Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
File:                     0ow4hsbvUifCRiJMyJSoSlO89Ro.mft (raw, json)
Hash identifier:          ZCkv6aDgvGmVButz/yDBKHKQQCi8a4cj7rG+iqefUeU=
Subject key identifier:   BD:A5:9D:2C:A9:01:44:61:E5:ED:A4:95:D4:00:55:38:13:5C:27:9D
Authority key identifier: D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A
Certificate issuer:       /CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
Certificate serial:       01A14CF4AC13B04A5A5757757D5F904F7FCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
Manifest number:          09E2
Signing time:             Sun 18 Oct 2026 03:01:05 +0000
Manifest this update:     Sun 18 Oct 2026 03:01:05 +0000
Manifest next update:     Mon 19 Oct 2026 03:01:05 +0000
Files and hashes:         1: 0ow4hsbvUifCRiJMyJSoSlO89Ro.crl (hash: ijOSswP6FG6nz7m5UZqgKPWnQtPYl8sSoXWMLau2CZU=)
                          2: BYWS08eTtraOfHT_fVMPk7guHlM.roa (hash: 6Kz4FXMCjQe6WKeTUwsv4um5M7VGGcIVhgjpiTRZk6E=)
                          3: PiwQrJXVrX4qSCMDoPit1fwGxYw.roa (hash: maZooA2YaSXCCk76FIXDQQ5gHOUIoguMUZYt68Zbq38=)
                          4: XlbisSjtE0VEsvYZfBE1a7SwnPo.roa (hash: ywquchTaiRzJ9EyzBmBuS7GF3u7LPVkY7qatrsHV8Nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 03:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4c:f4:ac:13:b0:4a:5a:57:57:75:7d:5f:90:4f:7f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
        Validity
            Not Before: Oct 18 03:01:05 2026 GMT
            Not After : Oct 19 03:01:05 2026 GMT
        Subject: CN=bda59d2ca9014461e5eda495d4005538135c279d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8d:ef:ab:50:36:72:d2:70:b0:74:30:f0:59:
                    87:33:44:b6:74:db:69:49:c8:b4:ef:1d:f8:aa:e2:
                    37:bf:81:24:60:65:5b:94:c8:98:7e:30:64:69:77:
                    4b:8a:e1:c5:1a:94:1b:f2:da:1b:07:ac:b5:87:4c:
                    92:ba:7f:1e:28:1e:93:ff:63:6c:67:e4:cf:56:9a:
                    f5:16:fa:c6:3c:5e:20:4f:60:ae:51:bd:a3:a8:2d:
                    dc:a3:d2:a4:ef:e6:45:af:65:34:b2:1b:3a:73:76:
                    7e:d3:8a:d6:77:c5:32:30:01:f7:bd:c8:02:f7:ae:
                    28:cc:89:dd:2e:7f:cb:e9:bc:c0:1a:78:b0:d3:81:
                    24:f8:d2:05:84:d7:39:a2:b3:ab:ef:f5:ef:2f:5b:
                    b7:0e:b3:fc:27:2d:b3:a2:c9:0d:c2:b7:5c:a9:93:
                    dd:0a:2b:e0:9d:7c:f4:13:c5:11:4c:cc:ac:78:a9:
                    f3:8d:48:a1:12:6f:23:9c:5e:f2:81:e9:4e:7e:a1:
                    03:6f:4a:0d:89:ec:7b:5b:e1:7d:18:65:eb:8c:be:
                    a6:8a:a0:0b:00:25:a8:94:5f:c6:0f:37:28:8f:3f:
                    aa:18:75:fa:45:59:29:ef:a5:ca:27:26:84:17:68:
                    7f:9d:c9:39:27:80:cb:f3:94:29:b8:ff:19:5a:de:
                    d0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A5:9D:2C:A9:01:44:61:E5:ED:A4:95:D4:00:55:38:13:5C:27:9D
            X509v3 Authority Key Identifier:
                keyid:D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c0:b2:ac:b4:fe:42:81:66:46:36:0f:0a:5f:b4:10:f0:55:
         ab:91:2f:56:fa:51:8d:29:a3:81:a3:d0:f6:7c:c3:c3:2b:46:
         11:cf:f4:6e:78:67:f2:83:67:c1:bc:c8:23:22:55:a1:76:d2:
         75:48:4c:40:58:8c:86:87:57:3f:e1:42:a4:29:c4:d7:5a:47:
         ff:33:6d:d2:62:14:b7:dd:56:78:d0:4c:f3:d7:c7:f7:54:c1:
         96:b1:0f:30:fa:70:7a:a0:2b:39:ba:f5:4b:b9:a7:6c:24:38:
         15:ce:99:27:70:9b:0e:e0:3c:96:f6:81:14:0a:94:0b:33:28:
         a3:e7:e8:9e:69:8d:8a:e0:d2:a5:40:65:e7:7e:e3:07:07:77:
         73:6d:d4:99:bf:d2:a0:ed:ff:be:90:96:c0:c4:82:c3:90:cb:
         71:87:6d:9e:5f:f7:de:20:92:52:ac:6a:37:e0:51:7d:92:11:
         3a:a2:12:08:e8:d1:86:9e:d3:c1:d9:7c:ec:f6:92:77:de:35:
         e5:28:a5:b7:0b:1d:13:56:27:f4:44:00:7e:09:94:9f:29:88:
         34:80:11:db:de:94:aa:57:bb:7b:63:c0:54:f5:51:f9:55:47:
         c8:2f:b7:ed:bc:3e:bf:f0:4c:c5:f5:4d:f7:8a:d1:92:d0:ab:
         48:46:36:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:32:22 2026 by rpki-client