Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File:                     08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier:          3BjWm3pdP34wglX6ISiE6Ffv4q/kCF9p4oXhRIBQy8E=
Subject key identifier:   0A:6D:F8:0F:2B:BD:74:97:25:51:DF:83:C3:2F:67:36:FB:CB:69:23
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer:       /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial:       01A13F39813F18B987A13056BCCFA4549727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number:          1AA5
Signing time:             Thu 15 Oct 2026 11:01:35 +0000
Manifest this update:     Thu 15 Oct 2026 11:01:35 +0000
Manifest next update:     Fri 16 Oct 2026 11:01:35 +0000
Files and hashes:         1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: IFlCRa8LYte3PqRHAiqwIg0iDQWEKNFG8QH/2kr2YYo=)
                          2: kDYFCwOTqCtWju9awtc-WWDQSp4.roa (hash: niu24Rn9CdcANUXflUaTh1yPPLtTi4dexe3GG8dp0NU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:39:81:3f:18:b9:87:a1:30:56:bc:cf:a4:54:97:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
        Validity
            Not Before: Oct 15 11:01:35 2026 GMT
            Not After : Oct 16 11:01:35 2026 GMT
        Subject: CN=0a6df80f2bbd74972551df83c32f6736fbcb6923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:c4:c8:a4:99:e3:38:5e:b6:8a:07:a0:93:
                    8d:47:08:9b:fa:44:e1:fc:88:85:0f:80:70:c6:62:
                    f6:6c:f3:16:98:a0:9d:3b:da:ee:94:e8:22:6e:2e:
                    43:3a:66:e2:d6:02:22:79:c8:35:e0:52:6d:df:9d:
                    38:d8:2a:ed:0c:09:3d:62:58:4f:b3:08:59:6e:87:
                    47:5e:63:4f:b1:f5:b4:b7:a0:cc:c8:97:9a:ef:2b:
                    3a:59:51:a1:d3:5e:e4:4b:82:68:8c:d2:a1:05:12:
                    fd:1f:6e:c2:93:d6:3a:d0:f1:49:7a:b2:aa:e1:7b:
                    a2:43:62:4f:4b:a6:9e:15:b5:7b:ed:09:ad:aa:5c:
                    a4:41:a9:57:23:09:42:a7:a9:39:20:11:21:8b:c0:
                    39:18:13:a7:39:b6:14:c5:e4:b7:02:4e:89:23:00:
                    1a:98:8a:11:d0:d2:c6:76:1e:25:98:06:dd:97:49:
                    ea:df:63:f5:0b:c7:2d:44:ad:9b:5e:21:65:7e:72:
                    39:1e:e6:f5:73:91:65:b5:5b:28:82:59:72:f2:9d:
                    87:fd:0c:b7:70:53:21:3d:dd:fb:54:f0:1e:d6:b4:
                    64:80:94:8c:f0:a1:3e:ae:0b:53:39:fa:52:28:f1:
                    fe:26:50:4a:e6:20:65:ca:eb:4b:6f:64:ab:20:37:
                    39:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6D:F8:0F:2B:BD:74:97:25:51:DF:83:C3:2F:67:36:FB:CB:69:23
            X509v3 Authority Key Identifier:
                keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:8c:57:a9:4d:bd:ae:98:55:55:78:82:19:d1:18:7e:bc:7b:
         da:f4:36:38:70:94:a5:df:89:67:0d:38:0a:c4:07:2d:8a:3f:
         15:1f:52:76:90:15:0a:6d:78:34:38:25:e3:4a:7f:46:4d:a2:
         64:4c:2a:f3:e8:a2:c0:0f:19:f2:e0:3b:30:1c:af:af:be:c2:
         a1:55:d2:80:28:76:2a:ea:80:77:8f:9e:49:17:b3:54:e6:ad:
         74:35:ac:91:40:13:87:a3:18:49:b0:39:b9:8e:31:cf:c4:e3:
         0b:b3:31:2c:a5:ec:73:10:1d:67:27:47:59:07:48:b7:3d:38:
         4d:a1:c9:18:4a:ae:c1:8a:74:3a:eb:d5:94:8d:ad:96:91:4f:
         ae:fa:74:ca:34:7c:5d:8f:e9:09:23:73:bc:8c:92:8f:3e:d9:
         4f:c6:e5:35:8c:4d:28:f8:85:a5:d4:8f:be:8e:21:6c:9c:6a:
         a1:e4:44:71:6a:91:0f:5d:60:6f:4a:cd:ef:29:b7:37:30:e4:
         45:a4:7f:86:f6:b8:e1:1e:0a:ed:ee:11:d9:58:20:d8:0c:d3:
         c2:cd:b9:8e:dd:33:fc:42:ee:f0:bf:15:ea:de:ca:51:cd:5d:
         9d:44:24:8a:43:42:2f:18:96:b6:02:94:fe:ef:ac:e9:6c:42:
         3e:60:37:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:21 2026 by rpki-client