Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
File:                     sP8nOo_iEgkLoct4xjMfgOeMMCU.mft (raw, json)
Hash identifier:          nTuB9xeyNLlmJ5b+va6RFbrIpsxw6b3esdz4H9b6Zas=
Subject key identifier:   B6:46:EA:1F:09:8B:A1:29:EE:4F:97:73:E0:10:0E:DA:6C:EE:74:1D
Authority key identifier: B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
Certificate issuer:       /CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Certificate serial:       01A1314631204FCE2456CC8DC1E5200AEFC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
Manifest number:          046F
Signing time:             Mon 12 Oct 2026 18:00:46 +0000
Manifest this update:     Mon 12 Oct 2026 18:00:46 +0000
Manifest next update:     Tue 13 Oct 2026 18:00:46 +0000
Files and hashes:         1: Zv79TTxsf83wSa-br66v_0Kz3P0.roa (hash: PshdlsPP60SM0Q8DKrvKNK5rgHz5shKnndSXnKZ2nf8=)
                          2: sP8nOo_iEgkLoct4xjMfgOeMMCU.crl (hash: 72rWtE/QOcLqU40xkEQuRnSrEoMtSVjv00iyyc0tX0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:46:31:20:4f:ce:24:56:cc:8d:c1:e5:20:0a:ef:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
        Validity
            Not Before: Oct 12 18:00:46 2026 GMT
            Not After : Oct 13 18:00:46 2026 GMT
        Subject: CN=b646ea1f098ba129ee4f9773e0100eda6cee741d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0e:b6:c8:3b:57:3c:9d:01:18:a4:6c:5a:f0:
                    68:50:d5:86:4b:98:1a:cb:4d:aa:be:bb:c0:f2:ab:
                    02:9d:61:2b:a3:74:84:a8:36:34:06:7e:1c:34:05:
                    8e:80:66:cc:8c:4e:cf:62:66:d1:e2:0c:c8:e9:ae:
                    af:08:d9:97:b4:84:4b:a0:19:29:2f:b4:84:30:75:
                    ed:83:aa:e1:75:60:60:f6:8f:b6:1b:84:4a:93:0b:
                    49:35:7d:34:f1:44:df:5f:f4:3e:b7:7f:d9:cc:66:
                    2b:da:76:3b:de:06:29:6f:ad:0a:01:d5:8b:73:37:
                    17:e9:10:d4:61:2c:04:ba:ed:a0:f2:56:53:34:f4:
                    35:d2:e9:48:9d:eb:75:7d:63:24:8d:c5:e1:a8:8e:
                    7a:79:62:d4:32:d6:ac:d4:af:cc:b8:6e:f2:0b:f6:
                    8d:d5:47:93:ee:86:b3:8c:06:c5:37:97:b3:af:74:
                    3b:fd:9f:b3:87:36:f7:60:d7:5b:d6:a1:b8:12:54:
                    02:91:82:df:8e:51:4c:bb:63:df:fa:d9:06:12:95:
                    d2:a5:01:ec:7e:9b:fa:e4:c6:91:88:92:40:58:d7:
                    11:8b:22:33:10:93:55:e6:75:c1:bd:6a:79:c2:f1:
                    5a:23:cb:2c:68:dc:00:5e:1b:4b:c7:14:97:c8:23:
                    2f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:46:EA:1F:09:8B:A1:29:EE:4F:97:73:E0:10:0E:DA:6C:EE:74:1D
            X509v3 Authority Key Identifier:
                keyid:B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:bf:a3:f5:55:c3:07:25:a6:ba:6a:1a:8b:44:34:1e:14:85:
         8b:88:1a:c0:ac:ba:26:8b:f1:1f:11:88:5b:a3:2e:f4:b0:ac:
         3f:3d:58:d7:1f:29:bc:2d:57:42:0f:ae:92:6f:b8:73:1f:6f:
         68:be:ac:19:fc:c5:f6:72:17:8a:91:16:c3:28:b3:57:08:71:
         c6:54:4b:91:5c:4c:20:06:3c:30:1e:55:70:f4:91:65:fc:a3:
         43:97:a6:af:fa:57:52:e4:99:1b:00:d1:47:cf:12:af:8b:64:
         41:87:74:c6:c7:a7:64:ce:75:6c:c6:1c:aa:68:93:4e:05:c5:
         09:58:eb:44:8d:aa:59:e0:02:54:75:3c:54:01:16:74:60:3b:
         03:94:05:76:11:0f:df:2e:a4:e3:c2:c0:41:6d:86:1b:35:66:
         95:b5:66:90:58:53:f8:15:47:cf:2f:e4:ec:ea:0c:21:f9:ea:
         b8:13:08:f8:9e:d4:96:07:13:3b:1e:b4:c6:bd:71:e1:76:7b:
         2e:98:df:a6:cc:0e:75:d6:3f:ea:63:27:e2:30:38:69:cd:4d:
         f3:ac:71:eb:f2:69:87:d4:3e:7a:fc:b7:1d:cf:eb:db:c9:80:
         ec:8f:c7:34:99:fd:f8:08:85:d7:81:a2:f3:13:32:5f:77:2f:
         1a:db:84:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:31:00 2026 by rpki-client