Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
File:                     0fbkNwERz7-WhASFQie4CShRRQ0.mft (raw, json)
Hash identifier:          8dy2tuRgRuQb/dztwBHGOG1acUOBgs7x4i4w7LcEg6Q=
Subject key identifier:   E8:F0:1F:DA:39:47:59:64:F5:DD:BC:02:4F:E4:D8:B5:38:C8:9B:89
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Certificate issuer:       /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial:       01A13D80F550CE5253AC6D3C433943A96DB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
Manifest number:          1306
Signing time:             Thu 15 Oct 2026 03:00:23 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:23 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:23 +0000
Files and hashes:         1: 0fbkNwERz7-WhASFQie4CShRRQ0.crl (hash: rAjUMzNS9jiWidSagIPaBkaSYw6E3gv6VxnDaN6It44=)
                          2: b6CRhvSRccrFASwHzAqv1fJ2-PM.roa (hash: /4u/ccQkL47poEfRTb46UuOnLyPJ5g8IGlvoOu1fxd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 03:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:80:f5:50:ce:52:53:ac:6d:3c:43:39:43:a9:6d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
        Validity
            Not Before: Oct 15 03:00:23 2026 GMT
            Not After : Oct 16 03:00:23 2026 GMT
        Subject: CN=e8f01fda39475964f5ddbc024fe4d8b538c89b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:67:f1:5f:95:40:be:ef:aa:7a:0b:20:5c:
                    13:2b:47:50:b3:d0:16:10:88:71:43:5d:95:2e:fe:
                    cb:74:18:a2:88:77:8c:16:1b:1f:58:81:2e:ba:83:
                    1a:1b:45:a9:24:a1:4d:d9:48:20:9f:77:80:19:1b:
                    10:4e:76:03:f7:d3:b4:bf:57:78:3d:94:35:c8:03:
                    92:30:12:82:5b:12:20:3e:06:57:22:8b:8d:30:31:
                    f7:7a:a4:d3:09:dc:2a:12:f4:08:1b:d8:4b:ca:71:
                    f1:b1:bb:bc:46:98:22:ab:23:af:f8:e2:ba:bf:f6:
                    db:11:ca:eb:9f:8c:2a:7a:df:8e:24:05:17:45:98:
                    89:6c:29:69:9e:3f:a1:6b:46:93:00:7c:f6:c1:01:
                    36:2a:a4:87:34:4f:6b:80:b0:2a:92:8b:99:ca:03:
                    d1:d8:7c:c7:d2:71:32:f7:2e:b3:4e:8a:fa:8e:c0:
                    ef:90:4c:ee:01:30:2d:8b:4f:b9:d4:85:1a:3b:20:
                    95:b1:45:21:c6:c4:23:c9:44:f2:f6:83:c0:65:86:
                    16:06:f8:00:91:ba:2c:32:c4:13:ab:4f:08:15:ac:
                    e0:b7:9e:af:68:3b:e3:18:6e:ad:d7:e7:38:9e:c8:
                    2e:a3:2d:73:0b:44:2a:db:ac:58:f7:7d:db:34:40:
                    93:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F0:1F:DA:39:47:59:64:F5:DD:BC:02:4F:E4:D8:B5:38:C8:9B:89
            X509v3 Authority Key Identifier:
                keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:4d:e8:90:41:16:fd:12:28:44:fc:59:55:dd:8c:16:d6:89:
         38:fd:5a:e8:5d:79:b8:49:27:8b:40:3b:fc:5f:f0:5f:04:ae:
         19:47:13:d3:57:e3:f5:50:ca:f3:2b:99:f6:85:b6:6c:95:e1:
         41:3e:4f:08:d2:22:44:c2:14:96:cf:89:10:1a:60:8b:fb:c3:
         8c:9d:2e:50:5c:f5:67:7d:c3:6b:27:06:01:83:03:ab:49:7c:
         1c:80:c8:c4:12:f7:01:b7:8b:45:89:c4:dc:25:68:4d:93:e2:
         ce:ba:74:9c:92:40:7b:0b:74:97:6d:9d:1c:ac:3b:46:3b:33:
         c1:c9:6b:d6:60:84:83:82:6a:10:7d:e8:e3:25:2d:db:21:38:
         65:3e:a9:3f:7f:c3:b1:b8:7d:36:43:d9:1c:fa:cb:01:71:67:
         9a:47:a6:40:99:c5:55:e4:bf:a9:67:e3:e4:8c:90:96:15:68:
         e9:bf:02:26:46:33:40:07:5f:70:ea:5d:c5:aa:df:2e:f1:1c:
         f3:d0:0a:61:2a:89:87:da:9b:70:ed:12:f5:95:6b:0e:b4:c7:
         bb:5b:e2:f7:13:5e:b9:d3:8c:a2:6f:99:60:72:03:cf:ed:78:
         a3:88:50:80:4f:00:85:c3:bf:39:a3:2a:6b:5b:d2:bc:c8:fc:
         af:6b:29:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:40 2026 by rpki-client