Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
File:                     0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft (raw, json)
Hash identifier:          U7hYRfGbNV1g1lTcyEFQ5WAcs0NARoDGJ/tvrq4OJf4=
Subject key identifier:   D3:66:69:39:D7:C6:75:93:B8:CB:94:BC:05:9E:3B:87:4A:9A:34:7E
Authority key identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
Certificate issuer:       /CN=d03046d16cfc391b028b88743773ce005cf97b1d
Certificate serial:       01A0C2C449056F0BBFC92B50DE7577F6F092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
Manifest number:          1A63
Signing time:             Mon 21 Sep 2026 07:00:38 +0000
Manifest this update:     Mon 21 Sep 2026 07:00:38 +0000
Manifest next update:     Tue 22 Sep 2026 07:00:38 +0000
Files and hashes:         1: 0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl (hash: rMxKUcnkkgxiJYC+D6Hc9Mh9R5AWsJF13Aynl74/jBg=)
                          2: 6sIpurMyf7U7cVjfDtGf65yWDwA.roa (hash: cZnmgrrB6eUg5rHF2CdbgLHSyI5RnOe61koYU+5dDnA=)
                          3: NZSg7hN5dj36ijrS0iZ916AKsoM.roa (hash: VS2r3z5DpXErRLlghndtWldrsOM22Uv0cqCOqDvPp5M=)
                          4: _EXzGZ6mIohQTkOQklm2HctGpf0.roa (hash: d5WVsZmAqKJyYsnjGKZS29R+h6TCBV39mM8GYttnuxM=)
                          5: aTt1lDOQ__4_BOzrJWRmWq2_g_I.roa (hash: v57HfwpPj2JAqIcZD1AamnQQx8/Wn9ebUoCosyKqGs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 07:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:c4:49:05:6f:0b:bf:c9:2b:50:de:75:77:f6:f0:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03046d16cfc391b028b88743773ce005cf97b1d
        Validity
            Not Before: Sep 21 07:00:38 2026 GMT
            Not After : Sep 22 07:00:38 2026 GMT
        Subject: CN=d3666939d7c67593b8cb94bc059e3b874a9a347e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:11:87:e1:3f:85:85:be:90:16:5f:c8:0a:
                    d4:7f:8a:db:d6:3f:f6:ef:b4:83:70:88:8b:0e:06:
                    bf:af:3c:c0:96:01:f5:03:1d:16:bc:f1:e5:37:70:
                    04:93:75:47:15:1f:5a:04:ec:56:62:87:37:fc:06:
                    cd:41:73:11:92:e4:a8:70:92:c6:db:41:9d:d7:ff:
                    0f:ae:a5:3c:1b:73:d2:67:4c:94:38:79:40:1a:f0:
                    a9:55:cd:b2:df:d3:08:76:e5:96:e0:de:b6:53:4b:
                    96:9f:1c:27:af:e0:d7:79:df:87:2d:01:8d:82:ac:
                    8c:24:f7:3b:77:6c:e2:cb:82:eb:08:fc:f0:eb:ce:
                    e2:fb:b9:5f:6e:4c:15:9e:9d:18:ed:1e:10:c2:86:
                    a7:21:a3:5a:b8:2c:5b:43:37:9b:8f:ba:3f:cc:be:
                    5b:c1:a9:c7:1c:fa:49:b7:6e:83:9b:0d:e6:6b:8f:
                    51:b6:2a:6c:b3:26:ab:41:0e:0d:5f:a6:a9:f8:40:
                    88:9e:45:4e:e5:ec:ba:85:1a:92:22:33:5d:76:dd:
                    bd:58:5d:0d:fc:c3:91:4f:75:32:92:0d:8d:91:1c:
                    6f:50:08:12:1a:4e:48:7e:fe:0b:47:d5:4a:02:a9:
                    4d:cf:56:d8:1d:51:8e:de:c2:27:ab:ca:01:c4:00:
                    1e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:66:69:39:D7:C6:75:93:B8:CB:94:BC:05:9E:3B:87:4A:9A:34:7E
            X509v3 Authority Key Identifier:
                keyid:D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:1b:54:75:1c:82:f0:a2:76:b9:13:e5:fb:ee:4a:43:83:05:
         f7:3d:f8:8d:d6:93:03:b9:cb:fe:fe:34:22:1d:1b:5e:28:40:
         88:b2:2d:4f:e2:cb:bb:26:e6:aa:b2:13:16:06:5f:5f:ae:dd:
         fd:31:db:c3:2a:2b:55:f5:65:d8:44:ef:0d:b5:c9:4c:51:9a:
         32:f8:2c:06:b3:be:79:fd:28:95:20:43:92:c3:04:3a:46:c6:
         fd:d0:00:41:3f:53:d5:b2:a2:e7:c5:0e:fa:17:5f:7b:01:c2:
         94:4f:61:f0:bd:97:d2:0a:a5:5e:8d:1e:dd:d8:07:0e:3a:b2:
         d3:ce:89:c7:6f:ef:d0:3e:19:d8:7e:d4:f3:66:a1:a3:be:47:
         89:25:2d:b4:9d:c9:e3:1a:e3:4d:ab:5e:ff:7e:21:cf:89:5f:
         de:12:3d:46:10:f4:7e:7c:c4:b5:2f:cb:f1:48:7f:74:08:90:
         39:61:04:39:67:26:fe:2a:8e:8b:b2:05:a6:88:d7:7d:e2:33:
         57:4b:46:56:57:e3:b9:4d:5e:09:c8:dd:01:a2:c2:17:86:93:
         00:8a:a4:aa:a7:e3:c8:f4:b5:e1:80:bd:96:e7:1c:63:a4:70:
         73:b5:98:64:e5:64:69:96:06:13:b1:87:57:86:bc:35:cd:1e:
         e7:d9:6d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:17:40 2026 by rpki-client