Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
File:                     0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft (raw, json)
Hash identifier:          0CC92sVvTE72/Cb7ypohOF08fN+1lT1m17VYT/fZRO0=
Subject key identifier:   C2:CB:6A:D0:F4:C5:43:AE:9C:E7:02:B5:A7:85:36:EA:AA:B4:AF:02
Authority key identifier: D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A
Certificate issuer:       /CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
Certificate serial:       01A0C8587948E196D176B2FFF4D335CEB0E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
Manifest number:          1A66
Signing time:             Tue 22 Sep 2026 09:00:36 +0000
Manifest this update:     Tue 22 Sep 2026 09:00:36 +0000
Manifest next update:     Wed 23 Sep 2026 09:00:36 +0000
Files and hashes:         1: 0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl (hash: rRWXPaC/ICzauRi+9WdMBsTuXOHilp2t70M+RpMq36E=)
                          2: UFUNHcp59zFp-s7epnaBCk3fSDI.roa (hash: 5JNnpeUYOHWtCY7aisWTKc4iY+kJ/fdA3iBaqT6fPPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 09:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:58:79:48:e1:96:d1:76:b2:ff:f4:d3:35:ce:b0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
        Validity
            Not Before: Sep 22 09:00:36 2026 GMT
            Not After : Sep 23 09:00:36 2026 GMT
        Subject: CN=c2cb6ad0f4c543ae9ce702b5a78536eaaab4af02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7d:5b:13:f7:1d:b7:24:0b:2c:1c:c6:7d:0e:
                    cd:bf:97:65:03:8c:3c:82:d5:44:4b:32:47:a4:db:
                    6f:17:35:e5:8f:8e:99:4b:2f:67:9a:d9:1e:5b:2e:
                    ff:13:47:4f:0c:f6:3f:31:02:ec:7f:a6:78:5b:f0:
                    f4:49:f4:44:f9:5e:46:ad:5d:6b:f2:dd:9d:ad:76:
                    33:42:9b:60:80:be:be:c9:f5:f1:e7:e6:b5:10:9b:
                    05:e3:cc:31:5e:83:07:38:c5:1c:76:3d:da:56:70:
                    a8:eb:ea:dd:5c:26:6a:3e:54:82:b9:3a:45:79:23:
                    8c:33:07:41:ab:0b:e6:38:38:b6:a3:de:86:b1:3a:
                    29:36:c7:8d:0e:ba:6c:cc:e0:26:f1:b6:60:62:93:
                    ac:07:f7:18:80:98:bd:e1:ac:2b:aa:18:13:43:b1:
                    07:87:b5:6b:30:72:3f:31:ca:98:68:1e:b1:14:b8:
                    60:c3:d7:52:77:90:89:0b:6b:f2:d8:85:5a:46:62:
                    bf:a3:5c:c6:e0:3b:0b:d2:de:99:32:68:9b:88:6d:
                    41:9c:d0:45:1c:ed:ad:20:c0:ee:ea:2a:d3:a5:7a:
                    83:08:1a:29:75:e7:4c:bc:7b:fc:d2:11:90:f7:d2:
                    6a:e5:ca:7a:25:ae:50:d1:ff:a9:c6:e5:3a:af:5d:
                    61:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CB:6A:D0:F4:C5:43:AE:9C:E7:02:B5:A7:85:36:EA:AA:B4:AF:02
            X509v3 Authority Key Identifier:
                keyid:D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:47:17:c9:b4:af:25:45:5f:75:f7:74:6f:e4:be:0b:fe:04:
         79:cc:e5:19:8d:16:92:a5:70:22:38:8a:57:d2:fa:fb:3c:b3:
         9f:61:04:67:b1:e4:fb:f7:a2:aa:d2:e4:6f:14:ef:be:df:31:
         17:18:af:00:3c:ac:1e:29:7a:9d:0c:4a:be:86:5d:cf:4e:c5:
         f1:0b:43:60:b7:9d:1d:7b:79:ad:ba:26:f6:32:65:c7:18:ab:
         25:d9:b2:b2:36:83:77:aa:d0:19:fa:1e:d9:09:29:87:90:46:
         9d:fa:13:32:1f:be:8d:b5:aa:f0:b9:f7:1a:28:71:de:4a:5a:
         8e:01:f6:0d:03:ab:97:05:6e:8d:58:c1:d9:8b:71:06:bf:c6:
         64:37:c4:1d:a6:47:b5:e2:5e:2b:17:6e:54:84:11:f4:b4:4a:
         09:45:3a:a5:c3:ca:f5:fb:8f:c0:8c:d5:a4:eb:9e:cc:36:00:
         79:d6:a2:a3:48:c6:7f:22:e0:24:39:49:4c:04:d6:d4:48:81:
         59:50:23:92:ce:57:c7:4e:cf:40:93:fe:4d:8c:39:42:f2:83:
         29:63:a1:7c:3e:c9:69:33:b8:18:f3:2a:69:ef:5d:81:c5:14:
         6d:ad:4e:2a:3d:9a:cb:9c:f5:0a:c8:97:82:68:2e:81:0b:3f:
         83:65:aa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:43:11 2026 by rpki-client