Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File:                     Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier:          aCWaMafx+6qhmU4sDbIhgmcRr27/owEn7PZpKtZWVJw=
Subject key identifier:   AE:34:BF:FD:58:CA:B2:38:62:8C:1C:F6:56:A6:7D:0E:F9:66:96:E5
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer:       /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial:       01A0D983786570994F0EF694B2736824B21C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number:          076F
Signing time:             Fri 25 Sep 2026 17:01:06 +0000
Manifest this update:     Fri 25 Sep 2026 17:01:06 +0000
Manifest next update:     Sat 26 Sep 2026 17:01:06 +0000
Files and hashes:         1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: +QEY2uU5rzWdtXB+iVrbuIwJdR7tIkO+kZ/iT113Jz0=)
                          2: UBu_wFI4vrOxyUU-ryyx1e_IGtc.roa (hash: /0bPFjp2T5vGbtfQS5RsYNIUYPkosMPYyAjiXqIPnOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:83:78:65:70:99:4f:0e:f6:94:b2:73:68:24:b2:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
        Validity
            Not Before: Sep 25 17:01:06 2026 GMT
            Not After : Sep 26 17:01:06 2026 GMT
        Subject: CN=ae34bffd58cab238628c1cf656a67d0ef96696e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:44:11:b3:6e:5d:6a:79:09:55:fd:a5:51:59:
                    72:3f:f5:32:b6:34:14:52:c5:eb:2b:b4:0a:9b:3d:
                    65:38:e4:aa:aa:04:26:77:6c:8b:bc:d3:bb:1f:16:
                    6c:2c:b1:af:0f:27:51:5a:4b:34:a2:65:1c:e0:2b:
                    88:7d:3b:bf:c8:b5:f6:ed:82:68:24:24:db:9d:ae:
                    e0:b9:bc:64:f2:74:f0:95:e0:a2:fc:49:32:40:ad:
                    2d:c9:86:4f:85:b4:73:7b:ac:e5:50:e8:53:92:1b:
                    db:bb:c0:c4:77:15:4f:de:5c:67:c4:97:26:56:f3:
                    8a:a1:7b:34:e2:0a:12:69:98:af:49:49:ee:9d:e3:
                    88:96:43:11:79:3c:aa:39:0a:cc:62:2a:83:ac:66:
                    2f:53:60:52:1c:c5:e2:48:77:82:15:d3:94:a5:8e:
                    ff:ab:50:91:a9:3a:05:ba:de:69:d7:78:ee:33:08:
                    c1:61:11:bd:7a:07:bd:bd:1d:fe:d9:52:90:75:fe:
                    31:3a:b0:d7:16:16:dc:e8:14:59:df:b3:a5:b9:25:
                    81:e0:25:0e:4e:20:a5:ee:ea:41:6b:54:1f:b8:ed:
                    ef:e3:56:2f:b5:68:00:09:e1:3e:3b:5f:c7:b2:dd:
                    f2:fb:c2:ea:f9:63:80:37:cb:00:9b:64:31:97:3a:
                    ab:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:34:BF:FD:58:CA:B2:38:62:8C:1C:F6:56:A6:7D:0E:F9:66:96:E5
            X509v3 Authority Key Identifier:
                keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:20:d9:31:4c:be:8b:36:93:51:a5:f1:04:9d:69:5b:d1:e9:
         8e:08:a8:3d:a8:10:8e:ba:4f:f8:d0:8f:95:c9:25:dc:3b:51:
         6e:3c:f3:58:f6:ff:af:64:07:33:cd:f6:f2:2d:6a:97:c5:f1:
         f5:6e:1b:9d:2c:34:50:72:54:08:5f:c0:75:66:8a:2b:ff:e2:
         09:b4:97:b1:66:58:1f:a7:d4:2e:45:23:83:6c:a6:23:c7:da:
         23:9b:dd:fc:75:c6:c2:13:72:9c:c7:09:54:1a:34:e3:7a:2b:
         a5:32:0d:56:99:a9:50:7f:ce:dd:3b:30:2c:8b:31:2a:48:de:
         2a:5e:9e:17:b9:b5:66:4a:8b:ac:4a:a3:77:1e:a8:f5:46:ea:
         7b:c8:39:b1:ab:cf:60:6f:e2:7b:36:a0:6e:84:ca:fb:95:03:
         a0:31:98:86:e7:b9:61:63:b0:fd:3a:ed:30:d2:f3:6c:a6:01:
         d9:36:cc:e9:e7:21:99:23:77:c7:7f:b6:83:41:10:4c:27:e7:
         b9:38:6e:da:50:a9:08:28:37:38:5a:32:aa:03:5d:8d:27:c4:
         4d:e4:3f:18:42:ae:1f:60:24:f2:c8:fb:81:d4:c3:58:af:d7:
         59:ad:4a:59:2b:32:a4:4e:13:db:6c:9b:74:02:92:22:6c:bc:
         e1:ca:87:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:00:29 2026 by rpki-client