Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
File:                     oODFkETIfj4t-hPL-ZAjruAS76A.mft (raw, json)
Hash identifier:          REVx8hRFBY6QRiye/ey59M3mUzINqwdJ1yDNkJ4vsaM=
Subject key identifier:   46:79:82:81:9B:C5:1F:F4:AC:9D:70:6D:68:78:64:54:B2:D0:6E:3C
Authority key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
Certificate issuer:       /CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Certificate serial:       01A176273EE919BE3CB3AC923F1AA693AA9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
Manifest number:          1AC2
Signing time:             Mon 26 Oct 2026 03:00:45 +0000
Manifest this update:     Mon 26 Oct 2026 03:00:45 +0000
Manifest next update:     Tue 27 Oct 2026 03:00:45 +0000
Files and hashes:         1: dz15OcBGpk_cfrn8xhk6BurTsy8.roa (hash: xEr9Xe5b8oihGpA9oK+zCpOpKPeDuBptibdAWRYh0iU=)
                          2: oODFkETIfj4t-hPL-ZAjruAS76A.crl (hash: 0GcsGUWstTcaiT94Np9FoNp01FG3dPGmbHyMRqaIFuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 03:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:76:27:3e:e9:19:be:3c:b3:ac:92:3f:1a:a6:93:aa:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
        Validity
            Not Before: Oct 26 03:00:45 2026 GMT
            Not After : Oct 27 03:00:45 2026 GMT
        Subject: CN=467982819bc51ff4ac9d706d68786454b2d06e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f9:37:e1:96:2d:85:f5:f7:18:f1:7b:70:cd:
                    67:0e:56:ea:8b:e2:b7:59:5f:5d:df:a4:4b:55:19:
                    d2:d6:09:99:39:32:c9:f4:b6:8d:bc:e4:4a:4d:4d:
                    13:ca:a4:67:70:3d:b5:06:b9:4a:61:94:09:2c:24:
                    10:d7:bc:dc:a2:40:40:80:4d:61:4c:9d:ce:b5:e4:
                    5e:24:1e:9a:50:bb:57:7b:f5:27:c9:8e:c2:31:43:
                    b5:04:7a:d6:3f:0a:49:97:e1:5a:97:ad:21:79:cc:
                    64:b5:53:e4:19:a0:51:c0:aa:9f:79:ab:90:4e:d2:
                    d9:ec:15:54:18:7f:b5:eb:7c:a3:53:03:1c:2e:9b:
                    ba:9a:e0:fe:a6:01:28:10:00:04:f6:93:96:a7:43:
                    8b:8a:66:12:eb:19:ee:d1:86:9e:eb:5a:28:ee:68:
                    15:73:dc:31:8d:5c:bc:6d:a6:19:98:3d:78:c3:4f:
                    60:61:59:ea:7e:d8:b8:c7:3b:84:97:aa:85:b3:3f:
                    d2:4a:18:0c:64:f1:00:c9:6e:89:c5:a4:62:d2:0c:
                    f6:58:30:5b:61:5f:0f:cb:7f:5f:92:3f:6a:c9:c1:
                    a9:d5:c9:ad:48:77:db:7a:4a:1d:d8:cd:44:ff:d0:
                    a7:c8:5f:0f:48:51:aa:9b:1f:57:7e:10:2e:eb:72:
                    38:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:79:82:81:9B:C5:1F:F4:AC:9D:70:6D:68:78:64:54:B2:D0:6E:3C
            X509v3 Authority Key Identifier:
                keyid:A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d3:f2:84:51:76:b7:f5:92:aa:7f:81:48:03:2c:2c:26:03:
         10:d1:87:31:7c:c9:66:1a:d5:3a:63:45:1e:2b:5b:66:84:43:
         76:12:1a:83:a5:a3:0b:00:c4:7d:5c:5b:38:e3:cd:05:4f:e1:
         d4:65:ee:b1:27:74:cb:1e:31:b9:d0:ff:a3:e7:bb:3c:46:f2:
         13:09:ee:1b:46:39:5b:42:3e:b6:23:0e:43:44:69:54:e6:31:
         73:c8:f6:43:a7:23:5c:ef:6a:e8:97:12:7f:05:07:b3:92:70:
         6a:59:42:95:49:25:ca:cf:b8:69:a2:30:ec:83:c3:b3:71:ba:
         a9:0c:c9:f8:b5:be:6b:74:ac:dc:13:3b:a5:63:c9:e5:20:b8:
         08:3b:39:56:af:3a:1d:22:83:4c:61:87:e3:f6:3b:c1:ac:05:
         71:81:45:d1:10:86:7c:6f:aa:8f:67:d3:dc:5a:70:da:ac:64:
         d3:a4:80:ce:07:f9:13:d3:10:02:28:ac:c0:d8:dc:49:78:f5:
         8c:ea:21:6b:c4:28:df:c8:11:da:d8:a2:91:3f:8d:e4:6b:f1:
         13:b0:f6:00:3a:db:86:e2:05:e5:f7:a0:04:80:aa:4a:6b:7f:
         73:cc:07:85:4f:0d:b3:0c:90:74:d7:69:1c:93:cc:52:19:62:
         0f:51:9a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:20:30 2026 by rpki-client