Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft
File:                     0PhWqIToYidB9eFo7Hqno95vK8M.mft (raw, json)
Hash identifier:          bgjgTIorUk55FUH1DC3euK5SDqHepj/UfVIyAwaR+lQ=
Subject key identifier:   04:B4:90:0F:46:C1:70:A3:FF:8E:FB:BC:97:1C:9B:64:C9:5F:F8:04
Authority key identifier: D0:F8:56:A8:84:E8:62:27:41:F5:E1:68:EC:7A:A7:A3:DE:6F:2B:C3
Certificate issuer:       /CN=d0f856a884e8622741f5e168ec7aa7a3de6f2bc3
Certificate serial:       01A13B5C0FB7C1B565E62226E60F3D7C4D0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PhWqIToYidB9eFo7Hqno95vK8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft
Manifest number:          0165
Signing time:             Wed 14 Oct 2026 17:00:51 +0000
Manifest this update:     Wed 14 Oct 2026 17:00:51 +0000
Manifest next update:     Thu 15 Oct 2026 17:00:51 +0000
Files and hashes:         1: 0PhWqIToYidB9eFo7Hqno95vK8M.crl (hash: H17b7C+8e8Vwzn7TYEiiaEknsZNpatTXv+oTudYdVl8=)
                          2: 5uwlb6VAMyxIYrxx11L4WCDtq5Q.roa (hash: zVxnrr7NCdH/hFMNNgmxYObL0zm+TgiecARXZu0CtnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0PhWqIToYidB9eFo7Hqno95vK8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 14:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3b:5c:0f:b7:c1:b5:65:e6:22:26:e6:0f:3d:7c:4d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f856a884e8622741f5e168ec7aa7a3de6f2bc3
        Validity
            Not Before: Oct 14 17:00:51 2026 GMT
            Not After : Oct 15 17:00:51 2026 GMT
        Subject: CN=04b4900f46c170a3ff8efbbc971c9b64c95ff804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b8:03:ed:ba:c1:3c:1e:f9:0c:2a:70:8f:2d:
                    cc:c4:34:99:c2:24:cd:e7:15:a0:7d:db:8a:3a:e4:
                    78:99:17:ab:a8:9f:88:f4:c9:4a:f9:83:c1:89:8a:
                    ef:d1:a0:72:c8:d1:bb:b8:a5:a6:c3:98:7c:9f:b1:
                    e1:79:88:47:9b:f9:6c:01:bf:10:ec:58:5d:46:3a:
                    33:d4:d3:d0:58:cf:55:a3:c4:f7:1d:5e:f3:d1:1e:
                    23:d3:87:96:3e:03:89:73:56:77:06:c8:28:19:b4:
                    dd:b0:42:b5:82:f2:b8:b9:d8:e4:9a:20:d1:6d:5d:
                    ad:08:aa:b3:4e:35:f9:56:89:ef:43:bd:c5:39:20:
                    92:73:50:5a:85:f4:ee:98:47:ab:61:08:9d:9e:62:
                    68:ab:9e:0f:02:21:5c:84:ef:67:62:0c:80:3a:67:
                    65:5e:04:ae:5d:09:9f:7d:c3:be:eb:be:7a:44:88:
                    e3:b0:e8:fe:9d:f6:d9:c6:b9:c5:a3:8c:46:e6:52:
                    e4:22:d6:8a:29:35:d0:a6:7f:46:b4:c5:68:88:19:
                    48:a9:00:cb:9c:99:de:30:11:0d:36:70:51:ee:d1:
                    18:00:d4:2d:de:90:31:fc:a9:e4:3c:04:f5:63:0e:
                    c1:f9:64:8a:10:f5:4f:fa:d9:d1:44:40:e5:72:75:
                    0e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B4:90:0F:46:C1:70:A3:FF:8E:FB:BC:97:1C:9B:64:C9:5F:F8:04
            X509v3 Authority Key Identifier:
                keyid:D0:F8:56:A8:84:E8:62:27:41:F5:E1:68:EC:7A:A7:A3:DE:6F:2B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PhWqIToYidB9eFo7Hqno95vK8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:94:a4:7f:28:bc:00:01:42:21:87:ac:a2:9c:6a:b0:f7:73:
         fe:2a:1a:74:33:56:60:36:9b:3c:d0:1b:0e:c0:6c:ce:4c:9e:
         29:f8:26:67:02:94:11:35:4c:bb:bb:68:46:8a:db:4d:71:38:
         dd:f8:53:f9:58:55:0d:f0:5f:e3:39:bb:10:2e:c1:df:96:10:
         0d:68:57:91:35:45:37:cb:e4:5e:4f:9a:40:5b:7c:47:08:22:
         24:37:67:81:cc:b9:87:1d:6a:78:80:44:ca:69:3f:51:5f:82:
         d2:73:e3:1c:f7:11:f2:df:03:7e:f9:da:fe:1d:7f:7f:6f:6e:
         63:ec:a6:b6:ff:d2:ec:73:6a:bb:8c:fe:6e:7e:84:5d:1d:59:
         65:6f:6e:08:36:4f:b5:e5:9a:40:f8:39:7d:99:e7:16:ba:b8:
         74:52:d3:c6:05:fa:0f:b8:eb:31:c2:d1:62:77:51:f7:1d:96:
         8f:37:f6:c5:23:ca:5f:8d:71:e6:4f:34:7e:ca:4d:94:09:2a:
         4d:41:58:6e:f4:8d:0f:e4:de:b2:b9:9a:58:fc:fd:25:14:9c:
         23:16:a9:5d:6f:2b:fb:ae:34:ad:92:3e:87:a2:95:c1:dd:2e:
         62:8b:06:90:c8:37:2a:08:c7:48:13:38:fa:e2:55:96:05:02:
         04:d0:08:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:47:29 2026 by rpki-client