Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
File:                     0elpYhQkgMux04QRdx60_z45g58.mft (raw, json)
Hash identifier:          Jb2o63KL/0SiLYZvcfjrC9e7mvnR5VCLWEC5tyS89yY=
Subject key identifier:   D3:E3:40:05:F5:58:31:15:5C:08:74:22:8D:4F:89:5B:46:AE:7E:A3
Authority key identifier: D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
Certificate issuer:       /CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Certificate serial:       01A13D1307EFB0A369C5D67F57EE93D7AEF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
Manifest number:          0F04
Signing time:             Thu 15 Oct 2026 01:00:19 +0000
Manifest this update:     Thu 15 Oct 2026 01:00:19 +0000
Manifest next update:     Fri 16 Oct 2026 01:00:19 +0000
Files and hashes:         1: 0elpYhQkgMux04QRdx60_z45g58.crl (hash: yUiBGZMfxPFx5NHu6O4sZLD9QcV1kcfvK1dtGUGuOoU=)
                          2: cHvhPA5WiP2hlNkTCQAUdFz33aQ.roa (hash: kklG1LK9LOsPTVd1KnUPw3+fJn5429kCodQSEA85c8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:13:07:ef:b0:a3:69:c5:d6:7f:57:ee:93:d7:ae:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1e96962142480cbb1d38411771eb4ff3e39839f
        Validity
            Not Before: Oct 15 01:00:19 2026 GMT
            Not After : Oct 16 01:00:19 2026 GMT
        Subject: CN=d3e34005f55831155c0874228d4f895b46ae7ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4f:5e:4c:8b:ad:34:86:68:bc:59:ed:10:8f:
                    43:6c:3e:55:47:08:7b:ee:f5:d6:5f:60:e8:76:9c:
                    b9:20:07:33:87:1f:74:57:ab:9f:79:99:e7:a3:ac:
                    58:48:92:26:a9:eb:7b:90:23:7c:97:7b:16:e5:f8:
                    57:b9:3a:bd:ee:7a:a5:36:9f:5b:a1:19:e7:9d:da:
                    eb:e0:8d:1a:e2:4e:11:2a:c5:b6:ac:39:44:17:25:
                    2b:b2:a6:23:c5:02:60:f5:03:31:e9:01:dc:9f:6f:
                    c1:55:92:fc:bb:cf:b4:70:ff:95:fa:b1:20:04:20:
                    b6:da:a7:f9:9c:fd:89:ae:c0:c3:05:29:b5:01:3f:
                    b7:f5:96:50:53:78:c0:b6:26:54:a1:94:c6:c7:5c:
                    eb:3f:9b:5a:d6:99:27:27:f2:d7:35:6f:f0:33:18:
                    a9:0c:22:0a:83:24:59:5f:da:b9:a8:2b:9a:3a:81:
                    e4:76:2d:4f:49:b6:de:b7:d1:e8:9d:1b:d9:c6:65:
                    09:5d:12:8e:bc:02:20:f5:8c:2a:ea:53:60:9d:68:
                    5a:0d:c8:38:69:4f:ff:3d:e1:6e:67:de:72:59:f0:
                    ba:6b:44:b3:a9:00:a8:fe:87:7b:55:1c:3f:d1:55:
                    7f:f2:f3:35:b8:dc:4f:4d:ea:9e:b5:7c:e8:74:93:
                    bc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E3:40:05:F5:58:31:15:5C:08:74:22:8D:4F:89:5B:46:AE:7E:A3
            X509v3 Authority Key Identifier:
                keyid:D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:96:50:ac:3f:60:5b:7e:99:ab:fa:07:5f:7a:23:af:68:29:
         3d:5b:99:d9:cd:21:36:f1:3a:8e:d0:24:21:5e:f5:bb:55:0c:
         41:35:7f:88:ac:01:f8:26:de:6e:f6:ff:4a:fc:b5:d7:af:56:
         57:a4:39:87:24:23:d1:ac:c5:6b:45:36:fb:79:a2:57:10:73:
         32:d5:98:36:cd:72:89:c7:dc:b1:79:5e:89:42:3f:c9:81:30:
         0c:2f:ab:bb:10:a6:fd:29:85:10:b7:47:44:4b:a6:a7:db:8d:
         ce:91:da:c2:f2:63:6b:09:c4:58:4a:1a:52:44:94:2f:46:ae:
         44:bf:b9:4e:f5:0a:f2:3d:27:37:1b:c0:73:04:14:21:a3:04:
         f4:71:ed:a0:a2:28:b6:ec:01:d5:01:68:21:fc:26:9f:80:3b:
         e9:42:d0:82:b6:d2:e7:1d:92:e8:a4:ff:4e:f3:07:97:be:61:
         00:63:5e:a5:92:62:67:e4:5e:c9:ff:e1:7e:f6:be:5e:72:ef:
         c6:e7:c4:2a:49:87:c9:3f:67:9b:03:8f:d5:cc:11:cb:14:f2:
         09:f8:40:6f:e7:db:17:52:ec:48:05:fc:ce:d3:8a:ec:de:7a:
         d3:8a:d3:44:00:e5:ba:07:10:e9:1f:3a:8e:51:c8:58:6d:f1:
         10:01:3e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:02:27 2026 by rpki-client