Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
File:                     lOb0czAsajyJ33uJMsVryEHLX6w.mft (raw, json)
Hash identifier:          VLtPSGUJgG5DK9gGT79iwzMh4AEe6oox6yF4LyFD/RQ=
Subject key identifier:   5A:AC:FB:15:BB:6A:26:0A:E6:76:E8:89:2B:4F:EF:DD:9D:DE:4D:6F
Authority key identifier: 94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
Certificate issuer:       /CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Certificate serial:       01A1287A04D2D1C61B729A49C5858F265412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
Manifest number:          0E07
Signing time:             Sun 11 Oct 2026 01:00:47 +0000
Manifest this update:     Sun 11 Oct 2026 01:00:47 +0000
Manifest next update:     Mon 12 Oct 2026 01:00:47 +0000
Files and hashes:         1: MD2XknW8QXUXX5zjYirvLatDz1U.roa (hash: 57ZBGDriQ05ex2sQRZeUkWVivCM8pRal2i0bg/3JG3E=)
                          2: lOb0czAsajyJ33uJMsVryEHLX6w.crl (hash: Zpsd4l+wmFIf6eRCKeH/BYbWbw6OwmOEJ/NUEwKymqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:7a:04:d2:d1:c6:1b:72:9a:49:c5:85:8f:26:54:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
        Validity
            Not Before: Oct 11 01:00:47 2026 GMT
            Not After : Oct 12 01:00:47 2026 GMT
        Subject: CN=5aacfb15bb6a260ae676e8892b4fefdd9dde4d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:ef:72:3c:69:af:f3:ff:5d:94:88:5f:45:
                    f2:0c:1a:25:b4:cc:db:fd:a9:6d:e7:21:05:42:f8:
                    5c:57:cd:e2:9e:71:c1:39:05:ef:56:67:24:eb:9b:
                    a5:ea:0e:35:9d:ca:a1:f4:19:6b:0d:53:d1:03:3c:
                    0b:d6:39:a7:e6:f4:70:93:d2:b6:b3:2f:25:23:8c:
                    09:5f:c2:35:99:ac:4a:0f:be:fc:94:fa:9b:b5:6b:
                    80:aa:44:6d:7b:59:1e:e1:7e:31:7e:30:7b:7d:34:
                    b8:2a:10:15:6b:f7:9f:cd:3d:c2:bb:b2:a2:fe:23:
                    e4:c7:e0:e9:5e:19:da:7b:c7:82:c4:5f:83:17:c8:
                    a6:46:07:5f:34:d1:dc:ca:9a:cd:28:c4:0c:f6:2d:
                    44:07:c3:51:cd:24:2b:98:c8:61:9d:b9:83:93:d5:
                    ce:44:ee:91:0d:dd:5d:c0:bc:71:4a:94:d2:bb:b0:
                    6b:93:2c:22:0a:d4:98:5a:f5:60:4d:41:82:65:73:
                    4b:4b:a9:3e:15:7c:c7:39:ef:8d:62:9d:59:fe:47:
                    e8:ef:32:89:c8:79:0d:1c:45:1d:5e:8d:f1:5c:94:
                    74:f5:1d:c2:ee:c1:76:4b:7c:d2:3d:30:8b:7c:c3:
                    34:9a:e8:d8:8c:a2:a7:bc:08:bc:91:2f:f1:e2:b2:
                    67:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AC:FB:15:BB:6A:26:0A:E6:76:E8:89:2B:4F:EF:DD:9D:DE:4D:6F
            X509v3 Authority Key Identifier:
                keyid:94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:47:81:15:4e:72:2b:6d:13:12:b5:fa:4c:5b:7b:a9:18:81:
         cf:f8:fb:2b:da:f0:82:f4:20:4e:f2:95:f1:37:93:41:f5:eb:
         ba:6a:04:62:28:1a:76:a9:5b:3d:76:07:4c:65:ed:c3:c5:ba:
         b8:3a:d5:dc:53:e3:b8:c0:cc:a3:c4:de:e6:44:44:e7:db:8f:
         f5:95:da:48:f7:e6:eb:cf:ff:84:bb:dc:0d:08:96:83:31:f5:
         3c:77:66:cc:ef:26:6f:64:bd:99:4b:75:03:1c:52:85:48:11:
         99:a6:fc:6f:aa:f3:b3:2f:0c:72:0a:bc:ce:5f:65:c9:c2:a7:
         ef:7c:1f:b4:8e:b2:84:ae:5f:e3:ec:7f:f9:05:ab:10:32:8e:
         04:10:64:56:fd:15:6c:a4:48:b8:68:b3:89:28:3c:3a:b3:73:
         4d:c6:23:41:2a:2e:8f:60:36:1b:9c:5a:7d:88:da:91:df:62:
         3e:2a:9d:4c:bf:74:7d:56:aa:2f:36:7c:d8:87:20:dc:b6:68:
         d9:1f:51:77:64:1a:1d:98:e6:6f:c1:a5:35:7e:b1:3b:f8:72:
         ec:70:0b:c5:db:25:14:66:c1:7f:e7:7b:03:f5:1e:27:8d:9c:
         16:16:6c:6f:ce:e4:43:08:92:40:0c:84:ca:02:89:98:57:07:
         4c:0d:08:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 05:18:19 2026 by rpki-client