Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File:                     0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier:          Pn7Ooqn52LJ2K8xzC5GwfIOITjtv0zdSp0N9V3D5NfI=
Subject key identifier:   0B:2B:33:1F:D4:43:90:10:83:56:21:23:BA:D1:44:55:26:F4:44:5C
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer:       /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial:       01A13FA75979E5A04FB92377E313FB77D65D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number:          0EB1
Signing time:             Thu 15 Oct 2026 13:01:34 +0000
Manifest this update:     Thu 15 Oct 2026 13:01:34 +0000
Manifest next update:     Fri 16 Oct 2026 13:01:34 +0000
Files and hashes:         1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: 19bkJAI5Jxh9x91rZnSfR4cTbhykHN0lrUgJllI6nGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 13:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a7:59:79:e5:a0:4f:b9:23:77:e3:13:fb:77:d6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
        Validity
            Not Before: Oct 15 13:01:34 2026 GMT
            Not After : Oct 16 13:01:34 2026 GMT
        Subject: CN=0b2b331fd443901083562123bad1445526f4445c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:7f:dc:15:a8:d3:6f:34:7b:2d:cc:be:77:
                    5d:3a:50:23:5e:74:79:4c:60:6d:6c:a3:61:ff:10:
                    1d:3e:b5:88:59:bd:a3:0e:5c:c4:eb:eb:28:c5:20:
                    7d:86:a5:85:79:0e:c8:8a:ac:32:a1:6c:b8:f4:91:
                    dd:7e:2d:4d:37:36:90:85:72:11:84:8a:d8:a0:d9:
                    0d:eb:ce:79:c7:88:ae:d0:07:ba:7d:e5:cb:f6:5c:
                    30:e5:02:fe:b4:75:cc:9c:04:52:d3:47:d9:4c:22:
                    1d:97:f3:7e:9f:e6:0e:a3:0e:49:cc:27:55:b3:5e:
                    f5:77:0b:75:13:f2:2b:b4:b8:f6:27:9f:b3:be:f4:
                    12:50:a1:17:19:93:bc:19:12:87:ec:48:fc:93:64:
                    ed:b6:b4:11:f9:27:a5:df:8e:f0:ed:07:06:17:9f:
                    e8:7c:89:c1:b3:15:0b:a3:40:b2:f0:1c:26:06:93:
                    2f:43:42:82:6b:25:b8:72:15:87:e6:ab:fd:0c:9d:
                    35:56:68:12:ea:c9:8a:7a:d0:69:eb:96:7f:4e:41:
                    6d:29:2e:5b:ca:57:77:95:94:75:6b:bb:27:c2:f3:
                    ba:e1:1c:dc:03:86:d2:e9:6c:3b:40:a8:78:9c:de:
                    83:6b:0e:38:4f:3e:eb:64:f3:e4:7b:62:c9:19:da:
                    3f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2B:33:1F:D4:43:90:10:83:56:21:23:BA:D1:44:55:26:F4:44:5C
            X509v3 Authority Key Identifier:
                keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e3:b8:82:d5:a0:2b:cf:0e:e2:77:57:91:55:38:65:d7:9b:
         3e:a9:35:e0:9b:fe:3e:0e:90:9d:5b:6b:50:78:1e:81:81:8e:
         c2:e6:1a:7e:82:a9:ca:91:ac:3a:2a:ba:d4:0b:43:e7:29:a2:
         9f:b8:d9:90:12:6d:66:29:d7:1d:ff:4f:c2:6b:e4:e9:c7:f1:
         84:cb:07:f8:29:34:bf:2b:1a:3e:d6:37:f8:2f:c4:dd:78:2a:
         c4:27:2a:da:6e:dd:0b:da:07:62:9b:0b:9d:20:d4:c6:8f:fc:
         0a:91:6c:6c:e5:92:29:ca:18:90:80:bd:3f:d3:57:0c:0e:93:
         f2:0a:61:b6:a6:50:f0:08:b4:15:4d:40:cc:c7:d5:f5:9b:93:
         f9:61:e7:44:bf:e0:77:1b:9a:ca:03:e1:16:da:ce:d8:ad:72:
         ba:49:1e:5a:79:56:a1:13:e4:a5:4d:2c:46:a4:42:1b:66:71:
         2f:fb:41:d8:cf:7b:ff:9b:ba:e6:f6:6c:de:db:23:de:f5:ca:
         f6:49:21:39:59:fb:14:45:d7:eb:88:ed:45:5d:86:f2:b6:ea:
         2b:88:17:17:7d:17:b7:49:78:66:01:c7:53:2c:3b:dd:49:eb:
         b7:3b:da:93:c4:80:3f:3c:da:a3:70:ef:fe:89:b9:29:de:5c:
         eb:0a:33:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:34:50 2026 by rpki-client