Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File:                     0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier:          M5dFMCALzw3kyviwvCOsf2wv4R9VzhJRj17yNeLNvsc=
Subject key identifier:   95:8F:F2:BE:2A:4D:AD:DD:FE:6C:7C:0D:D1:F0:B9:B1:AF:AE:EA:FC
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer:       /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial:       01A14015EA292A01C45193798F5B2A92E1D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number:          175C
Signing time:             Thu 15 Oct 2026 15:02:20 +0000
Manifest this update:     Thu 15 Oct 2026 15:02:20 +0000
Manifest next update:     Fri 16 Oct 2026 15:02:20 +0000
Files and hashes:         1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: Sy3WH/RXVzz9jjTNrJuozJT6J/xvUoJFZOPmCYJUY0w=)
                          2: 3AB4ABWLvkMBLhXbVPQ47Et_IPE.roa (hash: 7TTeY9RzcNuOB9ePCi+NTRAM5DwBMiMi62WzvEoHHl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 15:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:15:ea:29:2a:01:c4:51:93:79:8f:5b:2a:92:e1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
        Validity
            Not Before: Oct 15 15:02:20 2026 GMT
            Not After : Oct 16 15:02:20 2026 GMT
        Subject: CN=958ff2be2a4dadddfe6c7c0dd1f0b9b1afaeeafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:37:43:d3:77:55:77:b9:a5:b6:76:83:c8:1f:
                    86:35:94:ca:cf:30:64:ad:9c:96:3d:a6:a2:cd:b2:
                    a1:7d:3b:46:6a:75:81:f3:0b:fe:e3:de:84:7f:44:
                    b1:ae:ee:89:b3:40:ff:05:1a:f1:24:09:cc:84:12:
                    e7:68:af:67:e6:bb:47:c1:74:47:e7:7e:eb:f8:b0:
                    af:3a:35:36:5f:e2:fc:d1:27:da:d2:27:ac:48:69:
                    bb:ba:75:01:17:1f:c4:93:b2:fc:eb:98:02:1f:44:
                    e4:d6:b5:41:9b:48:d4:4c:18:81:1e:26:2a:f4:f9:
                    24:60:94:36:ef:20:bd:c9:3e:10:bd:5c:c3:a6:91:
                    ab:74:fa:d6:7e:5c:2d:c6:f6:55:cc:cc:8c:c4:71:
                    41:34:f2:10:36:47:4e:7b:81:6c:ba:3c:44:e4:ca:
                    00:bb:21:c8:b2:eb:44:0d:6e:96:46:4f:f8:f5:41:
                    61:87:a3:13:89:20:0b:ea:2a:9e:7f:8e:72:27:99:
                    c5:11:9e:26:ad:b2:68:62:ff:4b:55:a7:54:a0:6c:
                    ba:ff:23:56:eb:b6:03:a6:87:b2:50:9d:38:b9:45:
                    38:aa:20:8d:5f:ed:2a:24:6e:f2:5e:d4:94:c4:5d:
                    ec:73:90:fa:d8:a5:a1:38:bc:ff:35:6d:25:be:36:
                    ec:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8F:F2:BE:2A:4D:AD:DD:FE:6C:7C:0D:D1:F0:B9:B1:AF:AE:EA:FC
            X509v3 Authority Key Identifier:
                keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0f:dc:ef:99:25:87:50:51:ca:ac:7c:b3:98:09:76:c1:b4:
         87:42:0f:3a:39:84:5b:0b:e0:78:fe:17:d8:56:dc:6d:fb:9a:
         87:b7:bd:4b:64:d8:d1:18:d3:59:07:1d:d5:b8:a9:ad:29:21:
         34:66:55:cb:37:17:79:8f:d7:f1:37:7f:06:3d:18:41:d6:0a:
         5e:3f:0a:15:cb:4b:64:4e:59:84:f0:b9:d2:b4:d2:20:a4:3a:
         b9:b1:9d:37:3d:af:92:9b:07:77:b2:b3:46:e7:c4:99:ce:4f:
         94:63:ef:0f:17:e3:c2:0e:f7:4d:31:93:8e:1f:9e:e5:e8:b7:
         55:cd:2c:04:70:98:b8:8a:0b:7f:0d:ed:80:13:21:f5:ec:b4:
         2d:b9:81:34:ad:f0:b2:2d:4c:3a:17:b7:f4:70:bc:5a:29:30:
         42:02:95:4e:ef:f5:74:b1:5e:d9:90:50:c6:c2:9a:f4:63:22:
         1d:30:1b:0a:a7:42:e7:65:5a:1d:36:42:5e:70:db:91:48:0d:
         3e:82:93:52:ce:29:cf:a9:dd:86:14:c6:3c:97:f6:40:86:4f:
         e0:96:f3:b8:7b:23:0a:f1:1c:ae:07:e4:ea:ea:ab:e7:1e:3c:
         b0:44:98:21:2a:8f:69:0c:62:d2:a2:c1:12:50:ed:9d:d8:7d:
         7f:da:60:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:51:11 2026 by rpki-client