Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
File:                     B67xkPRL_B2wxQ8ac_3wFwga_hY.mft (raw, json)
Hash identifier:          D0VBcn+qrK+VffYu+QPOB4THU89Nl2gmj83GwqdfXiM=
Subject key identifier:   DB:C8:1B:8B:3D:1E:1A:0A:D8:7D:15:F7:18:A7:58:24:67:8A:E7:5F
Authority key identifier: 07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
Certificate issuer:       /CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Certificate serial:       01A0C39FAC99E5ABE71A150D236421C9C38F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
Manifest number:          0FBE
Signing time:             Mon 21 Sep 2026 11:00:16 +0000
Manifest this update:     Mon 21 Sep 2026 11:00:16 +0000
Manifest next update:     Tue 22 Sep 2026 11:00:16 +0000
Files and hashes:         1: B67xkPRL_B2wxQ8ac_3wFwga_hY.crl (hash: eMuPIe2VY5U7efRsPVE2/nAda01wETocPZSuz0X4juQ=)
                          2: g8AniT98jgfKG_IB19d9xu2syLw.roa (hash: 7R3vOrjrBzZjR9ZmhYF8VUus96RI5RYOknR8+bpyK+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:9f:ac:99:e5:ab:e7:1a:15:0d:23:64:21:c9:c3:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
        Validity
            Not Before: Sep 21 11:00:16 2026 GMT
            Not After : Sep 22 11:00:16 2026 GMT
        Subject: CN=dbc81b8b3d1e1a0ad87d15f718a75824678ae75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ce:3f:6c:93:cb:7e:ae:91:b6:69:40:4b:d8:
                    ec:02:02:f4:02:26:4b:4b:89:f0:f0:d4:d2:0e:30:
                    88:e4:14:48:7b:85:02:9b:52:74:f7:4d:4c:97:84:
                    22:ca:0c:54:6f:81:69:ce:7c:b3:4e:62:ed:4d:e6:
                    31:5f:6e:23:32:03:14:57:1a:30:f1:1c:ae:41:ba:
                    1f:07:3e:42:03:60:b2:dd:e2:a5:0c:d2:dd:67:33:
                    e0:00:dd:e3:b9:d7:18:a7:4c:42:d9:d4:91:3b:94:
                    47:83:f2:a4:82:2c:da:05:9a:73:ec:2c:96:ce:b6:
                    c8:51:dd:4b:15:18:0e:46:7b:65:18:a1:69:a5:1a:
                    05:6f:6d:a1:1a:21:a9:4f:35:73:33:89:95:d2:96:
                    77:7f:85:36:79:29:b7:8a:ba:eb:2e:56:e5:b3:b6:
                    90:ec:86:f3:3a:a8:20:ab:2c:00:6b:89:76:a8:7a:
                    ac:2f:5f:52:06:b6:4e:fc:65:a3:16:23:a6:31:e3:
                    3a:66:9a:54:c9:54:5c:ce:03:a8:d0:9c:fb:6a:80:
                    c3:ec:69:0d:1f:97:e2:32:a2:a9:ae:1a:83:12:75:
                    9f:51:f1:51:00:9f:0d:a0:ee:ea:3c:42:3e:e0:53:
                    07:23:32:e5:c7:d4:bf:5f:7a:1a:33:1a:53:89:4a:
                    f0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C8:1B:8B:3D:1E:1A:0A:D8:7D:15:F7:18:A7:58:24:67:8A:E7:5F
            X509v3 Authority Key Identifier:
                keyid:07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ce:e6:12:8e:17:9a:96:07:ea:a5:34:d7:f3:2f:21:56:49:
         1b:61:73:3b:78:ad:02:02:8e:70:ed:5c:c6:08:68:25:ba:56:
         20:70:ad:a1:3a:81:ca:c3:53:d3:82:df:f9:bd:ba:f7:2f:10:
         9d:83:15:02:89:2c:5f:e6:08:4b:4e:24:e7:97:10:df:0d:7d:
         3d:f3:bf:b2:40:46:f1:c8:c7:2e:65:0f:63:8c:b5:29:36:6b:
         31:84:d4:8e:bb:97:c3:2d:1b:02:56:fd:0b:df:16:a0:0c:45:
         bd:67:a3:58:7e:2a:b3:cf:05:f4:37:27:d5:45:cd:6d:6b:c4:
         f7:98:83:69:a3:01:7e:ca:28:14:17:e7:6c:26:29:cb:69:a1:
         f3:5b:21:a7:18:7f:8f:0e:1e:10:6a:d1:d6:43:ab:c5:47:59:
         64:a7:05:9a:e7:4b:28:18:95:a8:e6:ef:4d:66:e9:13:05:e8:
         10:cb:26:db:64:e8:d6:52:de:ad:49:08:0a:45:c1:ce:17:93:
         65:05:9e:3f:3b:48:3e:8b:00:2f:12:60:ff:bc:58:77:2f:13:
         71:d1:c4:1a:06:09:93:22:a9:86:9a:07:1b:fb:d5:7a:5a:bc:
         07:8a:7f:05:b8:0e:a1:d7:fe:f4:13:aa:42:93:50:63:45:d1:
         55:51:fa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:31:21 2026 by rpki-client