Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File:                     0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier:          7BpDi+7LtCVdMYvFs0JH6hwqtPwChp0TCjImT1GUv/4=
Subject key identifier:   7D:5B:A2:F7:BA:46:44:D4:0B:C9:72:94:6B:C1:51:F8:5C:9A:2F:72
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer:       /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial:       01A104A560D57F9025D2E5F8D52285F654E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number:          1A87
Signing time:             Sun 04 Oct 2026 02:01:49 +0000
Manifest this update:     Sun 04 Oct 2026 02:01:49 +0000
Manifest next update:     Mon 05 Oct 2026 02:01:49 +0000
Files and hashes:         1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: C+saz0rx/MtdbIg3vJJpeQMZkJ1JMAexSy/QFYttdpc=)
                          2: NP9SfFGYsYXsch7Dr3qELq74PLU.roa (hash: fuLAQTL3YUInXQtx9TnphHOeZzSHEh2X+xButoDoLCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 02:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:a5:60:d5:7f:90:25:d2:e5:f8:d5:22:85:f6:54:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
        Validity
            Not Before: Oct  4 02:01:49 2026 GMT
            Not After : Oct  5 02:01:49 2026 GMT
        Subject: CN=7d5ba2f7ba4644d40bc972946bc151f85c9a2f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ea:80:13:78:87:a6:05:23:18:93:e5:35:f5:
                    63:79:ad:0c:9b:e3:90:04:6c:42:cb:b4:fb:e2:76:
                    72:74:64:9e:39:01:47:c4:99:5c:6e:d9:b5:3a:de:
                    52:6f:47:10:f1:54:14:ab:d6:3b:0c:b1:d5:a4:9c:
                    f2:02:6b:fa:7a:33:a7:29:95:0c:ff:61:24:2e:c3:
                    ab:15:f6:32:0d:f9:e3:d9:7d:d0:40:3f:08:19:30:
                    ef:5c:35:84:df:d3:9d:b2:9a:86:0a:95:73:80:d2:
                    d9:67:e7:f2:2d:0f:78:90:77:72:5a:cb:0e:90:c2:
                    62:01:15:9a:ee:29:69:da:37:9b:8e:be:ad:f0:ea:
                    af:58:2a:d8:7a:c9:55:96:48:bb:79:10:be:24:5d:
                    d1:2d:d1:0e:d1:e2:1a:7a:ab:49:51:fa:66:08:01:
                    72:e8:21:b8:ad:0a:eb:a7:18:30:34:6b:89:ee:e2:
                    5e:5c:d5:e7:f8:88:f1:3a:53:6a:2d:c1:69:65:bb:
                    44:ee:bd:4d:96:d3:af:67:e3:ba:73:4a:85:5a:cb:
                    3e:33:5f:ce:74:61:d4:83:9a:7d:68:8b:41:41:d0:
                    44:c1:a6:6d:07:c7:3f:d4:c5:bc:72:e2:b6:0d:58:
                    0b:66:35:21:96:3c:a5:02:32:70:86:48:35:12:f5:
                    ed:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5B:A2:F7:BA:46:44:D4:0B:C9:72:94:6B:C1:51:F8:5C:9A:2F:72
            X509v3 Authority Key Identifier:
                keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:61:6d:e4:28:2b:c5:8d:16:d5:19:7a:54:f9:c8:65:09:d1:
         c0:ac:30:5f:56:0b:63:5a:b7:a1:77:35:e8:d2:ac:78:77:62:
         87:4c:6a:52:37:a0:a7:cc:41:01:34:ad:5b:2c:bb:73:d8:e0:
         34:9d:b9:90:63:ab:70:78:04:c9:4e:1b:e4:d5:d7:37:dd:76:
         3c:c1:39:84:d7:68:af:c6:fe:06:0e:b0:a1:f1:0d:b8:92:17:
         dd:a2:ee:fc:eb:49:06:1b:51:18:fd:6c:4c:35:19:fb:95:c2:
         58:b9:30:25:58:e0:56:03:2e:ef:bf:c6:8f:b6:a4:fe:7a:e3:
         8b:64:bb:76:24:d4:15:11:fc:ff:cf:a4:b2:41:90:52:b2:f2:
         6a:02:dd:7a:e9:f6:c8:51:49:f4:be:e6:a0:24:7b:2d:81:7b:
         fa:51:4f:b9:c3:02:2f:84:a1:de:d9:14:a6:ad:e2:b5:ab:48:
         9f:7e:1f:fc:7d:4d:7e:dc:16:28:20:bb:0f:9e:07:c3:f5:05:
         0b:9e:6f:54:7b:39:20:9e:82:ea:fa:19:5d:ca:50:16:e4:05:
         e1:ea:dc:ec:58:c5:5a:2e:29:ea:80:5d:96:d9:c6:eb:b1:18:
         e1:4e:b7:76:a3:17:fc:8a:1d:8f:ff:2f:e6:2f:f1:3e:d3:d4:
         a8:e7:74:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:23:40 2026 by rpki-client