Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
File:                     3F0s-9udWNV0D_N1oxWzglRKlK4.mft (raw, json)
Hash identifier:          eqr47esYERw4vtY67vgsnUFve45jk8hk0/w+wUB14Tg=
Subject key identifier:   B9:0C:42:44:41:2F:70:33:BC:99:72:26:EE:13:AF:39:BA:F7:68:58
Authority key identifier: DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
Certificate issuer:       /CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Certificate serial:       01A11DBED2DB84E2209EAF55680C1CF55C26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
Manifest number:          0F14
Signing time:             Thu 08 Oct 2026 23:00:07 +0000
Manifest this update:     Thu 08 Oct 2026 23:00:07 +0000
Manifest next update:     Fri 09 Oct 2026 23:00:07 +0000
Files and hashes:         1: 3F0s-9udWNV0D_N1oxWzglRKlK4.crl (hash: x2FdSl/KuASqS78KuRq+td+Ev9Rv+rWu0kYrf0dgthM=)
                          2: 7gKbnCeEeFU9kgMWCw85IQnBGJs.roa (hash: BEos/oIubVJfuhxS0jxVgCoi+2xWKG0c7X3weGq3uEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 23:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1d:be:d2:db:84:e2:20:9e:af:55:68:0c:1c:f5:5c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
        Validity
            Not Before: Oct  8 23:00:07 2026 GMT
            Not After : Oct  9 23:00:07 2026 GMT
        Subject: CN=b90c4244412f7033bc997226ee13af39baf76858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b8:1f:2a:98:54:27:83:d6:4c:a0:ce:5a:bd:
                    87:14:a0:d3:64:c2:39:9d:f4:43:48:be:77:73:14:
                    d4:f7:96:28:64:06:ce:c1:09:ae:99:89:99:cf:ea:
                    ff:2b:28:17:ac:43:1a:69:e5:76:f2:9a:14:a6:73:
                    a1:6d:ae:60:93:5e:89:0a:f3:38:af:c0:05:96:25:
                    9b:22:09:1a:ca:81:ad:40:c9:b2:f4:8d:d1:1f:21:
                    b9:ed:84:5e:31:d3:da:91:11:b9:36:8c:7d:6f:a6:
                    38:56:f8:e4:22:81:9e:53:0d:e2:27:15:22:32:fa:
                    10:b6:01:95:82:33:98:cb:3b:6c:fe:59:90:ed:3b:
                    da:e3:44:7d:bd:81:89:cb:07:31:4d:d6:4c:1e:83:
                    98:ce:ac:76:e6:b8:ec:6e:25:c6:55:5e:12:f3:53:
                    42:a0:e8:2c:82:03:e2:60:b5:69:b2:0b:66:88:c3:
                    a8:48:42:3a:c0:85:75:1b:90:78:01:26:5b:67:99:
                    c8:f1:69:c2:d9:52:6e:a1:62:9e:45:44:59:ee:5b:
                    ed:f7:7d:2f:ec:2a:dd:05:11:0b:5a:b2:48:66:59:
                    88:e6:82:88:1a:c5:31:fd:a2:f6:02:7f:99:4a:bf:
                    64:67:ab:70:75:95:c5:f9:70:4c:2b:ef:67:1a:f5:
                    77:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0C:42:44:41:2F:70:33:BC:99:72:26:EE:13:AF:39:BA:F7:68:58
            X509v3 Authority Key Identifier:
                keyid:DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:44:75:56:ba:8f:10:ec:da:8a:93:e3:03:14:d5:fb:77:ce:
         7b:53:e6:19:26:7d:1d:19:b3:42:0d:2e:9a:ed:f9:fd:aa:da:
         a4:9a:26:ea:c0:fd:83:e8:7e:4a:71:d2:a3:1c:9f:dc:3b:d4:
         d8:b9:15:27:3e:53:53:d6:50:cf:43:e5:40:3d:82:52:e5:73:
         6c:da:25:05:43:16:01:8c:26:d9:d9:67:39:41:21:1d:78:38:
         a4:78:8f:18:44:ce:dd:b8:52:ec:25:79:46:55:b6:08:c5:68:
         fe:ba:68:51:0b:64:50:7e:db:5b:2c:3e:06:86:73:65:73:fb:
         e8:b9:c2:c2:a1:82:3e:76:4a:8d:e6:60:f1:a5:00:1e:d4:4d:
         c1:4c:71:53:ae:a2:ee:8d:2e:ab:82:b2:5c:5b:55:e7:ad:ff:
         48:94:14:96:9e:32:c8:93:b0:71:74:8f:99:d4:8d:ac:ac:01:
         8c:e6:d0:b7:cb:8d:07:55:59:46:9c:0c:10:b2:23:e4:e9:a4:
         1a:6f:1b:e7:a6:e6:1a:60:ac:90:bb:ea:ea:8a:14:c6:06:65:
         3b:91:77:6c:a5:f3:d9:11:a5:90:f0:d0:77:b8:8c:7c:45:95:
         6b:2e:68:4a:fc:33:67:74:f2:7a:c8:9f:c5:0f:d7:38:47:58:
         3c:fd:1e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 09:54:39 2026 by rpki-client