Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
File:                     7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft (raw, json)
Hash identifier:          XW2v529aexLZ3CIGp6JYtRM2/4IlCic3vEUzrsNZX9c=
Subject key identifier:   FD:E9:62:8D:6E:EC:28:43:52:5A:93:4F:29:61:37:89:86:E2:6B:EE
Authority key identifier: EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
Certificate issuer:       /CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Certificate serial:       01A13F02847EC9D9BC74182784EFA91E4671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
Manifest number:          0F09
Signing time:             Thu 15 Oct 2026 10:01:31 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:31 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:31 +0000
Files and hashes:         1: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl (hash: fdn3ni2PEL7l1jRX4ViL/XaBIYrl3GQMPNQfuyDhOl8=)
                          2: HdaygFB4iSszAmMjo8uX2Se1nQA.roa (hash: UArj7jtroG3BsSDh4aM2iaAylpZS3vUew6s3b3GEueo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:84:7e:c9:d9:bc:74:18:27:84:ef:a9:1e:46:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
        Validity
            Not Before: Oct 15 10:01:31 2026 GMT
            Not After : Oct 16 10:01:31 2026 GMT
        Subject: CN=fde9628d6eec2843525a934f2961378986e26bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f1:0f:44:f4:ff:ff:eb:7f:82:2c:cc:bc:68:
                    34:53:d5:71:0f:03:81:e9:83:8d:9c:52:69:ac:83:
                    c8:73:b5:88:00:de:f5:42:53:ca:c2:8c:e5:59:df:
                    56:21:3b:a3:ad:e3:8c:b8:16:ab:18:5a:cc:30:a2:
                    32:2c:8b:19:02:59:fb:b7:f4:f0:e0:c1:f0:97:55:
                    b6:a0:91:91:d3:10:be:c2:b2:a6:2d:13:95:42:6d:
                    08:62:2e:58:25:86:85:5f:29:fb:75:86:b8:e7:ca:
                    19:65:1c:f5:09:0c:b2:1d:45:2f:5e:cd:81:60:ed:
                    e3:0b:ac:5e:a4:3f:2e:bd:ed:83:63:7f:df:3f:e0:
                    67:a1:26:63:ee:ad:7e:0a:09:80:37:10:fa:3d:1f:
                    f7:16:e9:5c:f9:b7:3b:bb:53:6d:2d:97:72:5f:20:
                    27:37:ae:a6:7c:c5:04:c6:9f:2b:97:c9:2f:56:fa:
                    7e:23:46:33:be:5d:4b:7f:e5:31:e8:25:fd:39:fb:
                    97:a9:26:d1:c2:b1:1d:22:cf:a2:69:a8:f6:25:53:
                    e4:e4:a5:85:66:ff:86:d8:f8:0b:5d:39:f8:b0:69:
                    fe:7c:8b:02:01:e9:5c:cf:7a:56:26:71:85:f7:d9:
                    11:be:ee:3d:37:73:63:bc:a8:e2:25:39:c9:63:9b:
                    71:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E9:62:8D:6E:EC:28:43:52:5A:93:4F:29:61:37:89:86:E2:6B:EE
            X509v3 Authority Key Identifier:
                keyid:EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:83:17:67:35:8e:78:fc:f6:8f:2e:37:66:a9:9c:6b:08:d0:
         2a:ce:e8:ec:da:77:96:0b:d6:44:b0:14:4d:24:a4:b0:58:e0:
         0a:64:22:b6:02:2f:01:dd:78:e4:78:ef:26:b1:23:19:9f:15:
         ea:ec:fc:1b:c2:32:fa:e8:da:e9:fc:e5:57:78:ae:3b:10:c3:
         e6:2a:05:14:eb:d2:af:4c:d1:4f:db:97:96:af:c3:80:b4:95:
         40:6e:57:04:b0:12:87:82:b4:a9:82:3d:4c:74:b4:4c:a2:28:
         b4:38:88:f7:8c:39:3f:fb:91:e1:f9:f9:a6:50:08:40:81:bc:
         a8:b5:7c:a6:f2:fc:52:14:bf:53:90:ea:f6:4b:02:c5:47:ad:
         06:84:cc:33:04:e4:08:1e:a3:29:cd:0a:f4:b8:ad:52:c9:b2:
         1b:f9:f7:e0:8c:d6:bf:6a:90:ae:b1:6c:bf:e3:3d:e4:6a:d4:
         75:1e:71:76:f9:c6:d6:4a:f7:c9:f2:5c:61:44:f2:93:23:79:
         5c:82:dc:3e:2c:ae:9e:e2:f2:31:c1:86:8a:5e:c1:b4:87:a9:
         57:37:27:03:df:85:6d:e1:18:33:56:8c:87:59:54:f2:5e:38:
         83:bb:59:e2:f6:cd:4d:80:a3:28:60:8b:9f:0a:d1:ba:d2:fc:
         37:70:af:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:22:27 2026 by rpki-client