Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
File:                     0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft (raw, json)
Hash identifier:          FLUWx2Qz60BRa2WV8XAE8Zc1aQnVPSBJcqUb1AcwfjI=
Subject key identifier:   D2:7D:70:F0:4E:3D:54:BF:28:D3:02:56:93:1E:51:13:6D:11:DD:8D
Authority key identifier: D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
Certificate issuer:       /CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Certificate serial:       01A13D4A883FAD7A64F3507523DE7653F497
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
Manifest number:          11B7
Signing time:             Thu 15 Oct 2026 02:00:57 +0000
Manifest this update:     Thu 15 Oct 2026 02:00:57 +0000
Manifest next update:     Fri 16 Oct 2026 02:00:57 +0000
Files and hashes:         1: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl (hash: 9bv0+mNRobDkw9LaPKaYS7hHwHy3E3EuX3tID/HGBS0=)
                          2: bEcb6mJG7iCjlx3MBYnus4nMrP8.asa (hash: YUZIJf3sKNZrkiUCtSJPScroHKhNFxjZxkZytz7Yd84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 02:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:4a:88:3f:ad:7a:64:f3:50:75:23:de:76:53:f4:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
        Validity
            Not Before: Oct 15 02:00:57 2026 GMT
            Not After : Oct 16 02:00:57 2026 GMT
        Subject: CN=d27d70f04e3d54bf28d30256931e51136d11dd8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:11:f1:cd:e3:bf:3f:5b:54:23:c5:40:ff:06:
                    1e:23:b1:4e:69:92:07:e6:74:ca:c3:ea:8a:0c:54:
                    95:3e:7d:46:0a:b8:e1:e0:5e:ae:55:6c:cc:d4:cf:
                    43:75:fa:43:45:9b:80:2c:95:8a:2b:7e:b0:d2:5f:
                    dc:70:dd:1b:ea:dc:35:79:2a:e2:fe:d9:85:89:89:
                    65:e7:58:8e:f2:17:58:a4:89:3a:a9:2f:33:ae:fc:
                    ab:71:fe:ec:57:49:26:4a:f5:5a:1d:74:52:d1:af:
                    5b:bf:16:b4:63:62:1e:2a:0f:d5:7a:49:48:07:5f:
                    64:ef:43:29:aa:fa:2b:93:ec:8b:23:7b:37:59:cc:
                    6f:84:64:6e:0b:bd:2a:65:72:83:fa:4a:f6:df:5b:
                    ca:3a:14:14:2f:db:7b:e4:22:98:82:51:27:ae:19:
                    28:22:ad:d7:82:34:50:ed:3c:d1:40:7e:3c:2f:0a:
                    1d:0f:90:5c:4f:c2:62:57:b6:9e:8d:15:ff:4d:03:
                    a0:02:0b:73:a9:76:e0:b4:31:10:57:a1:4b:f3:f3:
                    1d:33:49:4e:11:59:05:aa:93:27:c4:5d:f6:c9:c0:
                    70:22:3b:bd:a7:f9:58:dd:af:52:a3:0f:aa:70:4a:
                    b7:b9:a7:62:2b:96:8c:6d:16:8a:10:fa:f5:88:37:
                    15:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7D:70:F0:4E:3D:54:BF:28:D3:02:56:93:1E:51:13:6D:11:DD:8D
            X509v3 Authority Key Identifier:
                keyid:D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d4:71:31:a6:7a:0f:73:8e:36:bf:7d:85:53:94:81:b6:72:
         bb:b2:90:c2:92:3c:c6:67:11:d2:7e:93:2e:8e:96:6e:8c:13:
         c2:bb:34:6f:23:af:87:76:51:53:9f:37:3c:f5:e9:6f:7b:06:
         79:b6:02:b1:6b:ff:91:af:17:a4:d3:43:63:eb:00:13:19:cd:
         f4:01:87:a3:82:3c:d5:48:7e:de:b0:20:4a:2d:b4:9b:bc:f4:
         6c:ef:bf:aa:81:52:e2:11:be:21:80:27:da:d1:11:ce:45:08:
         f1:95:6b:27:3b:7a:71:c3:29:c1:cb:ba:b1:d1:f9:ec:85:e4:
         86:e3:fa:83:1f:eb:0d:bc:23:55:2c:76:6a:21:9d:9f:1a:84:
         08:8d:b7:62:02:68:76:b2:b4:3b:3c:63:94:fa:35:53:3e:6f:
         01:dd:60:d7:97:60:c6:88:c8:8f:9e:de:f2:09:87:96:e7:1c:
         07:fb:bf:53:9f:34:87:79:fc:df:da:57:cc:56:ed:8f:7d:62:
         80:30:b2:46:e9:f5:e1:f5:69:da:8e:eb:15:4d:68:de:4c:26:
         54:59:6a:54:32:7a:8f:f4:59:38:41:69:7a:03:f5:05:f3:02:
         e5:15:39:2c:cb:b3:ac:ae:e2:98:f0:61:68:8b:b0:eb:55:63:
         5e:21:28:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:33:42 2026 by rpki-client