Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
File:                     0BqOdIpGO0lQg_dHaROSBdyzObY.mft (raw, json)
Hash identifier:          XuqRlwe1alL8Ll1QlZJt8TxaF/L9f45KzZKGwOGbZrI=
Subject key identifier:   26:F9:0E:D1:58:FD:45:B2:DD:5F:4C:C5:CB:96:8A:E4:3F:AA:65:60
Authority key identifier: D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6
Certificate issuer:       /CN=d01a8e748a463b495083f74769139205dcb339b6
Certificate serial:       01A13AB6C7CC113B95C2E7E7761A1599CA7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
Manifest number:          03E6
Signing time:             Wed 14 Oct 2026 14:00:19 +0000
Manifest this update:     Wed 14 Oct 2026 14:00:19 +0000
Manifest next update:     Thu 15 Oct 2026 14:00:19 +0000
Files and hashes:         1: 0BqOdIpGO0lQg_dHaROSBdyzObY.crl (hash: AuU9i7z999/XJUO3rz1cWDOK3zK5HysphlvKQWrkg8Q=)
                          2: 67yNIuDKXUtDVtgojpsh7omuexw.roa (hash: r3ainpcf/xaLFwsqpjAVbwM2zKjxaJVfsZCxDMXSgjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 14:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3a:b6:c7:cc:11:3b:95:c2:e7:e7:76:1a:15:99:ca:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d01a8e748a463b495083f74769139205dcb339b6
        Validity
            Not Before: Oct 14 14:00:19 2026 GMT
            Not After : Oct 15 14:00:19 2026 GMT
        Subject: CN=26f90ed158fd45b2dd5f4cc5cb968ae43faa6560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:56:95:9f:62:d2:24:bf:2f:b0:6e:a5:27:
                    a0:20:c9:92:d6:96:1b:bf:62:ee:40:ed:86:da:54:
                    30:df:12:07:49:df:58:22:22:af:68:b5:6a:f1:66:
                    ae:56:c2:84:7f:a4:60:a6:01:08:d5:81:36:91:c8:
                    55:79:a5:27:fd:b7:3d:b9:82:cd:4f:0b:06:08:60:
                    f8:62:7b:7d:cc:c3:0d:c7:86:ed:c1:d1:b7:41:0f:
                    1f:89:8f:c1:8f:15:fb:c0:a5:aa:08:84:9d:17:bc:
                    b9:c7:91:b2:5f:93:21:3e:31:80:62:b0:25:43:44:
                    75:75:f9:c2:9d:76:03:fd:8c:75:e3:6d:26:43:48:
                    27:0f:21:39:6c:16:1d:7e:33:da:3c:f3:95:d6:bf:
                    08:f3:5b:db:ea:26:1e:90:eb:3a:ae:5c:4a:e7:47:
                    57:9c:fd:6b:1a:d0:f7:7a:a6:24:76:bf:84:b3:34:
                    44:c1:86:88:f5:1b:7b:b4:46:28:bb:9e:4f:0c:6d:
                    af:74:66:fe:13:f3:93:1f:d4:d8:57:1f:25:bd:9a:
                    f4:7d:b2:a4:6a:d7:98:e2:16:c5:6d:a4:a7:86:17:
                    fe:8c:24:0b:e1:87:85:fb:25:19:93:bb:6a:49:b3:
                    f1:d5:90:59:1f:2b:3e:72:78:28:83:d3:ad:e8:35:
                    46:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F9:0E:D1:58:FD:45:B2:DD:5F:4C:C5:CB:96:8A:E4:3F:AA:65:60
            X509v3 Authority Key Identifier:
                keyid:D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:9d:bc:da:e7:c5:5b:f0:42:f2:c8:01:e9:59:5c:51:e7:dd:
         1d:82:3e:3b:27:69:43:b7:73:92:3e:12:a8:53:9e:ab:f4:17:
         3b:8c:26:94:36:1a:da:0f:dc:c7:39:8a:96:4d:5e:15:8c:25:
         fc:21:4d:0a:41:a5:ec:34:26:2e:ed:b8:43:c4:c4:fd:40:d4:
         39:d5:8d:07:40:45:24:07:f3:3b:66:d2:62:1d:83:ca:a3:2a:
         fa:90:a2:17:fd:a8:5a:e4:78:b1:b8:9e:f2:b9:2d:97:c0:76:
         59:b3:a9:a9:48:8f:9d:f9:c2:ae:ab:bd:f5:0f:ec:16:a3:0d:
         52:41:4e:1d:c2:62:05:b5:69:74:22:fb:56:ff:05:2e:2d:0a:
         84:f8:fb:e0:55:aa:7b:27:ab:2e:af:af:f5:b6:20:42:cc:c3:
         f7:23:2d:4e:20:a9:98:26:37:f7:95:02:1e:08:e5:36:fd:a3:
         cc:4e:d1:8f:46:37:b3:50:b7:6e:78:fd:65:59:0c:ee:8b:e5:
         12:fa:04:ca:87:df:b4:ed:16:ab:95:37:ef:2e:0b:b7:d6:9d:
         bf:63:fb:b8:6b:32:2b:e0:f6:2c:fe:86:24:39:64:a8:9f:f8:
         a0:64:d6:d4:8e:1c:9c:8f:6b:31:1e:d2:3a:91:33:5b:e3:b1:
         65:3a:09:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 18:06:26 2026 by rpki-client