Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
File:                     o875PLessPtJuiiKeg-_JtMAT6U.mft (raw, json)
Hash identifier:          ljYvWpV1xPz2JScxgDg1VBq5eGkBE+nZELAVa9Mb+MI=
Subject key identifier:   14:9F:56:55:ED:56:4E:4E:37:A6:D1:A4:C0:71:AA:16:48:55:C2:9D
Authority key identifier: A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
Certificate issuer:       /CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
Certificate serial:       01A0C6D839EE9623F8DC75F5B7912A8DFE32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
Manifest number:          0BD0
Signing time:             Tue 22 Sep 2026 02:00:54 +0000
Manifest this update:     Tue 22 Sep 2026 02:00:54 +0000
Manifest next update:     Wed 23 Sep 2026 02:00:54 +0000
Files and hashes:         1: 5t3r-e7tyLlW84cUDqRXL5ROFSo.roa (hash: LjPlWorNn2ybzLX8+yX/V0IpzdHIQY94ZXTGvGnunJ4=)
                          2: o875PLessPtJuiiKeg-_JtMAT6U.crl (hash: DtJFZU8eUIWhtEHXTMlClav1shqRHxrXc5/ByluAm2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:d8:39:ee:96:23:f8:dc:75:f5:b7:91:2a:8d:fe:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
        Validity
            Not Before: Sep 22 02:00:54 2026 GMT
            Not After : Sep 23 02:00:54 2026 GMT
        Subject: CN=149f5655ed564e4e37a6d1a4c071aa164855c29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3c:2b:6b:dd:ab:89:b3:07:b4:e5:d5:08:09:
                    4f:a7:72:c6:71:2c:05:6f:8e:fc:af:64:70:a7:c5:
                    7f:9f:c3:14:51:95:43:fd:f1:f8:29:73:15:60:84:
                    f2:7e:b4:1a:64:bf:3d:3a:9d:46:dc:40:12:14:26:
                    d3:06:f5:5c:f6:59:70:0b:de:cf:43:bd:22:c0:06:
                    2e:cc:9a:1b:dd:09:7c:dd:e1:de:ee:fd:88:71:b0:
                    65:d7:c1:4e:99:ee:75:f8:88:9f:34:58:3b:b6:54:
                    2b:cd:2f:37:d3:77:ed:cf:f2:87:af:d7:0f:70:5b:
                    b4:86:34:7f:91:bd:99:05:83:0b:50:bf:1d:72:3c:
                    db:c4:8c:ea:42:70:21:5e:4f:ee:ef:38:2f:6d:cd:
                    a9:fc:6a:bc:74:b7:86:3f:d9:7b:7c:96:99:bd:46:
                    df:23:15:34:51:b1:aa:d6:c6:62:95:c7:0e:5b:5a:
                    86:c7:8d:d9:15:f8:23:e5:b1:1c:5d:1f:f3:bf:e2:
                    c7:b6:c9:30:1b:33:4a:70:24:02:96:65:db:6a:9d:
                    a9:5b:fa:46:ff:86:64:43:f2:6f:74:49:03:63:6c:
                    d3:3a:ff:eb:b4:f4:e0:5c:73:11:78:3e:63:c0:c6:
                    70:d8:1f:cc:3a:fb:15:53:de:cb:9b:c4:63:23:f0:
                    ba:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9F:56:55:ED:56:4E:4E:37:A6:D1:A4:C0:71:AA:16:48:55:C2:9D
            X509v3 Authority Key Identifier:
                keyid:A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:81:10:31:ce:00:11:47:46:f9:02:fd:af:18:c1:f8:fb:8d:
         89:b0:97:87:e1:9b:66:33:64:40:39:eb:d5:4a:46:ca:f6:00:
         b5:62:e0:3a:06:30:06:3c:64:30:eb:60:39:4d:a8:ca:ba:9e:
         4c:fb:d5:ed:3b:d1:b7:c5:b2:d9:fe:51:d5:02:ac:5b:47:78:
         09:d0:34:de:4b:17:05:18:d8:b7:46:ec:c2:e3:3f:2c:19:31:
         05:0a:33:8a:a0:ef:16:4e:50:06:02:c1:ec:dd:f2:be:17:7b:
         e0:55:71:bf:c6:61:a2:eb:31:97:ea:f8:d0:88:23:54:4e:02:
         9e:63:1d:f2:84:76:be:0b:39:32:78:2b:7a:c2:d8:6c:ef:b4:
         82:8f:ec:a1:84:c7:73:ec:d5:d4:f6:14:2c:bd:d6:06:9f:0c:
         4b:08:f9:50:df:b0:a8:b2:16:d1:cc:04:81:a5:b4:b2:27:76:
         d3:89:6c:a6:cb:8e:67:7c:16:b5:ce:f6:c9:0f:4a:fb:a9:92:
         0e:b1:e9:f8:5e:44:e2:30:0d:c4:9c:05:85:b2:1b:4d:7e:99:
         8a:82:36:b9:6e:aa:e6:be:d9:e2:5e:c6:9d:44:89:8b:a8:18:
         fa:dd:49:30:3a:db:a9:83:4a:7f:3e:cb:dc:e7:24:bb:46:c5:
         7f:57:14:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:47:25 2026 by rpki-client