Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
File:                     SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft (raw, json)
Hash identifier:          /fxvDBO93AaxBZntqnejCpM/b3V+pHzi9+cYnn7TdsA=
Subject key identifier:   0B:A3:3A:71:89:18:2C:68:DE:71:9B:0D:4E:63:F0:D0:7E:50:00:F0
Authority key identifier: 48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
Certificate issuer:       /CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Certificate serial:       01A12AD70F09658165BB4DDC1105EC74D531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
Manifest number:          165D
Signing time:             Sun 11 Oct 2026 12:01:39 +0000
Manifest this update:     Sun 11 Oct 2026 12:01:39 +0000
Manifest next update:     Mon 12 Oct 2026 12:01:39 +0000
Files and hashes:         1: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl (hash: e4BXDFQEHsXYwhCV9ms6QcZD2z3bgI8gp8ca9lKhflc=)
                          2: wOjdRDY4rMDU4XDk35HoLt7uT2M.roa (hash: 7YjJqmLdz1HfJE+GpOkltOPkNzD9vAKu54sBhDV3osE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2a:d7:0f:09:65:81:65:bb:4d:dc:11:05:ec:74:d5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48113c916a59da4d43b8efa7739ad1167ace59fd
        Validity
            Not Before: Oct 11 12:01:39 2026 GMT
            Not After : Oct 12 12:01:39 2026 GMT
        Subject: CN=0ba33a7189182c68de719b0d4e63f0d07e5000f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8a:70:26:f3:39:12:b5:60:c3:cd:ed:3a:e7:
                    bb:07:b1:8f:c0:b5:85:85:3d:69:39:ca:5d:c6:52:
                    e0:4d:c1:27:00:39:f0:05:d4:50:7d:e1:6e:cc:f3:
                    13:f2:0e:d3:56:20:f3:79:84:ab:73:03:f6:3b:e6:
                    92:66:28:fc:a0:c2:0a:9b:1d:36:6a:5e:ca:53:e7:
                    f3:a1:8f:60:60:47:c2:b6:43:55:21:54:29:16:cc:
                    59:e7:86:71:b6:51:c9:1a:4b:5c:00:ca:fd:a1:e0:
                    a5:61:9b:2f:54:22:d6:ef:3c:f4:48:8f:38:2a:36:
                    f6:a7:63:7d:87:a2:ae:8e:05:f8:cd:32:bf:52:be:
                    fb:12:dc:c9:2b:8e:14:ae:d1:3f:02:1f:7a:be:ba:
                    2c:21:15:f7:dc:b1:75:e9:65:ef:84:d1:07:57:15:
                    26:81:b7:0f:90:f3:a5:57:4c:4e:b4:dc:bc:55:3c:
                    1b:fb:10:38:46:fa:1c:8c:68:8b:01:e9:c0:c0:84:
                    13:0a:14:22:99:b5:ff:f3:1d:fe:ce:22:d7:8f:e9:
                    11:13:68:fa:21:7d:8a:c6:bd:ba:35:56:ed:54:10:
                    72:45:6c:15:45:b5:92:0d:a1:57:b0:70:e1:c1:13:
                    3b:63:71:a9:60:00:2f:56:97:c8:6e:ea:7f:2f:03:
                    9f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A3:3A:71:89:18:2C:68:DE:71:9B:0D:4E:63:F0:D0:7E:50:00:F0
            X509v3 Authority Key Identifier:
                keyid:48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:81:92:41:78:36:94:e1:aa:a3:e2:d7:55:80:d1:7f:80:0f:
         72:8c:31:8c:8a:d6:96:bc:d6:ac:36:25:1c:48:fd:77:d3:a0:
         87:b6:3b:d4:32:8e:a6:56:11:f0:81:3e:61:84:82:f4:4f:72:
         39:b0:c8:9e:99:fe:a7:2a:1d:87:51:88:1f:86:91:8a:d1:15:
         48:0b:18:db:36:2f:7c:5c:df:7e:58:40:be:a5:f2:47:cf:a7:
         31:ee:8c:de:64:5e:e1:fa:88:af:bb:40:c8:6a:e0:e6:1a:ba:
         6f:3f:5f:71:47:96:ba:c1:7f:1d:d1:87:22:e8:38:3c:27:87:
         67:f1:73:d5:c0:fb:70:f9:c7:a6:ac:8e:c9:52:0a:b1:b7:7b:
         3a:c6:80:76:f3:f7:90:01:48:e5:80:76:fc:6e:f4:94:ca:38:
         43:1a:e9:0b:49:82:da:46:76:21:8f:02:a1:e5:64:25:3b:e0:
         42:96:d2:bc:f7:66:51:03:15:e4:78:2c:b8:e4:9f:70:25:1a:
         0c:9c:95:71:81:41:cc:a7:8e:55:38:7c:74:35:0e:e6:8e:7d:
         0b:e2:fa:c2:8e:99:fb:bc:d3:c0:7b:da:40:5f:20:18:5d:b5:
         02:6e:0a:b7:02:0e:25:c3:7a:ae:74:a1:ba:2c:6d:59:99:1f:
         84:48:d2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:12:09 2026 by rpki-client