Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
File:                     8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft (raw, json)
Hash identifier:          07pq608GpLm+DyJusJdkk/haNsKNW1dKb0C/rM0IDIg=
Subject key identifier:   D4:8C:C8:D0:22:80:A8:E5:62:2D:67:61:BD:1F:EA:4D:8F:FD:5D:4B
Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
Certificate issuer:       /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Certificate serial:       01A0D26DFA496778DE0079E237297A11EA1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
Manifest number:          14F9
Signing time:             Thu 24 Sep 2026 08:00:17 +0000
Manifest this update:     Thu 24 Sep 2026 08:00:17 +0000
Manifest next update:     Fri 25 Sep 2026 08:00:17 +0000
Files and hashes:         1: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl (hash: 0I94uKXoyoy9iy3/Sa1iiClUqg1og9CIgK5G/JDVJ9U=)
                          2: _jY6WgV8hi820mrkCVqkQdpe6r4.roa (hash: jZcpfUNVzLyH3QEOmN/Qa0Ri+06CTJZ/zNPfr5mVdOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:6d:fa:49:67:78:de:00:79:e2:37:29:7a:11:ea:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
        Validity
            Not Before: Sep 24 08:00:17 2026 GMT
            Not After : Sep 25 08:00:17 2026 GMT
        Subject: CN=d48cc8d02280a8e5622d6761bd1fea4d8ffd5d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fe:91:24:1b:71:60:b1:92:99:e1:aa:ee:43:
                    11:02:be:ab:6d:bc:72:a3:51:70:87:a7:3d:a4:4f:
                    f0:d7:95:b6:5d:5c:8d:57:69:8e:ef:2d:89:bf:2a:
                    78:64:c8:5a:6d:b7:c4:ac:d0:2b:e9:49:76:50:7c:
                    f5:70:6b:45:f9:b9:ef:dc:ba:7d:15:16:28:9a:02:
                    7e:84:2e:3f:fa:cb:6b:07:9a:fa:7e:66:a0:74:60:
                    b0:39:71:8d:d3:9e:7f:07:67:1a:cc:f6:1c:41:e5:
                    35:60:9d:35:24:ed:55:1b:fb:b4:ab:f0:f4:fb:97:
                    d9:81:7f:78:74:8e:f9:1a:a4:c5:ee:36:ed:eb:00:
                    da:04:66:a1:d3:92:5e:cc:c0:18:7d:13:88:ae:2b:
                    65:7d:39:87:f1:18:f9:5b:85:08:68:b5:db:1d:b9:
                    4e:e6:bc:1d:a1:9a:7e:9d:bc:e3:d3:18:86:07:b7:
                    b2:7a:0f:b8:cd:85:76:0f:ca:3d:9e:bf:98:af:6b:
                    2b:c4:5a:f7:cb:90:89:01:90:90:ca:a4:96:04:e3:
                    23:04:ff:f2:e9:8d:6b:5b:fb:51:36:f1:5d:56:12:
                    c4:44:76:36:c4:78:5a:54:ed:a8:23:32:bd:3e:59:
                    fe:6c:00:2d:5e:a2:f4:aa:15:78:80:0a:fa:8e:fd:
                    7b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8C:C8:D0:22:80:A8:E5:62:2D:67:61:BD:1F:EA:4D:8F:FD:5D:4B
            X509v3 Authority Key Identifier:
                keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ad:17:68:66:cb:7c:4c:9a:98:5d:12:18:0f:68:87:4b:ab:
         c6:c6:7b:7d:d0:02:e3:a0:65:50:38:a2:ae:00:54:fe:9c:4b:
         7d:e3:c5:14:a4:12:42:f3:64:94:e6:f4:23:87:9d:bd:da:8a:
         a4:b1:d6:fb:36:05:6b:a4:8d:9c:e0:74:49:50:b6:f0:11:0b:
         1b:98:39:07:d2:a1:35:4e:8d:68:f9:aa:66:06:b0:ff:d7:a6:
         5a:ab:8d:df:ec:7b:ba:d0:dd:6b:4b:06:94:9b:7f:6e:d3:03:
         84:e5:7f:1f:5a:24:fe:f1:8a:23:49:e4:68:6a:8f:86:73:af:
         06:a9:0e:96:c5:f0:2b:a2:39:2d:a3:83:24:a4:38:d5:fd:14:
         47:51:35:f5:61:ab:7b:a9:dc:3c:dd:fb:b2:3b:ce:b8:63:c6:
         8f:53:48:b9:e8:db:aa:9e:51:24:ea:5f:ac:65:1f:1a:96:12:
         f7:76:87:c3:b1:7d:40:cf:b9:04:41:5f:11:e5:c6:45:7b:80:
         47:0a:cd:71:d8:4a:99:9a:a4:ff:00:1e:c8:fc:34:b0:cc:75:
         d0:ae:da:c2:11:5b:cd:6b:6c:b9:34:76:bc:80:ef:af:1e:a1:
         17:2e:43:ca:d2:7e:d0:70:69:56:ad:a4:b8:7f:38:cf:17:cc:
         06:cb:02:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:01:11 2026 by rpki-client