Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
File:                     0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft (raw, json)
Hash identifier:          METzyeLghvce7TU/sq2CED6Mb1ei6ZOEZkRS5zf4v7Y=
Subject key identifier:   88:61:93:85:1A:BB:75:52:8C:84:13:EF:E9:A1:E9:71:35:F4:3A:0A
Authority key identifier: D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
Certificate issuer:       /CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Certificate serial:       01A13E26574C4B45E5D7B3CE1350A756E511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
Manifest number:          08FB
Signing time:             Thu 15 Oct 2026 06:01:02 +0000
Manifest this update:     Thu 15 Oct 2026 06:01:02 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:02 +0000
Files and hashes:         1: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl (hash: cQ43lEW226bbIAKVLsLfBh2VT0PQAGsYCYKjpFPhl7U=)
                          2: 3csJZekX_cLNjU2Men_fceOPKEA.asa (hash: irrhjgoJp1T9LHez28rBpjrfAsWLiO1IsgQaRVT71is=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:57:4c:4b:45:e5:d7:b3:ce:13:50:a7:56:e5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
        Validity
            Not Before: Oct 15 06:01:02 2026 GMT
            Not After : Oct 16 06:01:02 2026 GMT
        Subject: CN=886193851abb75528c8413efe9a1e97135f43a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:14:7d:be:5d:22:e2:03:e5:18:8b:1a:03:84:
                    1a:5d:5d:f1:9f:97:b2:26:25:7b:4e:a7:f5:aa:73:
                    f4:57:45:9e:3e:70:77:2c:c9:8a:94:ad:48:1a:3a:
                    fd:95:7c:c7:ab:58:38:8b:e6:ea:73:74:e4:ee:f8:
                    38:32:9a:84:6f:fd:36:a0:2f:d9:be:bf:3f:29:cd:
                    36:32:89:de:3a:2a:16:fb:68:b0:4f:ed:65:7c:97:
                    be:e2:7c:88:75:b0:22:19:69:ab:21:ba:8e:7a:c5:
                    fc:a1:7e:54:a2:71:53:de:df:c9:8f:61:37:a9:ba:
                    e2:36:20:64:90:64:09:c8:86:9f:ed:4d:04:d4:56:
                    45:fc:e3:ea:1a:33:80:e6:22:61:ba:c1:fa:fb:6e:
                    71:a3:12:66:0a:ad:67:4a:10:9d:e4:fd:4d:2a:47:
                    f8:c2:5e:ba:5e:fc:d7:ac:58:a9:87:24:2f:e2:04:
                    e0:92:b6:2e:f1:0f:66:f4:00:30:ac:08:57:96:97:
                    7e:90:23:b9:4c:3c:1a:eb:62:dd:84:e0:31:e9:25:
                    ac:6f:5a:38:b8:5c:a5:0a:b6:43:b7:d1:93:46:27:
                    0d:0b:41:3d:07:63:0f:e2:9b:b8:7b:b6:ed:14:27:
                    74:d8:7d:65:9b:12:2c:bc:0e:fe:4d:b8:da:73:f5:
                    55:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:61:93:85:1A:BB:75:52:8C:84:13:EF:E9:A1:E9:71:35:F4:3A:0A
            X509v3 Authority Key Identifier:
                keyid:D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:5f:0c:af:36:83:4f:6c:0b:05:95:d4:e8:72:58:57:b9:4c:
         19:af:88:e1:50:72:e1:13:2c:8b:9b:40:d6:6b:a3:07:f2:cd:
         45:0f:75:57:21:94:80:89:a0:1c:08:03:d3:f8:7b:24:f6:a3:
         2f:7c:fc:db:8f:f9:59:72:28:fa:a4:54:d1:22:4f:36:12:dd:
         77:59:06:a1:ea:8f:cc:d1:00:07:a3:0d:43:1e:23:df:f9:2f:
         49:7b:af:1c:18:d0:bf:e5:57:d6:db:b3:de:67:e9:8d:8c:80:
         25:e8:8f:fa:e9:a4:0a:af:79:c6:a7:5d:06:c0:43:c7:63:91:
         57:b7:00:72:fa:3a:a0:ed:ce:34:e7:a2:bb:94:59:0d:7c:9b:
         c2:8e:ca:58:83:61:7f:9b:ae:88:dd:e3:cb:96:ee:39:31:93:
         72:b9:7f:06:b9:4a:ad:8b:1b:1f:c3:60:0d:14:32:b0:0b:7e:
         90:6a:43:e2:92:32:58:de:e6:79:9e:ae:05:98:4d:23:3e:29:
         71:af:fa:a2:3a:4f:ee:a0:30:09:de:64:f9:1f:c0:fe:26:e7:
         db:3c:6f:55:47:9a:81:84:56:07:19:38:a6:5a:9d:3e:fa:e0:
         d6:6f:49:de:e4:48:89:27:53:88:e7:aa:5a:fa:13:78:1a:d3:
         6f:4a:f4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:22:56 2026 by rpki-client