Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
File:                     0YwgMKWXHEpUCWqO27ISEeVCFqc.mft (raw, json)
Hash identifier:          99m62LefQ/BQJCu735fhyKxi0fuvoZGLscZMKzmNUqo=
Subject key identifier:   0E:DA:27:98:4F:C3:E4:94:68:0A:45:9F:A2:B6:91:DC:54:DE:7F:05
Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
Certificate issuer:       /CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Certificate serial:       01A13F028C01C74BA527C855123119EF5B5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
Manifest number:          158F
Signing time:             Thu 15 Oct 2026 10:01:33 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:33 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:33 +0000
Files and hashes:         1: 0YwgMKWXHEpUCWqO27ISEeVCFqc.crl (hash: p+6lKeBS0xRFhBjZId4Y9E2NpOAlVCiBgudOcQSKnDI=)
                          2: lf7LSKbMZbGm86tBlbPIL648oFo.roa (hash: /K9bAYZ5YiuaJN+PfS4nniv3V/XkGZzBzxnTsucRsCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:8c:01:c7:4b:a5:27:c8:55:12:31:19:ef:5b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7
        Validity
            Not Before: Oct 15 10:01:33 2026 GMT
            Not After : Oct 16 10:01:33 2026 GMT
        Subject: CN=0eda27984fc3e494680a459fa2b691dc54de7f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4b:29:02:e4:a7:70:c8:65:e8:f5:f6:e0:cc:
                    4f:e3:62:de:f2:e3:31:c1:c7:78:43:9c:93:ea:f2:
                    0f:ac:e3:ff:3c:75:6c:e6:79:7f:7b:cb:76:1e:dc:
                    37:92:8f:ae:ba:22:2b:88:62:ab:23:6f:7c:b0:ca:
                    74:67:46:63:1b:da:10:f5:f8:45:af:9c:77:f4:2e:
                    fa:ce:1c:72:ed:b7:c6:ca:35:a9:95:08:15:d6:40:
                    f8:df:64:ac:cd:2e:bc:4f:6d:05:2f:85:05:b1:8b:
                    ee:d2:15:56:54:d0:b6:59:1b:3b:86:8d:62:3c:b2:
                    61:25:27:da:7b:64:8b:7d:df:ed:b4:0d:3e:94:71:
                    bf:ff:03:08:2f:15:e7:60:3a:1b:65:d9:24:e6:16:
                    95:3e:d7:fd:c8:e2:77:e7:b5:52:e2:45:ad:d1:48:
                    ee:cf:71:3f:a5:ee:41:9f:90:66:cc:f8:4d:d9:1f:
                    f4:f8:e5:1a:32:f0:57:ad:50:52:28:aa:f3:64:a3:
                    74:e4:e6:dd:bc:45:34:ce:2e:e8:9b:ad:07:be:15:
                    96:63:4a:19:9d:55:f4:fa:87:62:3e:26:9e:a5:be:
                    38:6b:cc:a1:5e:e2:6a:db:f9:db:0d:d1:e0:3c:2a:
                    a6:9a:b0:7b:5f:2a:cc:ac:b2:cf:b1:a3:60:71:67:
                    e2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DA:27:98:4F:C3:E4:94:68:0A:45:9F:A2:B6:91:DC:54:DE:7F:05
            X509v3 Authority Key Identifier:
                keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:cf:5e:a1:2c:8b:fd:6c:f0:1f:b6:a2:bc:48:1b:51:00:7b:
         60:df:58:95:dd:b9:0b:d6:98:63:37:2f:8d:d4:54:81:51:d9:
         2a:f7:f3:09:8e:f2:55:ab:93:2d:ff:53:ff:b3:03:2b:26:b9:
         9a:2b:89:c7:c8:ac:33:9c:3e:8c:90:f0:5e:15:f1:7a:32:0e:
         b2:4a:1f:52:4a:03:ad:c0:8f:71:a7:6e:d2:01:1c:31:a6:e9:
         30:49:21:fa:7a:ed:c7:26:b2:07:75:7f:5d:38:39:42:d1:66:
         a8:a6:7d:b0:57:2d:60:cd:e7:a4:96:93:af:4a:fd:c1:60:56:
         6d:e7:89:96:73:34:d6:c8:0b:83:cf:d0:18:7b:f9:05:0f:81:
         5e:d2:73:c8:20:5a:13:3e:6b:d4:a4:15:28:83:0b:47:57:79:
         87:22:13:db:53:32:f7:ee:e8:33:56:e6:e3:03:4e:9e:24:11:
         81:ac:d9:76:7d:6a:14:e2:ae:b9:a1:26:61:d7:6f:c2:65:1c:
         35:b5:6d:15:c3:58:a9:fe:40:9d:8d:46:a5:63:fe:08:82:4a:
         55:e4:5b:e0:6a:e6:e2:8c:6c:f0:1b:ae:f0:1f:e4:79:3e:0e:
         8c:e7:4e:28:08:75:15:c4:e7:3c:a2:61:bf:a6:d6:54:04:44:
         9f:f8:92:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:25:04 2026 by rpki-client