Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
File:                     f01ZHCOtLGlHfX96HUzo687pWWw.mft (raw, json)
Hash identifier:          uArtlq0iXK8omkHZD8AxUPwj+Mml0mxpIMTg7y21maI=
Subject key identifier:   21:95:DA:94:70:1E:83:F7:AE:FE:AD:CF:19:0B:C1:EA:B8:9D:14:D9
Authority key identifier: 7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
Certificate issuer:       /CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Certificate serial:       01A104DB709B4FD6FF2919E327C7AB3083D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
Manifest number:          08E0
Signing time:             Sun 04 Oct 2026 03:00:52 +0000
Manifest this update:     Sun 04 Oct 2026 03:00:52 +0000
Manifest next update:     Mon 05 Oct 2026 03:00:52 +0000
Files and hashes:         1: f01ZHCOtLGlHfX96HUzo687pWWw.crl (hash: O0iHRLNvExP5nAsDTKuf9b4Ff1p70+CFq9tgMaZBj2A=)
                          2: pXDB3JZOfxhx6kB_B6yjlms4hgg.roa (hash: 7CjufhrAy5+5Le+UMiFmAE/OHHfY94923x+MRoCs0Dc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 00:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:db:70:9b:4f:d6:ff:29:19:e3:27:c7:ab:30:83:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
        Validity
            Not Before: Oct  4 03:00:52 2026 GMT
            Not After : Oct  5 03:00:52 2026 GMT
        Subject: CN=2195da94701e83f7aefeadcf190bc1eab89d14d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e0:80:de:3b:05:4e:35:66:cd:f0:c3:8c:af:
                    fa:19:2f:57:09:be:82:0a:4c:8a:5f:c6:80:8f:97:
                    b7:19:8c:f0:1a:6c:ea:4c:48:51:a1:2e:25:23:15:
                    d5:70:95:c7:e9:85:02:4c:55:da:1f:2c:c3:1a:68:
                    c9:68:d9:af:90:09:10:d6:bf:8f:7d:bf:50:1d:b5:
                    b3:33:05:15:73:75:c9:2d:2a:e5:40:e4:4f:4a:52:
                    ff:18:32:59:59:b6:80:f2:ae:8e:9d:5b:c8:55:e5:
                    78:32:29:be:29:88:a4:b2:db:74:47:7c:ff:7a:bd:
                    eb:1b:41:8c:f8:8f:e8:0e:84:5e:2f:97:fd:6c:82:
                    7c:f3:2f:87:68:d2:3d:ad:b1:25:65:ae:51:59:a1:
                    83:87:70:80:61:46:f0:af:dc:f3:5d:13:3c:35:85:
                    1f:55:9f:ab:09:17:5d:44:db:52:f3:ef:6d:86:f6:
                    13:75:6d:7c:98:f4:13:86:ff:cf:ed:7d:83:9d:c4:
                    ad:35:5a:38:bd:d7:8f:df:93:07:41:07:0b:16:33:
                    b6:e4:ad:2f:2b:a0:3a:86:90:0f:ce:64:b2:33:cf:
                    5c:c0:84:af:c9:a3:90:67:7a:4a:e8:23:cb:a3:2f:
                    f7:fa:b6:54:a7:9f:f9:5b:2f:07:00:5e:28:8e:f5:
                    9e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:95:DA:94:70:1E:83:F7:AE:FE:AD:CF:19:0B:C1:EA:B8:9D:14:D9
            X509v3 Authority Key Identifier:
                keyid:7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:35:2d:2b:e2:64:68:94:0c:48:8a:c5:b0:e7:e9:8b:a5:6d:
         80:14:52:70:23:25:e8:22:db:d4:f0:cb:c6:ea:36:91:7b:7b:
         4a:c4:92:94:57:60:d9:9d:30:a4:c9:27:3a:b2:67:4e:b1:8b:
         aa:2a:cc:46:2f:c5:6d:bc:44:55:fe:fc:fb:ba:e6:c8:6a:9a:
         b9:e3:ec:70:d5:6e:b2:a1:f2:ab:17:9e:13:b2:de:70:db:98:
         6a:a3:f7:86:4d:58:12:db:5d:4b:72:43:b9:e6:92:3f:cf:f8:
         ea:de:b4:51:d1:6f:f7:59:4f:46:75:0f:49:bb:73:be:25:f9:
         7c:db:86:c8:c5:7a:7d:23:f8:19:b0:8a:e4:43:8a:ac:13:11:
         ab:d1:53:ef:29:bc:ba:05:c7:87:e7:fe:93:26:62:4f:b0:0c:
         73:47:98:64:6b:fe:59:00:ec:ff:d5:a1:72:c8:af:be:b7:97:
         9f:ee:8a:d8:69:fd:d7:e8:23:65:99:98:00:b1:63:34:19:7a:
         06:87:27:a3:d7:a4:e6:6d:0a:29:9a:a7:ce:e4:e5:e9:03:49:
         cb:62:0b:4f:5e:40:3b:be:64:b4:ac:98:99:14:a5:60:5d:ab:
         54:fe:17:76:9b:71:41:16:91:58:b3:f6:3d:52:44:3e:32:eb:
         36:b8:91:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:12:21 2026 by rpki-client