Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
File:                     0wGZH8ND81jA8u665Vzy2jRSHHo.mft (raw, json)
Hash identifier:          i3xi9kKVP6TWfzvDsV5MptdIhmXCPnmf4juPgHOfMaU=
Subject key identifier:   3A:FF:CF:A7:28:92:11:7A:66:28:6B:08:7A:7D:4E:3F:1F:11:1E:0D
Authority key identifier: D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A
Certificate issuer:       /CN=d301991fc343f358c0f2eebae55cf2da34521c7a
Certificate serial:       01A1076F1901592C55B2BBE009182016BC91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
Manifest number:          1A8A
Signing time:             Sun 04 Oct 2026 15:01:23 +0000
Manifest this update:     Sun 04 Oct 2026 15:01:23 +0000
Manifest next update:     Mon 05 Oct 2026 15:01:23 +0000
Files and hashes:         1: 0wGZH8ND81jA8u665Vzy2jRSHHo.crl (hash: MLAuUhGNo0djLREmfcP/Bq07crtNBtxkj/ZhcnrQ2xw=)
                          2: 13qi8AI2-EVNpOSQSS-2sC_j3KU.roa (hash: Ao/N1CH5IyqTs+C/2xXMQjWZkUvQDWoCz0AZMzqUUQQ=)
                          3: C0D3XPGkyCuPOGv9YW3WaQ81a9g.roa (hash: g8qNTYkk+kkeSWc3XwhwJA4ghsKgURElfaxWHrKjSQA=)
                          4: jv_YABzSModWtlchMh_9InM60gw.roa (hash: 4R+lUnXKrDrYcGJOHmhH6oyg2E2dK50I55PSI9u6SrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:6f:19:01:59:2c:55:b2:bb:e0:09:18:20:16:bc:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d301991fc343f358c0f2eebae55cf2da34521c7a
        Validity
            Not Before: Oct  4 15:01:23 2026 GMT
            Not After : Oct  5 15:01:23 2026 GMT
        Subject: CN=3affcfa72892117a66286b087a7d4e3f1f111e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5a:ff:28:28:76:19:85:bc:84:16:fa:f4:c1:
                    f0:2f:0d:88:2f:d0:33:20:98:cd:19:65:a2:af:57:
                    b6:e0:53:22:12:a6:f4:c1:ea:97:e3:88:69:69:46:
                    68:21:0b:34:2a:f0:8b:aa:79:82:01:60:a1:c4:4e:
                    10:c2:85:2b:6e:7f:c1:e5:dd:ec:ff:21:24:be:68:
                    54:2e:c4:14:3c:e3:96:04:f7:42:62:bc:57:62:6c:
                    78:9d:bc:0f:d0:42:dd:f1:07:d9:bf:f5:23:8f:c3:
                    af:af:42:6f:0c:30:14:4e:c1:f2:c0:60:ae:1b:cb:
                    d4:5e:21:1d:19:44:d4:ad:e5:c3:92:bc:66:67:bb:
                    40:de:12:07:7a:f5:24:6c:6d:44:82:1d:8d:26:0f:
                    b7:60:48:2f:bf:0a:63:73:96:e2:9e:1b:3c:ef:97:
                    d4:e9:93:01:aa:61:59:12:3d:a1:c0:84:e9:c8:1b:
                    3d:0f:9e:07:11:a3:ef:6c:bc:35:30:a3:30:cc:bc:
                    9c:e2:ac:8c:2e:73:7a:da:4f:85:6f:8c:94:c2:cf:
                    55:b1:47:09:d7:2d:ad:d9:56:73:cc:68:dc:c4:98:
                    05:40:6c:38:be:7e:c3:86:44:d2:b6:a1:68:47:ec:
                    dc:cd:8b:5f:83:a5:d6:88:4b:5c:11:ef:6c:be:93:
                    47:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FF:CF:A7:28:92:11:7A:66:28:6B:08:7A:7D:4E:3F:1F:11:1E:0D
            X509v3 Authority Key Identifier:
                keyid:D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:3f:83:e0:bf:02:3d:49:b8:08:a9:22:88:b7:e3:cb:1d:5b:
         5f:1e:3a:d5:f8:c5:96:19:0c:9c:b7:90:16:17:78:4a:95:d9:
         75:cb:b0:fe:9b:e0:f2:c2:af:2c:f4:3c:b8:49:4b:a2:6e:a1:
         2e:01:fb:fa:2e:35:26:48:fb:b9:bf:91:80:fa:ce:a4:61:01:
         1f:64:06:a8:11:60:df:23:be:e5:b9:fd:4c:ee:9a:58:94:e4:
         54:55:d3:0a:85:db:13:c9:56:34:f3:79:e1:62:2d:92:04:1f:
         b4:60:cf:aa:cb:a2:fa:75:bb:43:48:d9:51:ac:b5:47:b3:b1:
         db:a8:4e:a5:0b:3e:54:a7:5b:99:a1:0e:a3:69:78:58:7c:5f:
         9c:86:14:e7:a7:09:db:60:0b:98:cd:81:9d:b8:d4:0c:25:01:
         85:a2:8d:35:9a:94:6b:5e:9e:54:fa:88:e3:94:5a:65:b0:ee:
         67:1b:28:a7:e1:76:34:bf:e0:02:0e:90:0b:df:eb:de:e1:b6:
         db:26:05:fe:65:f1:84:3b:d8:b1:c8:a2:d1:dc:3e:4b:b8:87:
         f4:82:35:a2:b4:ce:6e:22:9c:c7:00:df:3c:de:61:e6:f8:97:
         19:26:0b:03:30:ff:f5:6e:43:e9:16:8d:23:1f:eb:ac:65:b8:
         5b:2e:34:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:04:04 2026 by rpki-client