Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
File:                     C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft (raw, json)
Hash identifier:          pjkY8fUmPWJxL5hMZd4d9OCDTKfmabOcj2qyhWaHo+U=
Subject key identifier:   6D:F7:29:8C:BB:3E:9C:8C:91:3E:74:CF:18:D7:2F:B3:1D:9B:1F:76
Authority key identifier: 0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
Certificate issuer:       /CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Certificate serial:       01A13E263E943ECC6B496C4F6EDF9046B738
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
Manifest number:          0D5E
Signing time:             Thu 15 Oct 2026 06:00:56 +0000
Manifest this update:     Thu 15 Oct 2026 06:00:56 +0000
Manifest next update:     Fri 16 Oct 2026 06:00:56 +0000
Files and hashes:         1: 2v4YgEEU5PZAEx9kaov0Dt0r6ZE.roa (hash: yvRtNPx1WUhuCSJ0MLLVNvVm/bVKPnCTaAl6EEupAH8=)
                          2: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl (hash: 35XGOgt4gYZYF2HAfzb9Ti16azxTs9IGeM/md4zULQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:3e:94:3e:cc:6b:49:6c:4f:6e:df:90:46:b7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
        Validity
            Not Before: Oct 15 06:00:56 2026 GMT
            Not After : Oct 16 06:00:56 2026 GMT
        Subject: CN=6df7298cbb3e9c8c913e74cf18d72fb31d9b1f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ed:90:6c:c9:0b:5d:65:7e:cf:ae:69:37:fc:
                    46:5c:28:9a:de:6d:bb:6c:1a:13:6c:c3:a3:de:17:
                    2e:74:85:32:c1:dc:e6:ad:1a:06:e0:c6:17:55:44:
                    bb:dd:58:64:1d:bf:54:15:15:59:e6:9d:30:d6:33:
                    b0:dd:ab:4b:8a:86:ac:b6:16:3b:88:b6:b8:9e:eb:
                    65:7f:23:6b:ab:01:e4:c8:6b:ba:1d:59:a7:40:96:
                    3d:ac:df:dd:3b:f8:f6:4a:69:bd:a8:ea:ed:b8:39:
                    a4:a2:69:c6:bf:1f:ec:b9:81:6c:7b:a4:c8:36:30:
                    ae:f4:6c:be:f5:2f:c6:7f:23:dc:6d:61:d7:a6:95:
                    a3:a4:4b:b0:7c:c2:5d:66:ff:51:af:49:a1:62:18:
                    4c:71:0c:c4:2c:9e:1d:16:67:18:f2:64:b7:34:ca:
                    b7:05:dd:dc:99:96:47:c7:15:22:02:6f:0b:be:d0:
                    fe:e5:7a:a6:d0:91:bd:07:ff:95:53:4d:29:e6:47:
                    a4:6a:5e:9b:c0:42:b5:c3:c0:1c:fe:7a:95:04:bb:
                    ed:c3:7a:74:36:4c:c2:1d:71:35:73:3b:8a:05:26:
                    1d:64:91:b8:46:e7:6b:d8:24:a5:9e:f7:61:cf:cb:
                    54:05:1e:b3:0b:af:df:53:9f:32:aa:b0:c5:dc:e1:
                    d0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F7:29:8C:BB:3E:9C:8C:91:3E:74:CF:18:D7:2F:B3:1D:9B:1F:76
            X509v3 Authority Key Identifier:
                keyid:0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b4:1b:6c:a6:d5:5b:04:7d:1e:18:98:57:20:d0:8a:4a:e0:
         08:b9:2c:a6:ff:47:f0:eb:5d:cb:4c:c8:06:2d:df:84:38:37:
         b4:88:a1:54:7f:f4:2a:6a:f6:86:a0:eb:c3:d1:8f:22:88:0a:
         a0:31:c9:12:01:6c:04:c9:df:65:50:a5:b5:29:b0:5a:6c:ca:
         0e:5d:d2:7a:fd:c5:9e:a8:73:e2:3a:f0:3b:5a:43:c2:fa:e5:
         f2:f8:bc:18:9d:b2:d7:93:23:52:12:4e:9e:25:8c:97:51:8f:
         59:94:30:71:17:47:4d:54:36:d6:5e:ff:a8:be:62:fe:71:9e:
         1f:1f:d1:b2:6d:11:39:97:fd:97:0e:a2:22:6d:70:c2:03:cc:
         96:3d:7a:c4:3a:7e:d8:62:41:c6:ca:d8:47:cc:74:43:f5:a6:
         6f:b0:ba:4c:87:a0:6b:db:73:93:d0:cb:8f:c3:f3:58:6e:7f:
         db:7a:e2:69:24:78:36:73:7a:b6:06:d0:15:5a:06:1a:91:fa:
         3d:34:e0:83:1e:4f:0b:d5:ad:14:e5:01:b1:3c:36:e3:fb:33:
         bc:61:c0:05:70:c2:1f:0b:7a:c7:1e:2d:b1:40:00:c9:66:3c:
         0d:50:9f:95:76:bf:e4:c7:08:db:06:ff:12:71:d9:b4:6a:c7:
         d9:fc:88:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:38:28 2026 by rpki-client