Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft
File:                     7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft (raw, json)
Hash identifier:          sGyU0SmHH1wGwkZ5fGPP+3L3oZK1ctKnXGg6Dhem3GQ=
Subject key identifier:   8C:F4:AB:4B:65:E2:D5:33:00:CB:AD:E2:5A:59:A3:EF:0D:E2:17:BB
Authority key identifier: EC:E1:B7:BD:C9:F5:70:EC:58:35:99:95:DE:A4:F7:39:FC:FC:06:52
Certificate issuer:       /CN=ece1b7bdc9f570ec58359995dea4f739fcfc0652
Certificate serial:       01A0DFF34330AEFF251C94BE2BC33C020F1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft
Manifest number:          01A3
Signing time:             Sat 26 Sep 2026 23:00:56 +0000
Manifest this update:     Sat 26 Sep 2026 23:00:56 +0000
Manifest next update:     Sun 27 Sep 2026 23:00:56 +0000
Files and hashes:         1: 7OG3vcn1cOxYNZmV3qT3Ofz8BlI.crl (hash: MvWKFRwpm9OHQD1RLPN4K9rWAbVS/ReKFjjmO2dZ/rU=)
                          2: PaSCSViEAOmnkxIlKs2oejLqNDc.roa (hash: C95nSsqwtFhFODAGdM0T/xTl1c5zR83Twu0Y8s23u5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:f3:43:30:ae:ff:25:1c:94:be:2b:c3:3c:02:0f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ece1b7bdc9f570ec58359995dea4f739fcfc0652
        Validity
            Not Before: Sep 26 23:00:56 2026 GMT
            Not After : Sep 27 23:00:56 2026 GMT
        Subject: CN=8cf4ab4b65e2d53300cbade25a59a3ef0de217bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:40:b2:a9:c2:a9:c9:38:e7:5f:02:e3:a3:0f:
                    8d:93:4b:bd:13:f6:df:28:29:1a:c2:a3:fd:25:dc:
                    94:bc:8d:ab:29:b9:07:62:be:71:61:c2:e1:5a:93:
                    a5:77:76:ce:9f:eb:dc:58:15:60:cd:6a:dc:9d:5b:
                    2e:67:b0:b8:d4:67:6a:0b:5e:21:28:ee:0d:cb:df:
                    9d:70:7c:1f:14:91:d6:fb:ad:cb:6c:92:61:93:08:
                    77:16:0b:73:8c:48:40:ca:aa:16:6b:c4:a2:14:1a:
                    ee:f8:85:04:40:90:9a:a3:aa:e8:cc:3d:5b:4a:6b:
                    43:8c:48:97:cf:53:91:0f:ab:0c:cf:ff:03:77:a9:
                    38:8d:92:15:64:d5:08:5a:98:39:a9:98:39:c8:58:
                    c7:e1:60:23:27:2b:27:ce:e5:ff:fc:47:0e:be:96:
                    71:f0:f1:6a:2e:c3:61:8b:c9:e1:52:69:42:ec:3e:
                    d0:2b:4a:0d:cc:d2:58:a4:83:32:e9:cb:3c:6a:76:
                    3c:3a:4b:19:b3:f9:57:53:f1:7e:05:45:41:57:0b:
                    8b:00:14:53:4f:aa:07:7e:ab:fe:83:f7:58:fb:64:
                    3d:5a:52:94:f1:82:ef:7b:39:c0:64:d4:1c:2c:26:
                    c1:a7:aa:8f:9d:ec:68:ad:66:0f:b5:89:c8:b1:50:
                    eb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F4:AB:4B:65:E2:D5:33:00:CB:AD:E2:5A:59:A3:EF:0D:E2:17:BB
            X509v3 Authority Key Identifier:
                keyid:EC:E1:B7:BD:C9:F5:70:EC:58:35:99:95:DE:A4:F7:39:FC:FC:06:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:03:2d:84:29:9c:6d:24:15:f9:c4:d3:20:0f:8f:31:b8:a4:
         ad:e8:8e:cf:0a:28:5d:71:d6:16:3b:ee:d5:85:96:e4:7e:e3:
         1c:58:a6:4d:99:ff:92:69:d1:5e:ef:ac:86:bb:41:6e:f5:30:
         ce:ff:d6:05:71:35:62:09:6f:0b:fb:b5:a3:78:36:ce:1c:63:
         10:40:22:0b:11:8a:e1:4c:e5:63:5a:09:94:26:bf:87:0c:70:
         21:f1:92:c1:fc:84:38:11:1d:f6:f7:13:9f:a0:a2:1d:67:7b:
         1e:60:7e:d0:d8:e8:c4:7d:80:50:3e:a3:42:a0:75:8a:de:ac:
         2a:ac:8c:00:0d:65:bb:53:80:5d:ae:3b:34:98:11:b6:6d:99:
         6d:84:ca:db:dd:86:44:a0:d2:b1:a7:10:e9:41:d1:0b:46:e5:
         e7:a3:07:5b:05:e4:63:e1:46:22:fa:69:38:7e:e2:08:b6:76:
         91:f5:32:d8:5a:3e:45:b3:fd:a9:8b:ec:12:13:9e:7c:15:7c:
         34:33:5b:31:c3:91:a4:7a:11:8d:de:f8:b9:27:fb:3d:fb:77:
         9b:42:56:d3:9d:c1:c8:bc:61:ae:07:18:3f:35:29:7a:b5:81:
         65:6e:d8:01:90:a1:a7:e5:55:7b:c2:e7:42:51:53:13:fb:e3:
         ce:52:aa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:35:20 2026 by rpki-client