Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
File:                     8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft (raw, json)
Hash identifier:          QkulKRAhmX0M/tFx9hBRhcg3izaTuonorjsvR3WRAuY=
Subject key identifier:   17:0B:88:C1:2A:54:D5:B7:98:AA:A9:84:11:5F:CD:01:05:F5:26:26
Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Certificate issuer:       /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Certificate serial:       01A0D048B369AB4C69D0F2BBE7BD5305D6EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
Manifest number:          146A
Signing time:             Wed 23 Sep 2026 22:00:20 +0000
Manifest this update:     Wed 23 Sep 2026 22:00:20 +0000
Manifest next update:     Thu 24 Sep 2026 22:00:20 +0000
Files and hashes:         1: 07j9_n6AVXDopfWR8BaInw48NMc.roa (hash: WakDlcBYUCEpu1IOY+fCJocQGM48pGFR8nk3j6rRYQM=)
                          2: 2agacPd_HSeo5iWC2CnXaC2xZe8.roa (hash: YHI/nftFWmJRoE6pDGv7uv3rVMoTsI26akPX3i6AVgc=)
                          3: 3tDgZldpwVKudiZgfUwgKb4zld4.roa (hash: kPvU5pGV0e7Ywu28DoML3GY9UgWxXdJkZJTnwzyFHKc=)
                          4: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl (hash: hB4U9lbNsg1AOsC++9fKbQXSjyhbRvAi+pSN+DO4iIM=)
                          5: bMpmoetZ6thuISe4pMSH_gzG5_0.roa (hash: Z0iA9uRqcsuyxbdf8SH9tPOJ9Xmro4LCj/1NhGY5J7c=)
                          6: eB4uOT6yIJ90-7WQMq3rRaWige0.roa (hash: 0bN90UYrI/jqLeHoVlUJEcwKG5W/ZPrQB/kL7FwjFBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:48:b3:69:ab:4c:69:d0:f2:bb:e7:bd:53:05:d6:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
        Validity
            Not Before: Sep 23 22:00:20 2026 GMT
            Not After : Sep 24 22:00:20 2026 GMT
        Subject: CN=170b88c12a54d5b798aaa984115fcd0105f52626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0c:a3:9b:ac:54:9a:95:28:f4:26:c6:c4:cf:
                    0c:a6:ce:5a:60:1c:f0:b9:42:0f:7e:65:ca:a7:fb:
                    78:9e:22:eb:9f:22:87:a5:4d:e2:88:59:01:28:0a:
                    dd:76:e6:7e:8c:c0:56:12:8d:62:33:ae:3e:e4:db:
                    79:bc:2c:d3:2c:f1:88:c2:1d:df:1f:09:0e:b0:5f:
                    05:8f:f5:68:b8:22:18:70:46:be:1e:5f:af:3d:5c:
                    9a:88:01:88:8e:96:9a:d6:31:aa:42:d6:79:3d:1a:
                    ca:29:e3:29:e6:2a:f5:f8:8c:95:24:c5:ce:ba:b0:
                    de:3e:71:83:3f:1a:71:a7:e7:e1:a5:6f:37:49:df:
                    d3:7f:67:96:d6:d3:e2:07:29:61:81:0e:64:63:db:
                    dc:b3:f6:54:b6:07:67:10:0e:94:11:44:07:32:51:
                    8b:ec:52:c8:35:e9:c6:5a:64:70:e8:8e:8d:c8:8c:
                    cd:64:eb:7b:8a:61:96:d4:22:a0:c7:f8:b4:fe:4a:
                    d4:17:a4:89:e6:71:ed:47:3b:a0:f5:30:3a:17:9f:
                    8b:55:67:5a:01:01:1c:5e:92:de:5d:bd:69:ff:8d:
                    94:f6:1a:1f:59:af:e3:f4:9f:5a:41:cb:f8:00:06:
                    1b:40:ae:a5:28:24:67:85:47:51:63:6c:28:ee:4e:
                    20:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0B:88:C1:2A:54:D5:B7:98:AA:A9:84:11:5F:CD:01:05:F5:26:26
            X509v3 Authority Key Identifier:
                keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a3:8e:6d:31:93:92:0f:6f:a1:48:79:df:26:49:fd:18:91:
         db:a7:fb:00:5b:0c:fb:89:2f:96:5d:1c:00:23:9e:1e:7a:c4:
         60:18:9f:e1:cf:48:58:59:99:48:b5:e0:0e:89:e6:8e:e7:f8:
         4a:f6:42:7e:09:29:9c:60:3f:a4:e4:22:80:3a:fb:fd:e6:04:
         62:1f:fc:37:88:f2:17:6d:79:c1:c4:15:00:c3:a4:dc:2d:83:
         e8:ec:95:73:6c:c0:76:e8:70:fa:9a:18:22:81:aa:c0:aa:e6:
         56:6f:5d:b8:b1:d4:42:6f:80:04:22:ff:6d:2e:a3:1c:f9:4a:
         a7:6d:f5:c0:be:07:0e:3c:7c:e9:a6:ab:f4:91:27:2d:40:6b:
         b0:39:fa:5d:c2:f7:f0:8f:e1:51:fc:7d:15:57:0b:ef:7a:96:
         86:83:0f:0f:ad:ce:2f:2f:8c:e5:64:d7:ff:4e:2f:d6:89:7f:
         39:79:f8:d5:83:57:15:3e:1c:90:43:c6:cc:dd:1c:89:00:e9:
         6e:55:9e:42:84:bc:06:fa:de:fc:a1:b5:60:8d:84:60:41:7a:
         5c:80:70:9d:52:f6:4e:92:73:b7:5e:57:b0:0e:60:69:c4:2c:
         b0:fc:33:1b:d6:6c:b9:3c:a9:00:e3:f9:58:1c:fc:f0:58:91:
         b6:76:89:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:10:22 2026 by rpki-client