Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
File:                     0Mo8Cxlv3gunTBSHvcucX6BTZks.mft (raw, json)
Hash identifier:          DK916veaClxe/n5VXbyOFvfc9Dve6mTDmH0ZLFm0NHM=
Subject key identifier:   00:FF:0B:DB:AC:83:A4:76:2E:1C:D8:E6:B9:4E:72:DC:6D:DF:51:53
Authority key identifier: D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
Certificate issuer:       /CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Certificate serial:       01A13DEF3BDB56121745C4715013E41D069C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
Manifest number:          1AA6
Signing time:             Thu 15 Oct 2026 05:00:50 +0000
Manifest this update:     Thu 15 Oct 2026 05:00:50 +0000
Manifest next update:     Fri 16 Oct 2026 05:00:50 +0000
Files and hashes:         1: 0Mo8Cxlv3gunTBSHvcucX6BTZks.crl (hash: AQfCJJNLaJ9SDyzD1ZomRfFvZTLMdIvjC4+r1fv0+F0=)
                          2: MZedXybYHwozV6I5FVF9kaQXqGw.roa (hash: 9GqJqyPbldCXpYPmuX8YAVKvtX3ZVzz/4Tffa0wjAiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:ef:3b:db:56:12:17:45:c4:71:50:13:e4:1d:06:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
        Validity
            Not Before: Oct 15 05:00:50 2026 GMT
            Not After : Oct 16 05:00:50 2026 GMT
        Subject: CN=00ff0bdbac83a4762e1cd8e6b94e72dc6ddf5153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f2:66:71:7d:8c:8c:ed:ee:24:5e:cc:fe:21:
                    eb:d8:4b:2c:cc:34:b6:f7:29:b8:20:39:ab:4f:b5:
                    22:1d:50:9d:76:2c:b3:3d:7f:4e:41:9c:2a:66:3b:
                    ee:2a:42:22:21:8d:ba:a4:d7:cd:4d:5e:8f:aa:12:
                    45:64:7b:f4:d3:0a:a3:8e:ae:1c:83:ed:fb:15:72:
                    8d:1b:26:e3:f7:d0:fa:78:2f:a9:c6:e3:7a:70:0f:
                    9b:62:c9:5e:ca:c4:ab:42:f0:90:39:d7:39:af:0c:
                    e0:2e:a8:5c:40:f4:0d:13:76:1a:b8:f2:ca:56:e9:
                    3e:c6:5a:d6:a4:f4:65:69:59:a3:e5:6c:2f:e7:86:
                    dd:c7:06:9f:17:02:10:8a:ea:0b:ae:b1:82:f7:cb:
                    2b:a1:c5:67:4c:c1:a2:9b:2f:be:a7:29:c4:d2:44:
                    c2:50:cd:d8:28:f2:e6:32:ff:d8:a2:c6:94:c0:c8:
                    ba:fb:14:b8:95:62:b1:6c:ac:de:f0:ae:06:0d:c6:
                    8b:c3:6c:4a:75:3d:52:c0:a6:ea:ab:7e:cf:0c:f2:
                    37:bf:b1:59:0b:19:a6:cc:d9:3b:cd:9b:37:ac:71:
                    8b:df:16:38:f1:c3:fe:67:07:09:17:16:5c:0a:71:
                    0c:29:3a:8c:f0:18:5c:cc:3c:4e:23:9d:1e:2a:7e:
                    32:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FF:0B:DB:AC:83:A4:76:2E:1C:D8:E6:B9:4E:72:DC:6D:DF:51:53
            X509v3 Authority Key Identifier:
                keyid:D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:9b:d4:b0:77:0b:6e:4b:f1:71:8e:17:32:53:64:a2:16:11:
         01:c3:dc:0f:e4:a9:42:0a:1a:38:59:e1:81:93:ad:d5:97:cc:
         d1:53:c7:72:02:a3:a2:15:1b:5b:2a:ce:f8:ca:62:2e:ad:bc:
         68:97:ca:54:46:f7:5b:39:01:98:d8:25:68:74:f4:dd:36:05:
         93:04:db:71:69:da:86:07:e7:79:bc:ec:ee:e0:84:31:63:e1:
         4f:a2:fa:73:0d:e0:2f:45:6c:ba:c1:f1:ae:09:9a:e8:ce:42:
         e1:3d:96:c3:be:81:65:06:9d:71:8b:42:8d:f2:99:f6:37:37:
         fc:8f:8f:86:5d:c1:bb:17:2c:56:1c:66:2d:e6:f8:92:1b:bd:
         34:6f:db:18:5a:39:06:47:06:f8:ab:c1:07:e4:a3:99:35:3f:
         34:63:60:18:0b:39:61:da:e0:bd:ed:6f:72:a4:f0:0a:f1:64:
         9f:a7:b8:ca:51:f1:42:c3:3d:fd:9a:e3:e2:47:8a:aa:3c:9b:
         f8:4a:89:dd:ee:f9:09:0c:85:70:1e:99:fa:a8:8f:7a:42:2e:
         03:1e:3e:42:4e:b1:86:05:bd:f3:66:ab:02:3a:8e:ea:af:dd:
         1d:76:49:6e:ad:c1:0a:b0:bc:cf:35:c7:56:3e:6a:ae:2d:46:
         97:94:a3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:16 2026 by rpki-client