Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.mft
File:                     9nBodmrYwI61UovBquRS_UAQt28.mft (raw, json)
Hash identifier:          rMp2N3CKB/EpJipNoWU7JdU7W+0aHxN5g3nEtnaUx44=
Subject key identifier:   D2:04:25:91:B3:82:0D:0E:F0:9B:11:C6:94:58:5F:8B:22:E5:68:4C
Authority key identifier: F6:70:68:76:6A:D8:C0:8E:B5:52:8B:C1:AA:E4:52:FD:40:10:B7:6F
Certificate issuer:       /CN=f67068766ad8c08eb5528bc1aae452fd4010b76f
Certificate serial:       01A15741CC2281893A2FF6D0796DD2D8BF73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9nBodmrYwI61UovBquRS_UAQt28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.mft
Manifest number:          012B
Signing time:             Tue 20 Oct 2026 03:01:32 +0000
Manifest this update:     Tue 20 Oct 2026 03:01:32 +0000
Manifest next update:     Wed 21 Oct 2026 03:01:32 +0000
Files and hashes:         1: 9nBodmrYwI61UovBquRS_UAQt28.crl (hash: NVTjKL2ht3WRkyCDBU7GUvGEKQ2RApcReKfq/3i+Yeg=)
                          2: NIKDJQF8JbqfVTqA1noObiOx-Eo.asa (hash: UMnWgAWLwENoUzr9jwUQCzxce2UUZVyb7ZrbelUcUro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9nBodmrYwI61UovBquRS_UAQt28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 23:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:57:41:cc:22:81:89:3a:2f:f6:d0:79:6d:d2:d8:bf:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f67068766ad8c08eb5528bc1aae452fd4010b76f
        Validity
            Not Before: Oct 20 03:01:32 2026 GMT
            Not After : Oct 21 03:01:32 2026 GMT
        Subject: CN=d2042591b3820d0ef09b11c694585f8b22e5684c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:b2:a7:d6:66:da:c1:7f:40:f4:8e:ad:77:
                    eb:b3:38:2c:42:fa:e1:c3:5d:91:62:87:01:09:59:
                    74:87:e8:25:f8:e2:0f:ad:1e:c0:80:17:df:8d:cc:
                    20:67:e5:a0:ff:b5:5e:4f:a0:05:3b:7f:ef:86:a8:
                    84:23:81:f5:ba:b8:99:d3:3e:98:be:b7:0c:b8:75:
                    ed:f6:3f:98:73:16:b7:1f:95:0d:87:67:36:c8:de:
                    94:ea:ed:56:6b:59:36:98:26:91:3e:12:1c:67:20:
                    87:25:e1:8f:82:72:b1:cf:56:d0:2e:7e:09:3c:a0:
                    2b:6a:b7:01:77:5a:2c:62:e5:96:ef:8e:60:86:23:
                    3a:45:59:d5:58:37:27:0b:00:e2:2b:43:65:ba:81:
                    15:d0:aa:1e:57:6a:80:9e:59:0a:82:ad:ba:20:4e:
                    f0:1a:b9:ac:a1:83:63:0b:1c:bc:e2:ec:41:ac:32:
                    0b:cd:5f:7b:82:42:c2:cb:67:29:c2:65:5f:99:84:
                    ca:29:78:e0:42:f2:74:07:5a:1f:0b:df:05:a5:ba:
                    ff:7f:89:b7:dc:4c:e0:ba:64:5f:ff:9e:aa:ab:9f:
                    f2:91:57:1d:19:1a:76:2e:b0:d7:2d:6f:99:c3:d8:
                    b7:c6:0d:78:d0:aa:4e:53:46:d4:b6:f1:96:d3:fa:
                    fc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:04:25:91:B3:82:0D:0E:F0:9B:11:C6:94:58:5F:8B:22:E5:68:4C
            X509v3 Authority Key Identifier:
                keyid:F6:70:68:76:6A:D8:C0:8E:B5:52:8B:C1:AA:E4:52:FD:40:10:B7:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nBodmrYwI61UovBquRS_UAQt28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e6755f-4a1a-4e10-ae35-f49784c47893/1/9nBodmrYwI61UovBquRS_UAQt28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:6b:a8:8d:35:33:29:d7:5f:6f:e1:87:86:89:a7:f0:69:22:
         94:60:9e:2e:e7:37:82:80:a9:e2:de:bc:c8:4c:22:1a:07:dd:
         48:32:d8:d4:6a:a6:71:37:7f:b9:9e:d5:54:0a:ec:e0:9e:74:
         66:fe:4c:78:40:ad:22:cc:10:7c:3d:fa:47:1f:1e:7e:14:1c:
         4c:99:b3:1a:51:09:16:07:e1:93:09:1f:e3:be:c2:97:47:a0:
         62:2a:4a:76:6f:97:4b:08:29:86:b4:02:24:28:c7:12:a5:41:
         28:5d:4f:14:f4:a6:ab:34:2c:02:63:f3:e8:db:44:b0:f3:67:
         54:67:03:f8:11:8b:e0:a8:d1:03:22:12:8d:5c:5e:0c:c0:6c:
         59:b5:11:bb:8f:ce:48:a2:5d:55:ee:c9:26:72:a2:5e:2c:11:
         2c:c3:6b:07:8d:46:5a:f7:2d:e0:12:d8:7b:5e:7f:77:14:0b:
         cc:b4:95:3f:63:bf:99:d6:8c:8f:87:44:0d:54:ea:09:c4:f0:
         39:88:c5:62:1a:61:10:31:2a:0a:8a:73:56:b3:3a:5e:53:42:
         1e:3b:5d:04:6d:d0:5b:a6:21:22:f3:20:e5:50:ff:49:36:ae:
         ef:d1:19:7e:66:98:73:5a:97:22:2f:0b:b8:25:67:7f:8b:59:
         b1:3c:d2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:58:35 2026 by rpki-client