Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
File:                     oet7cZVO3_yjWEyF-gj7EiQv7NU.mft (raw, json)
Hash identifier:          B/6sw949zpnlpg41SE06McjXura4iMnd0gdClNO7xPo=
Subject key identifier:   E1:BD:09:5B:A0:DF:92:6A:85:6C:19:B5:14:60:89:87:81:2E:E9:73
Authority key identifier: A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5
Certificate issuer:       /CN=a1eb7b71954edffca3584c85fa08fb12242fecd5
Certificate serial:       01A1431618D5A294A7DF28696EF363C95E19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
Manifest number:          0378
Signing time:             Fri 16 Oct 2026 05:01:23 +0000
Manifest this update:     Fri 16 Oct 2026 05:01:23 +0000
Manifest next update:     Sat 17 Oct 2026 05:01:23 +0000
Files and hashes:         1: lE1Kxf9PJiSztZNrzwwBPAVYUcU.roa (hash: jNZxU5D1EKLny/wqaNa70XGzWgiNnFCUNtLqg86RKFE=)
                          2: oet7cZVO3_yjWEyF-gj7EiQv7NU.crl (hash: UQg86zyQyB3arjkyHPILWIPA54Nn7Xm6w4jmWaAhdm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:43:16:18:d5:a2:94:a7:df:28:69:6e:f3:63:c9:5e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1eb7b71954edffca3584c85fa08fb12242fecd5
        Validity
            Not Before: Oct 16 05:01:23 2026 GMT
            Not After : Oct 17 05:01:23 2026 GMT
        Subject: CN=e1bd095ba0df926a856c19b514608987812ee973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b3:99:4f:6d:ab:61:08:1a:9a:f3:eb:7f:51:
                    02:c5:e0:11:18:1e:fe:c6:bc:06:c3:e7:f0:8d:46:
                    19:30:61:4f:a7:d6:cb:fa:5a:77:18:ca:f9:28:4a:
                    d9:12:e6:a5:11:d5:99:01:7a:62:8a:4a:8e:bc:5c:
                    d3:2e:d0:2b:b8:f8:f1:62:9f:44:1e:81:ab:0c:42:
                    df:c2:35:fd:8c:d5:e8:c0:44:55:3c:09:17:e3:40:
                    a0:af:d4:50:ad:45:0d:46:f1:2c:7e:1c:f1:cc:fb:
                    e0:96:f8:dc:6c:c6:3a:c6:e3:14:93:b4:19:bb:2a:
                    0f:71:63:b6:33:f6:52:41:c5:58:2e:e0:75:7b:11:
                    76:1c:85:08:4a:63:d0:8e:1e:d3:77:4a:33:29:f2:
                    17:da:ac:84:88:a5:d1:31:d8:9e:b6:e8:44:19:40:
                    fa:33:ab:60:ed:83:ce:15:8c:ab:8e:9a:78:db:8b:
                    62:dd:72:d7:4b:65:48:87:2a:7b:46:2b:50:f2:35:
                    ee:2f:10:2d:b3:4f:05:d6:b1:b8:36:2e:60:48:9b:
                    dd:bf:7d:83:49:12:97:93:c3:61:2c:04:00:8d:d0:
                    f4:93:15:91:32:e0:b0:dd:5e:93:7c:9d:f7:03:ed:
                    3d:25:5d:11:be:8f:af:87:6a:4c:d3:35:9d:6b:4d:
                    ea:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BD:09:5B:A0:DF:92:6A:85:6C:19:B5:14:60:89:87:81:2E:E9:73
            X509v3 Authority Key Identifier:
                keyid:A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:6d:6b:86:38:1e:08:8e:7d:5e:6c:bd:d7:f5:15:c6:56:bc:
         bb:86:84:94:9e:90:e4:d2:88:39:45:5d:3f:e4:7d:7f:ae:0f:
         cc:0d:a5:b5:3d:08:d6:38:21:14:81:eb:d4:8d:c7:b8:36:b5:
         b8:9f:05:86:ee:92:47:85:a2:6f:06:ca:27:6b:f9:1e:a7:af:
         ee:dc:be:e7:65:8e:a3:92:4a:00:46:7f:9b:1a:06:fb:66:05:
         16:d2:20:6a:bc:21:81:9e:21:91:3b:60:92:d0:cb:15:1c:3c:
         f5:6c:ad:66:6e:ef:1d:f4:f9:4f:f7:da:5c:d8:f5:d2:af:92:
         03:d6:b2:b9:51:15:75:d8:7b:66:4b:68:ea:6f:70:98:80:83:
         96:2f:cf:27:a4:90:86:b8:f7:26:b1:ec:2b:e6:f7:22:3b:71:
         22:a1:2d:e0:79:d1:9f:08:d5:f3:5b:d2:5b:77:f9:62:3e:65:
         06:e1:b5:81:0c:3f:71:20:64:0c:b6:13:43:d9:4b:f1:a6:22:
         1d:2c:c5:19:05:d0:06:fa:ae:92:b8:a3:6c:f1:aa:fa:e4:75:
         c6:a9:5b:a4:aa:ef:99:cc:27:aa:fe:35:1b:ae:26:21:f6:b9:
         c7:59:7f:d3:06:e5:94:a5:77:a0:03:11:99:ce:60:5c:22:b1:
         25:90:e8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 08:10:30 2026 by rpki-client