Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
File:                     _S0VJ2B9EYjp24DPFkmKQTggDNw.mft (raw, json)
Hash identifier:          9CG9yaRvjBUR5Lz7xeIcHEFljKO+MLE6JecBFHtyIuA=
Subject key identifier:   0F:9F:ED:98:24:98:F9:DA:E3:5F:C0:90:02:CE:73:F9:AE:43:41:E2
Authority key identifier: FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC
Certificate issuer:       /CN=fd2d1527607d1188e9db80cf16498a4138200cdc
Certificate serial:       01A12B7B44414D67E7CC1D601F47A0BE8A8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
Manifest number:          1A98
Signing time:             Sun 11 Oct 2026 15:01:01 +0000
Manifest this update:     Sun 11 Oct 2026 15:01:01 +0000
Manifest next update:     Mon 12 Oct 2026 15:01:01 +0000
Files and hashes:         1: BvhaM_nZH3fQst7z68_40-nvNk8.roa (hash: w3u/cjgSvlFlc9grPNy8PjEmfYPvw7yuNYwBbz1TN6Y=)
                          2: _S0VJ2B9EYjp24DPFkmKQTggDNw.crl (hash: KFKxuXhg1DDLpj2fZEiVv9AoQ1un03Rm7lxxdV6Z/rQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:7b:44:41:4d:67:e7:cc:1d:60:1f:47:a0:be:8a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2d1527607d1188e9db80cf16498a4138200cdc
        Validity
            Not Before: Oct 11 15:01:01 2026 GMT
            Not After : Oct 12 15:01:01 2026 GMT
        Subject: CN=0f9fed982498f9dae35fc09002ce73f9ae4341e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8c:2e:ed:89:b3:77:3b:4d:71:a8:1f:0a:ef:
                    20:9e:3a:f7:84:2f:bd:ed:a9:ed:da:f2:dc:61:75:
                    f8:1f:dc:55:ae:42:ce:5c:e2:3a:ca:ba:41:45:03:
                    ba:f9:0a:70:b6:93:5b:cb:97:39:d1:de:6c:d0:d3:
                    50:ba:7b:ec:56:a7:e6:ee:78:63:2e:4f:19:01:da:
                    96:a1:0b:49:f8:9f:68:58:55:a4:cb:e1:3f:89:d2:
                    8a:77:bc:bb:5b:5a:a2:73:43:69:fa:d4:45:45:c3:
                    5b:b9:3f:68:de:b4:b8:9f:75:de:27:33:37:06:61:
                    73:5d:79:fd:2d:45:3d:7f:c0:8d:da:eb:54:0e:cb:
                    97:0c:54:ca:0e:15:e1:c1:34:aa:6a:25:c4:fa:68:
                    15:1e:a4:b1:1c:b7:67:79:fa:ee:ee:99:9f:30:b7:
                    5a:19:5b:a2:29:2e:95:2b:fc:0f:5a:91:9b:a3:4f:
                    65:84:8b:7c:0b:e3:fe:13:c9:88:8f:48:7f:6f:e5:
                    8d:a2:85:ba:b3:d9:1d:7d:55:82:7e:cc:16:7a:0b:
                    6c:e3:1d:45:95:60:22:28:df:ef:11:b1:ae:5e:5c:
                    b7:85:ca:a6:7f:be:ed:00:e7:aa:06:9d:94:8d:10:
                    ea:ed:cd:29:51:8d:0d:fc:73:1f:3c:2b:cb:9c:d4:
                    85:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9F:ED:98:24:98:F9:DA:E3:5F:C0:90:02:CE:73:F9:AE:43:41:E2
            X509v3 Authority Key Identifier:
                keyid:FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:af:1b:41:5f:7f:54:ef:3a:22:10:b8:c8:14:9e:04:88:bc:
         75:de:bf:f4:dc:c0:5c:62:56:79:83:2b:ad:f2:c5:e3:53:09:
         6c:ab:62:a4:a4:b6:73:69:0c:1c:47:9c:93:c6:1c:2e:13:4d:
         81:b2:eb:58:2b:8c:b7:07:ee:26:5d:f1:d0:5d:cd:e5:d7:e3:
         bb:fb:0d:ca:2c:f6:2f:8c:62:0e:0a:a6:cf:bf:ef:e3:be:88:
         e3:ed:49:82:f0:08:82:fc:9e:71:1a:f8:86:d1:38:77:00:53:
         6a:4a:3d:7f:db:d0:a4:62:d6:e9:37:2e:32:5a:f4:24:3e:a1:
         54:fd:a8:81:a2:1d:cd:00:8e:53:ba:c4:2a:bf:d1:aa:79:b2:
         ec:cb:65:ad:26:f0:92:76:c3:66:6e:77:77:ff:96:ec:88:4f:
         6e:1c:e6:11:1c:e6:68:73:76:c5:37:07:6b:93:5a:69:35:0e:
         9b:ff:6d:93:d6:54:04:b5:be:00:47:56:03:47:88:47:36:30:
         5d:17:e8:cb:81:0b:a5:c7:cc:7a:3d:c6:7b:59:50:92:a0:5a:
         6d:e2:d8:8d:b3:c8:1d:b1:30:e5:62:6b:b8:68:89:cd:27:c0:
         e3:46:0c:59:3a:50:36:18:2a:fc:20:2f:8e:1c:40:a6:45:7e:
         1c:d0:6f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:06:37 2026 by rpki-client