Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
File:                     OEypWHqC_DdH9GngCUXZ1VhaNbI.mft (raw, json)
Hash identifier:          efgM5PfpFTmLElCk9LBxu6FhAgVB1Jw5uIK4ma39inE=
Subject key identifier:   64:97:F5:F2:12:01:44:AA:C4:BF:6E:13:B7:81:26:8F:D4:59:5C:06
Authority key identifier: 38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
Certificate issuer:       /CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Certificate serial:       01A17514C474D1479F7D5AB43A99A816EB3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
Manifest number:          06FE
Signing time:             Sun 25 Oct 2026 22:00:57 +0000
Manifest this update:     Sun 25 Oct 2026 22:00:57 +0000
Manifest next update:     Mon 26 Oct 2026 22:00:57 +0000
Files and hashes:         1: OEypWHqC_DdH9GngCUXZ1VhaNbI.crl (hash: EO05FTFcU9FdHuiMofmvkhjk0b1/lRI4toO7uiQdOoo=)
                          2: m5e2ZDv7_-1udsvxigJbqqXmd_E.roa (hash: yOpoP5KeMEFEDYD+ejQW8hpR1s0gtVHvkYr8rcVTFC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 22:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:14:c4:74:d1:47:9f:7d:5a:b4:3a:99:a8:16:eb:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=384ca9587a82fc3747f469e00945d9d5585a35b2
        Validity
            Not Before: Oct 25 22:00:57 2026 GMT
            Not After : Oct 26 22:00:57 2026 GMT
        Subject: CN=6497f5f2120144aac4bf6e13b781268fd4595c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5c:3c:25:05:99:fe:5c:3e:5c:13:c6:a9:60:
                    9d:b0:d7:da:52:82:e0:4e:d4:94:c6:9d:00:50:c7:
                    d8:f4:fa:b6:d0:5d:09:55:63:00:f0:73:fe:11:54:
                    d4:ae:42:65:1d:e3:1f:b7:24:98:7a:0e:23:9f:c1:
                    0b:cb:8f:3f:14:8a:2a:63:03:10:e6:45:e8:d7:10:
                    86:e0:07:e5:8e:7f:51:29:85:bf:6d:28:ed:06:5b:
                    9a:ac:50:77:1e:cc:27:ec:92:d5:16:0f:95:71:bf:
                    5c:c4:5e:23:b4:42:aa:60:b1:28:9d:6b:2c:79:aa:
                    47:34:0f:03:fe:35:fe:14:77:8a:88:2b:37:30:5c:
                    e2:81:c8:90:8a:9f:c7:dd:3a:f6:2f:48:39:36:85:
                    a1:68:60:3e:b0:88:b9:fb:1c:4e:9f:13:57:fe:d1:
                    6e:6b:33:32:09:99:63:6b:52:dd:4c:1a:b4:f8:24:
                    a6:72:f4:c2:d2:fd:a8:3d:1c:55:9b:05:75:9e:4d:
                    63:fc:9d:09:95:e4:79:7a:47:63:58:97:d1:29:a7:
                    43:0e:89:f2:f9:45:b8:1b:e6:b9:49:d9:69:f3:a3:
                    1e:17:3d:dc:0e:22:6a:a4:ad:3d:b6:39:d6:60:af:
                    b3:f4:bd:e7:72:18:f4:93:b0:5d:8a:e2:b5:c0:07:
                    49:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:97:F5:F2:12:01:44:AA:C4:BF:6E:13:B7:81:26:8F:D4:59:5C:06
            X509v3 Authority Key Identifier:
                keyid:38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:5e:86:9f:86:20:16:b8:15:c9:3b:85:a8:ae:69:45:cd:a4:
         c7:34:cc:33:a3:72:52:7f:f6:86:73:fb:fb:b9:5b:bd:a3:31:
         6f:6e:7d:d9:d5:bc:ed:24:4f:e6:6d:9f:b1:5b:22:d1:b9:69:
         71:40:ee:4a:e2:66:2d:92:02:3f:b3:c2:f7:6d:c2:be:bf:17:
         b4:87:7c:3e:8a:86:67:61:80:bc:47:ed:cc:ab:d0:ca:9f:32:
         58:7c:32:42:e8:a5:da:60:bb:4c:58:da:c3:ce:af:81:d1:c9:
         a6:78:08:73:63:5f:07:1b:84:78:87:7c:f7:b3:24:cf:98:d1:
         b0:75:34:d6:7a:09:33:e1:f8:81:c1:ec:08:c1:0c:72:1c:e1:
         ab:56:72:0e:9a:f6:47:1a:d0:ad:a5:b7:12:6e:44:7e:69:ce:
         d2:a8:d8:ba:e1:4f:ea:77:67:a2:dc:00:35:42:3c:2c:c2:3c:
         bb:77:ed:47:fd:cc:fb:03:56:fb:b3:6c:6d:f8:3c:e4:4e:98:
         81:7a:82:56:ca:bb:87:0c:78:a8:ee:f0:92:71:c2:6e:21:60:
         a5:a3:5f:2d:68:f4:10:4a:9c:63:bb:53:de:10:80:52:18:87:
         08:18:be:9d:b4:ed:91:de:0c:3c:c8:9d:29:59:70:9c:fe:18:
         fe:98:67:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:59:25 2026 by rpki-client