:e8:4e:06:55:20:dd:7c:ed:98:e1:a5:43:c9:9d:62:1b:6f:
         73:31:92:13:b4:da:07:3e:bf:4e:d1:a3:6a:65:96:f8:e5:11:
         4a:87:5f:00:40:47:34:f4:8c:04:57:4c:1e:86:15:b4:13:16:
         fd:9a:6d:be:51:f8:42:ea:95:04:5f:f2:88:63:3d:43:0b:12:
         45:c7:b7:ad:cc:ae:b3:44:32:d3:a8:92:93:20:fa:42:7e:92:
         2b:19:39:b4:72:71:5d:c6:c8:ff:b5:c4:1b:28:f2:bf:88:de:
         5e:65:79:a1:a1:4b:69:ea:ac:8e:a1:75:12:90:e1:48:fa:ce:
         37:6a:9f:ef:8e:38:56:d1:78:23:1c:55:a9:a9:28:b8:2a:35:
         65:55:15:2a:1e:91:ac:9d:23:dc:79:29:b6:29:50:d6:f4:3c:
         ba:95:db:0f:a5:33:8d:12:1b:c2:2b:44:6c:73:72:92:c1:36:
         a9:ae:74:e3:e2:7e:71:a8:e5:18:a4:76:62:6d:7c:13:e1:a7:
         ba:74:67:0e:ed:ef:4d:71:fc:9c:03:61:a6:c7:20:84:71:ec:
         46:7d:53:1e:5b:31:68:61:ca:2e:80:6c:1b:78:8d:1c:9b:9a:
         3c:37:69:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 02:23:06 2026 by rpki-client