Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
File:                     0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft (raw, json)
Hash identifier:          WMQ7bOiEKMBSYC22jZOj2gtXLG4Qby1gtB+iTpXpk7E=
Subject key identifier:   28:EB:BA:CF:7E:5B:76:13:26:47:29:78:0B:19:AC:98:4C:FE:44:14
Authority key identifier: D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05
Certificate issuer:       /CN=d098e907c63457e6ca6281dfe297d972bffda805
Certificate serial:       01A140BA28660FDACE532F3837546FC34D1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
Manifest number:          15D2
Signing time:             Thu 15 Oct 2026 18:01:44 +0000
Manifest this update:     Thu 15 Oct 2026 18:01:44 +0000
Manifest next update:     Fri 16 Oct 2026 18:01:44 +0000
Files and hashes:         1: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl (hash: CDMbQzuaIEOqnp3qIkO1CoJteuuS/xESK0Daa8GRZt8=)
                          2: _vTGMoMd2OUixFc93cU4_AKUok0.roa (hash: 8AD33t0BoeAy789bxPf6MIdbPtyMKTJZlywsC+bTttg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:ba:28:66:0f:da:ce:53:2f:38:37:54:6f:c3:4d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d098e907c63457e6ca6281dfe297d972bffda805
        Validity
            Not Before: Oct 15 18:01:44 2026 GMT
            Not After : Oct 16 18:01:44 2026 GMT
        Subject: CN=28ebbacf7e5b7613264729780b19ac984cfe4414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9b:4e:db:a3:f4:1f:ee:a1:d2:c5:b2:76:cf:
                    71:15:49:be:18:a7:7b:b6:84:61:ef:ea:bf:1e:87:
                    c5:f8:30:1e:30:fd:c1:c3:16:26:e3:38:97:fe:87:
                    72:22:9e:4b:01:03:3d:23:13:08:13:aa:62:92:6d:
                    bd:b5:19:04:b0:ed:dd:00:a7:bd:29:f8:0a:db:07:
                    1c:1b:37:d9:16:b2:5a:41:f0:cc:4b:58:db:d8:9d:
                    69:11:0d:8e:93:b7:ff:74:fc:41:fd:c7:78:65:ac:
                    4d:74:51:ab:a3:a0:aa:29:a1:82:24:30:e9:7d:93:
                    69:25:38:c7:e2:90:88:31:dd:12:7b:9f:49:2d:6a:
                    9a:d9:22:c1:e2:25:af:d2:09:64:62:e6:20:c9:af:
                    5f:f3:1e:3d:d6:02:d7:94:23:23:d8:45:8d:dc:31:
                    73:eb:43:11:4b:d9:c3:61:88:bd:ae:ff:f9:33:a8:
                    34:88:86:f0:c7:99:a9:dd:18:f6:08:93:b4:8e:a7:
                    8e:70:0d:7f:16:94:e7:33:d6:c0:bc:87:ac:51:42:
                    2f:d4:3d:23:4a:71:6b:50:46:80:29:9a:7d:3b:f0:
                    c7:de:f3:87:27:d3:71:24:fa:13:03:46:bc:1a:00:
                    86:44:25:de:4f:7b:e9:b8:f7:f7:80:b9:95:e4:ba:
                    02:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EB:BA:CF:7E:5B:76:13:26:47:29:78:0B:19:AC:98:4C:FE:44:14
            X509v3 Authority Key Identifier:
                keyid:D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:fb:06:12:b0:1c:58:af:7b:ce:af:26:fe:82:a2:b5:19:db:
         ba:64:aa:4a:0d:a9:8c:78:b8:a4:2c:62:46:ec:26:b3:9c:8a:
         a9:ca:83:5d:f1:7b:17:07:b0:10:70:42:ad:32:7c:ca:e8:9e:
         b5:24:c1:2d:78:2e:fa:b1:88:3b:7d:ca:c3:4f:70:88:b3:50:
         57:bb:5b:5c:6d:0c:12:d8:af:ad:10:49:83:5d:16:16:a2:e7:
         32:c6:39:b6:ab:d0:ca:f5:dc:35:d4:97:8e:1b:01:12:21:f3:
         78:07:33:6b:fd:b8:0f:ec:b9:45:5f:6d:6e:75:ae:e4:c0:e9:
         d4:b3:de:26:51:ff:26:ba:4c:4e:84:58:42:11:85:65:68:e6:
         41:40:89:d3:40:fe:6b:92:2b:c5:f6:18:2c:f4:f1:97:8c:d8:
         70:15:f4:8a:db:b8:9f:6f:78:65:f2:73:45:fb:2a:f8:ab:23:
         4b:a4:c6:65:3d:4a:de:6c:e5:2a:1d:eb:18:ba:0f:ae:a8:f5:
         8d:39:1a:8d:5e:71:1b:ad:95:33:4d:a9:78:9a:70:83:7d:05:
         f8:b7:7e:c8:f0:20:45:a0:66:31:6b:ef:8a:a1:de:28:51:90:
         df:7c:02:dd:4f:41:f4:8c:bd:6e:87:3a:68:9d:b3:2b:5f:13:
         ec:3d:f3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:14 2026 by rpki-client