Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
File:                     C0BTBtBWGjedd4lHK3j7IraHCpw.mft (raw, json)
Hash identifier:          PLOM/rJenPyZYEF0QAvRv58JvXeJiVBiXbYLkfUV8kQ=
Subject key identifier:   DB:67:4D:B9:23:DC:4D:59:51:CA:2E:98:9C:93:63:55:1C:28:40:EC
Authority key identifier: 0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
Certificate issuer:       /CN=0b405306d0561a379d7789472b78fb22b6870a9c
Certificate serial:       01A1250C69C91E5E5575EE3DF615633D538B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
Manifest number:          0265
Signing time:             Sat 10 Oct 2026 09:02:12 +0000
Manifest this update:     Sat 10 Oct 2026 09:02:12 +0000
Manifest next update:     Sun 11 Oct 2026 09:02:12 +0000
Files and hashes:         1: C0BTBtBWGjedd4lHK3j7IraHCpw.crl (hash: QbchNhAnXCMakOkFn20gf+AlP0DDykggHNkPaKEXGy8=)
                          2: s-OrRs_NYP_NP52qUqP6fghVc0I.roa (hash: o9FcxytVD/Gn0DANPhKF76P+ooE5vX+ccvZ9870ZhzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 09:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:0c:69:c9:1e:5e:55:75:ee:3d:f6:15:63:3d:53:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b405306d0561a379d7789472b78fb22b6870a9c
        Validity
            Not Before: Oct 10 09:02:12 2026 GMT
            Not After : Oct 11 09:02:12 2026 GMT
        Subject: CN=db674db923dc4d5951ca2e989c9363551c2840ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1a:e5:06:87:73:64:e9:81:47:4b:dd:7e:aa:
                    44:ce:92:e9:c6:09:b8:b3:e9:c3:41:9f:a9:19:9f:
                    92:bf:21:15:04:f9:81:61:a5:30:bf:a2:a3:f7:9c:
                    c2:28:f3:5c:4b:35:5f:28:56:6c:df:11:22:ca:b9:
                    1d:95:2e:3f:5d:40:61:c8:a1:44:3c:2e:f3:8a:14:
                    a8:90:dc:ce:c3:72:5d:9c:9b:e9:80:ce:5f:c5:a1:
                    b4:9a:68:9f:68:f3:76:5f:8a:3f:18:bb:3a:89:e1:
                    33:1a:ff:37:bf:df:77:dc:00:96:9d:c9:2f:06:3b:
                    e2:0c:e2:aa:58:41:a1:87:db:b8:98:ac:ac:83:a1:
                    87:b8:c4:9b:1a:37:e0:df:be:0a:28:2c:b4:db:02:
                    d2:8f:41:20:62:f6:d1:ab:ca:bf:2a:5a:97:90:4e:
                    c8:a1:8e:8b:a7:ab:e8:a5:48:f0:49:b3:f9:08:3a:
                    dc:15:2d:aa:0d:7b:17:c7:21:1f:f0:bf:80:ad:eb:
                    d6:20:51:91:9f:d4:2a:a9:09:1e:2f:ff:0f:9b:12:
                    32:70:06:bc:89:c9:4b:7a:92:fd:5c:3c:9e:6b:38:
                    71:ce:79:a3:b5:1d:19:a1:a7:05:45:2c:f4:c0:97:
                    63:8f:2b:3a:a7:ef:dd:11:73:14:f7:4e:85:3d:c2:
                    d7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:67:4D:B9:23:DC:4D:59:51:CA:2E:98:9C:93:63:55:1C:28:40:EC
            X509v3 Authority Key Identifier:
                keyid:0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:04:de:d0:38:82:95:f0:48:da:f5:18:38:64:48:4a:92:70:
         a0:02:9d:89:63:01:e9:ac:f5:e8:5b:ac:14:3e:99:01:72:2e:
         f3:ce:85:ac:43:a6:27:41:f0:7c:cb:95:80:73:31:53:ff:8d:
         5c:bf:33:33:e7:98:7a:76:fb:e6:18:7e:c7:62:29:43:5b:0b:
         24:d3:98:66:29:48:e0:e5:3e:69:23:b5:76:d5:69:2d:82:fc:
         d9:6d:0a:ec:01:20:a6:70:07:62:9c:3c:1f:e3:83:e3:cc:53:
         f3:11:15:38:75:b9:ec:6e:25:33:dc:f5:09:9d:bd:1f:4c:45:
         3e:8d:8c:cb:1b:fd:aa:ad:ce:bb:ba:97:3a:bc:45:8f:09:69:
         c4:b8:76:be:77:34:84:67:ac:0e:a4:4f:08:74:67:d8:9b:cc:
         a8:2e:b3:df:ed:49:7d:a8:85:0f:67:f4:cb:2d:2f:6f:ae:8c:
         dc:90:7a:60:77:47:b8:ff:1a:a1:c2:a8:9e:81:83:89:7f:be:
         3b:31:e9:65:c6:16:11:23:db:01:8c:27:a4:92:f6:0f:ff:a2:
         83:a3:64:1f:ae:a2:97:2d:07:85:f2:58:ca:c3:77:9c:69:bb:
         1f:23:f4:12:b2:38:95:9a:98:e1:b9:0a:4e:51:24:a1:38:77:
         81:e3:25:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:09:29 2026 by rpki-client