Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
File:                     OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft (raw, json)
Hash identifier:          5O/aOes56dPfmX07vrRRfKNFWXvGN4EvhZWuIveLv/g=
Subject key identifier:   7B:0E:52:D3:A4:40:A2:4C:9E:43:59:02:C4:BE:D8:AC:2C:32:F4:4B
Authority key identifier: 39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
Certificate issuer:       /CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Certificate serial:       01A106937DD7671C74F9B23E127786D25915
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
Manifest number:          1102
Signing time:             Sun 04 Oct 2026 11:01:31 +0000
Manifest this update:     Sun 04 Oct 2026 11:01:31 +0000
Manifest next update:     Mon 05 Oct 2026 11:01:31 +0000
Files and hashes:         1: OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl (hash: llm1NHffMCpzS8tB/7J3W1TVy90XlV7zEtAL9n3/u54=)
                          2: U_9ae0dR5bvWF_m8_-n5IQjoXho.roa (hash: YhkIXrg11/s9MnoBurHE21hW+DopIbiFzMqganoNxbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 11:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:93:7d:d7:67:1c:74:f9:b2:3e:12:77:86:d2:59:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391e994a95012d92fb51a28c8a650ed9f97737b8
        Validity
            Not Before: Oct  4 11:01:31 2026 GMT
            Not After : Oct  5 11:01:31 2026 GMT
        Subject: CN=7b0e52d3a440a24c9e435902c4bed8ac2c32f44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e8:0d:7e:52:d5:f7:09:27:29:07:1d:9d:cc:
                    fd:fd:a4:5e:ac:8f:b4:b9:da:0a:c7:39:90:4a:72:
                    fe:c0:92:71:1e:f9:4b:80:62:09:ff:3e:67:df:7f:
                    64:d5:7a:31:81:10:2d:9b:48:05:7a:97:1c:b4:9d:
                    32:1d:4a:0a:74:84:7e:94:49:d3:e1:78:2e:8d:c0:
                    9e:95:c4:db:28:da:29:58:91:b1:32:e8:fa:af:c9:
                    fa:c4:7b:c0:bb:1b:76:e5:7c:2b:ad:c5:09:6f:a5:
                    a0:7b:37:b6:c0:8d:d2:1d:62:1d:c0:a0:ab:ed:a0:
                    61:c8:70:1f:67:cf:19:ec:3d:f5:c2:54:75:89:25:
                    08:5d:35:1b:3f:16:e3:db:1d:47:f5:95:a4:59:1f:
                    ee:d5:69:d4:b6:4f:46:b8:44:4c:07:45:b9:a9:03:
                    85:76:eb:bf:45:4a:a6:fd:33:17:0b:d1:5b:8a:62:
                    b3:41:43:3f:c5:1e:60:e3:bb:de:c8:09:70:a4:e1:
                    71:ee:8c:1a:e1:c0:25:dd:20:3d:eb:c1:93:48:b0:
                    65:0f:3c:66:f8:8a:f0:3d:e2:78:96:c6:af:e5:fb:
                    df:c8:e0:17:ff:eb:2e:fd:89:bc:3f:d3:fb:bf:70:
                    9a:14:98:2f:46:dc:09:6d:eb:b5:34:5b:27:03:b9:
                    e8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0E:52:D3:A4:40:A2:4C:9E:43:59:02:C4:BE:D8:AC:2C:32:F4:4B
            X509v3 Authority Key Identifier:
                keyid:39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:01:4a:b5:3c:53:30:8c:c0:f0:f9:a3:df:3a:d8:a8:d5:a2:
         31:8b:bb:c5:25:08:4b:bc:88:9a:23:7d:6b:9b:d7:1c:56:bc:
         54:00:0a:83:4c:7c:52:ea:74:5a:01:d1:88:95:d0:e9:ce:4f:
         06:48:87:5a:66:56:c3:ca:81:3e:16:34:8f:78:65:26:c6:47:
         80:f5:4f:30:9e:5b:4e:b6:c5:69:ec:7c:3f:6d:3c:7a:15:9b:
         0c:36:b0:96:00:69:97:23:53:03:92:24:d6:8d:94:1a:09:08:
         dd:6b:a8:5d:fe:bd:11:3c:02:c7:85:a7:55:75:2b:e9:a9:dc:
         e3:7d:15:71:11:2d:e2:56:a7:d5:d4:8e:f0:96:2f:98:14:0f:
         bb:08:1a:ef:d1:36:76:f3:64:93:5e:97:1f:c9:21:c6:7b:d6:
         62:b8:28:b7:67:aa:9a:70:4f:fb:50:6b:23:9e:ac:6b:3f:5e:
         cc:1e:73:ce:51:e2:0a:2e:79:13:17:29:d4:a7:c1:26:37:56:
         fd:c8:c8:be:73:f9:0a:c5:bc:81:b8:3f:a2:1a:89:d0:8f:7f:
         3d:e4:b1:2d:98:16:d9:88:ca:5d:06:be:92:99:e1:d4:c8:d9:
         19:a0:ab:8a:2b:47:90:81:f4:14:d7:c3:28:49:df:07:63:e7:
         0d:e5:c0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:18:09 2026 by rpki-client