Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
File:                     61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft (raw, json)
Hash identifier:          2p3UcOc0qW/vEKbWo8Gl9hffO+5B0vKNuswKDMcHPzI=
Subject key identifier:   0D:47:39:A9:BC:74:EE:F6:B5:DB:DA:1B:77:BE:29:B1:2E:5B:07:9C
Authority key identifier: EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
Certificate issuer:       /CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Certificate serial:       01A13DB8683AB4ED6EF2BDD1D82DED29BBFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
Manifest number:          109E
Signing time:             Thu 15 Oct 2026 04:00:57 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:57 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:57 +0000
Files and hashes:         1: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl (hash: g4aFOmpHivIldhtr6yDyhZok6DmIPIDviOcg7ouI3fA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:68:3a:b4:ed:6e:f2:bd:d1:d8:2d:ed:29:bb:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb50b439d488e1b1a69e3586098621956c0edc7b
        Validity
            Not Before: Oct 15 04:00:57 2026 GMT
            Not After : Oct 16 04:00:57 2026 GMT
        Subject: CN=0d4739a9bc74eef6b5dbda1b77be29b12e5b079c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:d2:b3:b7:c6:bf:19:c7:0e:5b:55:cc:c8:
                    8e:8a:60:cb:d3:ef:27:23:a0:69:e2:13:58:77:70:
                    62:5b:70:d5:78:f1:d2:55:b0:a5:d5:37:79:61:32:
                    d5:d8:36:0a:97:1a:fd:6d:d1:f9:6a:66:1a:49:dc:
                    e8:1b:9b:ce:09:ce:80:d2:32:fb:e8:94:40:86:bf:
                    2d:8b:56:3f:81:85:a9:d4:aa:dd:11:44:8f:31:cb:
                    5c:a5:90:de:81:d7:6d:6f:d5:08:bb:b2:9a:a7:d6:
                    f7:ff:33:0c:33:91:bf:8c:41:b2:98:56:ac:e7:7e:
                    85:38:8c:43:a4:c7:90:0f:72:89:bd:95:fc:d3:b1:
                    28:af:98:34:70:ed:5d:53:b2:09:44:a0:c7:4d:39:
                    c6:26:f4:a0:21:e2:28:7b:19:6f:1a:bd:6b:c4:e9:
                    61:ba:0c:35:7f:ba:83:e5:52:08:81:92:d4:9e:46:
                    9b:31:1a:f7:5c:83:3f:a4:f7:dc:7d:33:c4:48:d9:
                    2c:be:06:a7:62:1c:90:84:77:b7:4b:58:29:26:83:
                    5d:9f:47:cd:5f:e0:8a:f8:5c:5b:69:99:e8:c1:da:
                    dc:69:18:64:d3:19:58:67:ee:e9:7d:e1:3f:63:86:
                    eb:31:ed:45:c6:10:75:d0:46:9d:a4:ac:77:34:af:
                    f7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:47:39:A9:BC:74:EE:F6:B5:DB:DA:1B:77:BE:29:B1:2E:5B:07:9C
            X509v3 Authority Key Identifier:
                keyid:EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:1d:ad:1f:0d:0c:77:d4:a5:86:c1:9c:0f:ab:f4:99:3a:41:
         ef:69:66:0f:20:4e:e6:aa:d3:27:ec:b6:c7:84:68:4c:20:3f:
         80:51:65:ad:50:62:47:67:5b:0f:66:e6:df:2f:7b:1f:20:f3:
         fc:aa:15:a2:dd:f0:93:ca:79:68:2b:f6:97:90:52:50:f7:5a:
         84:13:44:fa:46:4c:19:4e:90:48:6e:06:3d:62:63:21:3a:b1:
         49:be:5c:ec:ec:4d:f2:5b:5e:56:70:63:dd:0b:86:94:02:50:
         c9:f0:71:2f:a9:91:9f:a1:7b:de:7b:74:86:19:ab:5e:80:cd:
         88:3a:f1:c1:a9:c9:af:50:f6:e8:6e:61:70:cf:5f:68:67:1c:
         b2:23:f4:82:86:ae:e0:8c:b4:da:7a:69:bf:95:35:04:16:e3:
         17:56:cf:4f:20:03:b4:eb:8a:a7:46:b4:d0:b9:a9:67:02:21:
         99:07:9f:70:80:04:c6:97:ac:76:62:75:4d:84:87:be:42:ff:
         52:6f:62:82:87:8d:fc:4a:48:53:ff:b3:51:97:2a:25:50:b6:
         bd:ac:61:c5:d6:71:cb:f2:a5:3a:0f:af:f3:9f:52:9a:d9:9a:
         06:c6:72:6f:75:04:57:02:ae:1d:5f:5e:cb:52:84:4f:8e:92:
         b6:c8:47:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:02 2026 by rpki-client