Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
File:                     0vONSutNAojbuFTR6uC9itP4Qfo.mft (raw, json)
Hash identifier:          zO2j9xNygmLZ/XNaWnB/paVDGEt+ClimyzTgYQtdHS4=
Subject key identifier:   EC:0D:F1:33:AE:C1:2E:BC:0C:F7:C3:F5:BE:E4:45:EF:8C:77:64:B9
Authority key identifier: D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
Certificate issuer:       /CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Certificate serial:       01A0E9D295012E4A88CA70E50FA9F9CF34D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
Manifest number:          1A79
Signing time:             Mon 28 Sep 2026 21:01:26 +0000
Manifest this update:     Mon 28 Sep 2026 21:01:26 +0000
Manifest next update:     Tue 29 Sep 2026 21:01:26 +0000
Files and hashes:         1: 0vONSutNAojbuFTR6uC9itP4Qfo.crl (hash: spn1ru+OjXlxs2cCPp1oTpZcs62+8Tokz5LLWYvoQ/s=)
                          2: tquIiBHdfRgZoSkv66J5g5_rmsI.roa (hash: ewRKCXj1KUDIVFZwB0RpxCjNpMk+Zl5DzmkGO5LloCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e9:d2:95:01:2e:4a:88:ca:70:e5:0f:a9:f9:cf:34:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
        Validity
            Not Before: Sep 28 21:01:26 2026 GMT
            Not After : Sep 29 21:01:26 2026 GMT
        Subject: CN=ec0df133aec12ebc0cf7c3f5bee445ef8c7764b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:20:ed:e8:55:26:a4:44:ca:01:3b:19:2d:23:
                    07:e6:af:e9:46:43:28:79:45:ea:7b:d4:4c:7d:42:
                    26:57:a7:fe:5e:36:7d:bb:90:73:4c:61:f0:a9:c4:
                    af:e7:57:fc:68:a9:cb:07:7f:6f:53:29:ae:e0:a3:
                    5c:64:58:8d:44:a8:b7:82:1c:92:bb:ba:06:15:c6:
                    0c:36:5b:93:9d:fb:81:43:7a:28:0b:20:05:86:e4:
                    c4:56:6e:6e:b7:1f:22:b8:6b:10:e8:64:25:8c:55:
                    51:25:53:08:58:68:a3:1d:07:f4:f7:08:cb:16:88:
                    03:f1:40:5e:f0:fb:46:00:3d:d2:db:8e:48:6b:43:
                    89:aa:1c:64:21:99:a6:62:09:44:7e:2b:e6:49:a9:
                    de:de:ee:80:f6:16:33:77:b5:14:34:37:65:80:85:
                    09:6e:ed:0c:05:b6:79:b8:30:c1:a2:8f:03:35:0b:
                    14:4b:b8:33:2b:28:38:be:16:5b:02:ba:15:3e:b3:
                    9c:b2:b2:c2:1e:7e:77:48:6c:45:43:68:c2:b3:3e:
                    45:4c:93:6b:e2:c6:66:ca:f5:68:e7:93:8a:41:bc:
                    49:56:cd:54:31:7d:41:8b:0e:72:ad:a6:b3:90:b2:
                    dc:a6:80:6b:59:59:f1:8d:20:b4:34:69:7f:e9:cb:
                    b4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0D:F1:33:AE:C1:2E:BC:0C:F7:C3:F5:BE:E4:45:EF:8C:77:64:B9
            X509v3 Authority Key Identifier:
                keyid:D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:ba:34:cf:81:cd:a5:8c:b3:8d:17:2d:6f:a1:42:2a:88:ee:
         87:df:4d:eb:29:db:45:12:b1:5d:0d:aa:85:6d:09:42:fb:5b:
         2c:35:42:d2:37:d0:82:2f:1d:de:e6:2d:ad:65:9d:d1:9e:31:
         8a:7f:9b:12:46:78:8e:6f:e2:b6:63:79:a4:c4:da:b6:90:b9:
         b4:02:6e:45:9a:91:82:94:62:c0:e2:9a:d7:d4:47:8a:e4:ee:
         a8:07:9c:45:53:60:f6:fa:e8:64:c6:b2:e3:bc:ac:8e:06:ff:
         2b:42:59:d7:a1:6f:18:f4:04:30:e8:2d:f7:f4:9e:fa:ab:a8:
         02:2e:62:a7:ea:9d:44:a2:62:d7:45:e5:9c:79:a3:35:69:e8:
         48:aa:cb:a6:69:29:84:5f:ef:94:6a:56:87:3e:fa:86:a4:81:
         ce:8d:a7:cf:64:a5:81:bc:86:9b:61:19:36:ee:41:df:d8:ad:
         45:78:98:4e:02:95:1e:1c:0f:77:98:a4:3b:7c:da:e5:07:5a:
         4e:fe:62:eb:03:26:cc:ab:17:22:88:f5:d0:48:3d:1b:57:e2:
         6e:22:bb:c5:04:28:9f:a3:30:24:f4:0b:ee:8a:e3:87:70:f9:
         fe:41:94:bb:ae:19:b6:1d:c4:69:0e:6c:df:1e:27:63:7b:9e:
         2a:e1:73:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:22:11 2026 by rpki-client