Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
File:                     oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft (raw, json)
Hash identifier:          BQLLCnCsNfIbTvEbsGlYbaBBvWkiJNAu7Zbr+CYCgJE=
Subject key identifier:   0E:10:4B:DF:58:13:8F:85:36:96:B6:76:7F:78:89:07:50:69:E3:84
Authority key identifier: A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77
Certificate issuer:       /CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
Certificate serial:       01A0DC4D809173C0F2BDB12FD5FB0424069D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
Manifest number:          0223
Signing time:             Sat 26 Sep 2026 06:01:01 +0000
Manifest this update:     Sat 26 Sep 2026 06:01:01 +0000
Manifest next update:     Sun 27 Sep 2026 06:01:01 +0000
Files and hashes:         1: WyQBbpbR1AvAKhTsL71x6qgch7U.asa (hash: 043dlMMNEhoWphFwOdB6ptcTMcRQS915TTU2W0PNpeI=)
                          2: oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl (hash: y9XleM+jpm328rI2zq/l+4kEASgJ38Y4sD1g/autux0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:4d:80:91:73:c0:f2:bd:b1:2f:d5:fb:04:24:06:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
        Validity
            Not Before: Sep 26 06:01:01 2026 GMT
            Not After : Sep 27 06:01:01 2026 GMT
        Subject: CN=0e104bdf58138f853696b6767f7889075069e384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:1f:d9:e2:3f:2c:7c:41:77:be:11:8d:95:
                    31:b5:8f:e9:e2:6a:ef:a2:72:6b:e2:c3:9b:4a:de:
                    98:df:36:5d:4f:29:e7:44:fd:c2:ed:73:27:b3:75:
                    05:91:e8:ed:7c:8e:10:2c:c1:3b:f9:2c:e5:ad:04:
                    19:50:2a:42:95:b4:45:d9:b7:ee:10:b5:2b:72:3f:
                    4b:a7:c1:b4:59:c2:1a:ed:10:00:cc:c1:ce:48:ec:
                    0d:90:0c:1d:3e:9f:28:c3:ff:3b:7e:45:0a:53:89:
                    de:ef:85:0a:9b:c4:86:98:fd:e9:0c:c0:e6:43:c6:
                    e6:2e:94:12:6a:75:df:57:8e:a2:e4:74:a3:e9:6a:
                    45:ea:63:1e:9a:ba:10:86:98:2f:dc:75:0f:af:9c:
                    cd:ff:c8:29:2b:0f:7d:7a:19:ef:13:b2:8d:42:c7:
                    00:ba:cf:32:f0:ed:8a:75:31:28:de:5c:8e:d7:60:
                    19:90:e1:a8:1c:53:d1:2c:82:9c:4d:d4:80:ad:dd:
                    fd:2b:18:43:11:40:f7:ea:f9:48:d0:71:93:6c:87:
                    92:8c:bb:43:5e:5c:15:26:b9:0f:1f:aa:12:1e:da:
                    bf:15:30:b2:94:86:9a:95:7f:d8:af:d6:c1:f9:45:
                    2c:a1:71:23:19:d8:32:c9:f0:43:58:3c:61:a3:40:
                    23:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:10:4B:DF:58:13:8F:85:36:96:B6:76:7F:78:89:07:50:69:E3:84
            X509v3 Authority Key Identifier:
                keyid:A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:da:30:1d:36:4f:70:97:2d:a6:17:a4:b3:8e:1d:18:4f:48:
         07:7b:99:d1:f5:9c:ae:16:c0:0e:3d:4a:d3:78:d0:a1:85:a6:
         6b:21:af:d5:cf:45:ef:0a:53:40:c2:32:48:9f:70:eb:41:7f:
         a7:d5:ae:e1:78:77:e5:eb:c0:85:ca:a9:19:4c:2d:7b:e5:41:
         88:2a:36:51:be:cb:b9:ed:69:0b:f8:0b:4f:f3:c7:29:32:19:
         22:3b:9d:1a:ff:71:53:87:1f:b6:d7:88:98:71:05:99:66:a0:
         19:03:20:6a:67:66:03:8b:44:21:44:c2:ab:cd:54:00:17:f9:
         dc:e9:14:f2:de:c8:21:19:d8:7c:21:5b:d4:85:51:0d:59:b3:
         92:28:56:0b:bc:b5:ef:aa:03:8e:90:a9:36:9f:e3:ac:21:11:
         0e:ef:a8:a3:97:d6:59:59:1c:7a:f4:e9:fd:41:27:db:08:61:
         03:0e:2a:e3:2d:a2:58:70:bc:a8:71:85:9f:44:51:3d:d4:e7:
         e0:4f:76:9c:5a:80:2a:a6:93:f9:6c:ac:bc:dd:06:f1:d3:ac:
         12:e5:5b:83:86:c6:e6:60:ad:d8:ec:e7:9d:27:09:00:d7:b9:
         ba:77:a2:10:53:fb:f9:37:f1:b8:d8:75:85:5c:95:80:8c:01:
         a3:f1:3c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:58:24 2026 by rpki-client