Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
File:                     0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft (raw, json)
Hash identifier:          iaW4+SoDocqfS9kZRMbae4OeeHJafz+0lHdfDVIOfag=
Subject key identifier:   82:E3:37:1B:02:78:59:C9:5B:72:DD:4D:5D:F4:C1:5C:DC:DC:4A:2C
Authority key identifier: D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
Certificate issuer:       /CN=d05b2623a39d556c50b7046d36447fb621af974a
Certificate serial:       01A13D80FBA459BFA596FBE19B6676B17D24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
Manifest number:          17E1
Signing time:             Thu 15 Oct 2026 03:00:25 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:25 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:25 +0000
Files and hashes:         1: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl (hash: NN/aV4y63wkMMLYn6xH5BUnIr3n4skq/byr6ue1rKSo=)
                          2: pCWS_26lWVBmz3evvhhCPtQ3724.roa (hash: 169W7Abudr//3hW1olxvzVQxe6wwpkcYjx7dbhDz4D4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:80:fb:a4:59:bf:a5:96:fb:e1:9b:66:76:b1:7d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d05b2623a39d556c50b7046d36447fb621af974a
        Validity
            Not Before: Oct 15 03:00:25 2026 GMT
            Not After : Oct 16 03:00:25 2026 GMT
        Subject: CN=82e3371b027859c95b72dd4d5df4c15cdcdc4a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:66:bf:36:9f:3e:ef:14:15:00:b5:b4:d4:49:
                    40:6f:e8:07:32:90:d7:5f:cf:cf:80:83:16:53:ba:
                    8c:7b:fd:b3:52:00:87:52:b9:d2:fc:42:f5:d9:86:
                    ae:b1:25:8b:28:5d:1c:c4:40:51:96:60:9e:a7:bf:
                    1a:79:0e:ad:eb:69:e7:ab:ce:f3:e4:27:be:a1:08:
                    0e:8e:1a:d7:bd:4a:ce:37:4f:57:61:f7:2e:8a:41:
                    d0:7a:bf:d7:26:45:aa:31:f0:78:7a:0f:8b:c8:b1:
                    ff:23:46:10:7c:6c:73:14:ae:6f:c9:1c:46:5c:5a:
                    b4:38:11:b3:c2:fe:c6:ae:bd:c9:3e:de:02:44:d5:
                    ba:69:88:e2:5f:07:64:45:08:b3:c6:07:bf:79:20:
                    4e:f4:43:91:55:54:3c:2e:49:6b:53:1d:ba:06:91:
                    78:45:55:a2:b8:f5:0e:ae:68:53:e6:6d:8a:88:88:
                    50:42:46:5c:01:90:33:9c:1d:c8:e7:74:bd:22:65:
                    2a:4f:17:3c:36:eb:d0:ab:78:d0:b2:d0:9d:96:7a:
                    71:25:a6:d4:ec:56:60:d9:57:7f:28:1c:3f:e6:e2:
                    8b:d5:a6:42:2f:a7:a1:50:38:f2:b1:58:b9:d9:8d:
                    ee:ee:e5:c8:e4:7b:d3:0a:b0:bc:de:45:bf:d4:a5:
                    05:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E3:37:1B:02:78:59:C9:5B:72:DD:4D:5D:F4:C1:5C:DC:DC:4A:2C
            X509v3 Authority Key Identifier:
                keyid:D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:33:8e:1a:84:a1:e6:5f:4b:6d:45:ec:80:6d:a3:87:09:9c:
         e4:25:8d:5c:c4:99:0a:a3:ee:12:7d:5a:23:ab:d2:6e:26:07:
         5b:ba:34:5e:8f:72:80:40:81:d3:e9:09:a0:a4:bd:b6:9a:eb:
         05:1c:3e:53:29:48:d6:10:f2:47:27:65:45:bb:47:68:d9:3a:
         ca:c0:eb:e0:da:10:a7:80:0b:9e:27:62:86:f6:16:d5:a9:d1:
         87:fb:70:1b:8b:57:ed:dc:92:b1:bf:8f:88:23:bf:91:e5:a7:
         f5:b8:29:a2:3e:8a:47:ce:4f:44:93:43:7d:09:6a:7d:a0:d1:
         e5:f1:ed:20:85:4a:f7:ba:82:c7:d6:4f:64:86:d2:23:8d:38:
         b5:d5:51:d9:1d:80:a0:54:f2:c8:7a:0f:f1:de:83:85:f2:d4:
         18:fc:32:e6:b6:c3:2f:56:a6:40:da:6d:3e:32:e9:f3:eb:13:
         2c:32:17:5d:3f:14:84:95:30:6c:59:1f:0e:c2:d6:f7:64:e2:
         62:8a:d5:38:a8:ed:21:e9:4c:23:58:ca:ef:42:91:b0:7d:d0:
         44:31:a2:e3:69:69:53:8e:8f:44:e0:15:2f:d7:ca:a4:70:c6:
         47:69:6d:77:f0:57:a1:8d:ce:d8:a5:b7:08:48:eb:6e:2b:05:
         79:ae:11:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:26:35 2026 by rpki-client