Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
File:                     0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft (raw, json)
Hash identifier:          9T4p0Y88EIMOm7zOBJ0mjOi2Rd/LHc7HsiHRqza4u/c=
Subject key identifier:   BB:FB:ED:FD:AE:21:BA:B6:12:C4:E1:BB:DE:4A:DF:4F:25:F6:8E:DC
Authority key identifier: D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A
Certificate issuer:       /CN=d1bf176af8dba30fef325365ef3404812ce2d84a
Certificate serial:       01A0C4E96A1CA1EAAD5C81E2E9EAB4F0D9DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
Manifest number:          12E8
Signing time:             Mon 21 Sep 2026 17:00:26 +0000
Manifest this update:     Mon 21 Sep 2026 17:00:26 +0000
Manifest next update:     Tue 22 Sep 2026 17:00:26 +0000
Files and hashes:         1: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl (hash: 8YTFOIXmXgeab4rnqKvEmQ9TSBtyLrX+BD7iD8cxbrw=)
                          2: ZJfd2bM3zI3ej_61TAwH8lmhHLc.roa (hash: duIN3E5E9I7c9rAgU9yjUM0YccPt4nRq25usPFTIyKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:e9:6a:1c:a1:ea:ad:5c:81:e2:e9:ea:b4:f0:d9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1bf176af8dba30fef325365ef3404812ce2d84a
        Validity
            Not Before: Sep 21 17:00:26 2026 GMT
            Not After : Sep 22 17:00:26 2026 GMT
        Subject: CN=bbfbedfdae21bab612c4e1bbde4adf4f25f68edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0c:28:95:32:b1:10:d0:30:8c:17:ec:f9:b7:
                    5e:ed:5e:db:43:de:55:d4:c2:49:df:18:84:02:f7:
                    70:87:5c:4b:67:4a:c3:44:d5:cc:5e:c1:a9:28:23:
                    17:1e:cd:ed:3a:c1:21:96:1c:c1:dd:d4:04:6c:00:
                    d4:da:96:59:a4:4d:58:fc:00:d7:6b:75:b6:d8:aa:
                    3a:a8:6e:00:ca:b4:fd:fe:e3:21:84:e8:c1:60:53:
                    41:bf:45:24:9b:8d:9e:5e:a2:b1:88:7d:65:e2:10:
                    16:66:95:ea:17:48:5c:0c:e1:1b:7c:3e:32:9e:33:
                    42:07:50:c9:57:bc:62:62:d9:37:a7:d1:a6:92:ee:
                    a4:b2:e6:57:f8:f5:73:cd:2e:0b:f4:a5:22:4b:e4:
                    26:6d:6e:27:56:5f:81:dc:c9:9c:74:59:6a:3f:05:
                    92:68:f3:83:4a:07:62:7e:ff:0c:63:db:bc:32:47:
                    cd:ef:15:9f:c7:71:8b:40:45:b8:b6:61:90:6e:25:
                    d3:14:b0:c2:59:52:29:5f:1a:b3:ab:65:ff:a4:90:
                    55:80:ee:4c:cd:c9:b6:bd:67:7f:11:77:98:52:6c:
                    ee:0c:be:74:b6:c2:f9:b0:f1:7d:88:09:50:66:e9:
                    f1:56:73:58:fb:e6:5b:2f:33:9a:e8:ab:db:e3:7b:
                    70:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FB:ED:FD:AE:21:BA:B6:12:C4:E1:BB:DE:4A:DF:4F:25:F6:8E:DC
            X509v3 Authority Key Identifier:
                keyid:D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:7c:c8:53:59:24:bb:5b:9d:17:d1:a2:8a:17:98:cd:99:c8:
         f0:7c:ff:9b:dc:cb:2f:b2:af:66:89:59:57:20:4a:e3:36:ec:
         09:c8:d5:2a:0e:0e:b9:88:50:00:96:24:fe:a9:b9:81:91:ba:
         3c:c5:be:07:f5:cd:30:ce:c7:92:4a:14:b8:c1:bf:8b:73:79:
         8e:b5:10:d8:f2:b8:21:28:3c:4c:c7:6f:cf:0b:ea:86:49:65:
         7b:9e:89:23:db:cf:0f:ce:cd:93:25:ee:ac:3e:4f:fb:f4:e2:
         d6:cd:a5:77:a1:26:66:3e:2d:4b:79:09:2b:2a:2c:ca:fb:32:
         b1:02:ff:6c:5c:62:b2:6d:51:ec:d5:fe:7d:5c:e1:ba:26:7a:
         a9:22:e8:c5:a7:28:21:15:8e:2a:10:62:c4:38:69:b4:66:1e:
         f2:79:fb:2e:ab:6e:24:8f:4d:1b:3f:d8:fe:1f:39:ff:0a:e3:
         df:24:77:ae:8d:77:71:85:68:2c:21:f3:a4:55:bb:be:eb:c9:
         ef:79:d8:01:32:fc:65:31:85:96:96:9e:fd:ed:2e:c2:02:35:
         83:1d:0f:f9:dd:59:dc:08:48:0c:8b:30:a6:4c:d2:22:7e:15:
         29:0f:f1:f9:46:6f:d1:f3:55:8b:b9:4c:53:3d:5f:38:bf:9f:
         42:fc:b3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:56:38 2026 by rpki-client