Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
File:                     1-msoRBterQGEZTXq8gv9B1LgdkU.mft (raw, json)
Hash identifier:          0IM51cJqzKO84JJoEC+xB9eW0pKEMc5wJSX6ELXZO6s=
Subject key identifier:   0F:F0:97:F9:C2:C6:64:07:1D:16:2B:84:50:45:52:1F:C8:61:4F:75
Authority key identifier: FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45
Certificate issuer:       /CN=fa6b28441b5ead01846535eaf20bfd0752e07645
Certificate serial:       01A006276228F0C99225CE83A29C03F41532
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
Manifest number:          0349
Signing time:             Sat 15 Aug 2026 16:00:39 +0000
Manifest this update:     Sat 15 Aug 2026 16:00:39 +0000
Manifest next update:     Sun 16 Aug 2026 16:00:39 +0000
Files and hashes:         1: 1-msoRBterQGEZTXq8gv9B1LgdkU.crl (hash: WOL3U+km6UiO28ExcfOapAivH/9aGQN719r96pKvPME=)
                          2: 2798bsS-ftRBFC8OmYwDYZazwYQ.roa (hash: YEsqHt1g8/MDYthWrn0j31l+d4G+HJ7yjiXjTwZ5WJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 12:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:06:27:62:28:f0:c9:92:25:ce:83:a2:9c:03:f4:15:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa6b28441b5ead01846535eaf20bfd0752e07645
        Validity
            Not Before: Aug 15 16:00:39 2026 GMT
            Not After : Aug 16 16:00:39 2026 GMT
        Subject: CN=0ff097f9c2c664071d162b845045521fc8614f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:98:a8:02:06:ef:63:03:ed:39:88:ed:6a:b5:
                    c0:64:c9:d7:5a:24:c7:50:c3:75:aa:2b:cc:90:b8:
                    ed:ef:ca:81:c7:a7:07:d1:5d:0c:38:fc:43:8c:a5:
                    d1:de:42:fd:43:dd:c3:0a:a8:72:e5:9d:e9:bd:07:
                    94:bd:4a:51:17:da:88:ab:42:65:54:60:2e:1c:89:
                    34:72:17:63:6e:dd:ae:6d:72:a5:82:23:3b:c4:bb:
                    be:91:ce:37:d1:72:81:de:ac:f5:3c:da:57:ea:b2:
                    67:a5:07:cc:49:71:9d:46:b6:69:8f:5d:64:cf:ad:
                    f9:b5:30:8a:d3:55:21:ef:95:26:90:be:ae:dc:83:
                    62:51:c6:e6:9b:a2:87:49:65:56:60:37:35:93:00:
                    7f:eb:d1:c8:63:71:eb:80:bc:b0:51:f7:f1:50:01:
                    02:cc:34:de:6d:91:d0:59:17:8e:cc:bb:64:49:96:
                    02:54:a8:aa:ef:7b:dc:93:b4:60:d9:75:b9:ab:d7:
                    5e:b6:e8:a4:3d:42:31:62:ec:c9:8d:00:c8:43:45:
                    ab:a6:53:13:23:e3:70:64:46:94:3f:b9:bc:db:59:
                    ac:f2:56:4a:be:0f:cb:28:d4:8a:11:c6:ab:b2:52:
                    3b:6d:8b:d2:7c:46:83:e7:77:55:d4:68:e7:d2:66:
                    b3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F0:97:F9:C2:C6:64:07:1D:16:2B:84:50:45:52:1F:C8:61:4F:75
            X509v3 Authority Key Identifier:
                keyid:FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c5:5c:61:1c:3f:ea:65:48:ab:bd:35:5e:f6:12:9b:0d:47:
         e8:0f:a7:a4:25:67:14:68:60:6b:de:d4:82:20:f5:b4:a1:1b:
         c0:b4:e1:40:5c:39:a2:d2:4c:95:83:c3:8f:a1:7a:ed:2b:3c:
         d4:d4:8a:8c:a8:7f:c5:e4:eb:18:91:96:72:75:d5:c3:ec:3f:
         a7:b3:ff:1d:7e:6b:59:60:e2:ab:58:62:cf:fb:65:0d:77:c4:
         2f:99:5a:85:5c:8e:aa:f3:90:88:95:e0:89:b4:b5:a0:30:d5:
         03:ba:f8:0e:5e:f2:48:80:cd:66:08:39:63:ed:28:45:b8:8f:
         6f:2d:d2:64:c5:03:57:4d:e9:75:4e:ac:13:72:14:c8:b6:61:
         19:22:d0:7a:38:6b:64:d9:59:b0:11:b4:be:28:0c:7f:68:fc:
         2c:fb:79:7e:ac:9d:ea:a8:07:91:4a:ea:54:16:6d:1a:1c:ce:
         7f:63:77:ac:e0:14:11:4d:c1:d6:d1:83:37:29:20:a1:01:05:
         76:ef:c9:a2:45:d8:31:eb:73:1e:10:51:8c:81:fd:27:11:ee:
         1b:eb:07:4e:e2:2b:2e:cf:cf:28:8f:fc:68:b2:0b:d0:cc:32:
         7c:bb:87:cf:8d:94:60:5f:64:72:0d:dd:64:70:03:db:7f:6d:
         46:49:1d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 22:06:14 2026 by rpki-client