Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
File:                     80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft (raw, json)
Hash identifier:          h/rtoxA2lSd+x5iikEISqQGWzgEnOopWpPFXKW0nhvw=
Subject key identifier:   3C:C7:67:C6:06:2F:E7:A1:58:48:18:67:D4:52:0E:60:13:7C:86:C1
Authority key identifier: F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4
Certificate issuer:       /CN=f344a9f3665084f5009921ac52d119750beed4b4
Certificate serial:       01A0CFDAAED796C5F349A20A3C42B73E17F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
Manifest number:          1A6E
Signing time:             Wed 23 Sep 2026 20:00:10 +0000
Manifest this update:     Wed 23 Sep 2026 20:00:10 +0000
Manifest next update:     Thu 24 Sep 2026 20:00:10 +0000
Files and hashes:         1: 2KekhlWBejdFD7GFVdo-rq9I-Lk.roa (hash: u86VEt28YlwVGTomKAy9b0M7sMBBTGVJ9+WMRB1kQKY=)
                          2: 80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl (hash: RXcjDKMXYBRNzVVX34/nGjWtJOvAqpbgBXJAn/0Dqn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:da:ae:d7:96:c5:f3:49:a2:0a:3c:42:b7:3e:17:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f344a9f3665084f5009921ac52d119750beed4b4
        Validity
            Not Before: Sep 23 20:00:10 2026 GMT
            Not After : Sep 24 20:00:10 2026 GMT
        Subject: CN=3cc767c6062fe7a158481867d4520e60137c86c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:10:54:37:9b:1f:ea:6b:9e:74:f8:3b:09:5a:
                    62:4d:9d:9f:30:0b:69:67:9e:0e:74:46:f5:bf:e2:
                    bf:00:f2:8e:f0:29:9a:98:fb:d3:89:e3:ce:4a:1d:
                    25:32:27:0b:e8:70:6f:e1:6c:5b:08:95:3a:c5:b0:
                    60:5b:ca:cd:f1:3b:03:80:3a:6d:34:7c:83:86:33:
                    8b:de:1c:04:98:7f:c3:c4:47:aa:67:2f:cf:54:1c:
                    2b:56:65:25:10:d9:ae:48:8d:74:00:7a:06:b8:50:
                    38:cd:2a:dd:ed:b9:16:00:01:d5:47:e2:e0:f4:9f:
                    c0:67:76:27:07:35:59:a1:ae:e7:d9:ad:76:47:29:
                    50:49:86:44:b1:5b:fd:87:3e:2a:68:77:c4:df:cf:
                    e9:8c:10:1a:e6:8d:0f:fd:d4:aa:fb:42:e4:e7:1b:
                    04:4e:a8:b6:21:2b:a0:69:52:b5:2b:0f:88:91:f2:
                    ad:ee:50:a8:35:6e:cc:06:f5:99:37:b6:e9:3e:3e:
                    e8:8f:89:0d:8c:cb:d5:2e:12:6b:cc:99:d1:1a:61:
                    2a:bf:dc:6b:af:dc:a9:8f:86:1e:dc:2a:50:d1:a4:
                    96:ba:e4:10:04:a6:e3:23:92:77:0e:62:05:09:99:
                    77:50:86:07:60:9b:54:98:e9:bc:4d:5e:b6:dd:7b:
                    88:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C7:67:C6:06:2F:E7:A1:58:48:18:67:D4:52:0E:60:13:7C:86:C1
            X509v3 Authority Key Identifier:
                keyid:F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:3a:c8:a4:79:a1:0f:9c:e2:b2:90:5b:75:86:91:8f:5b:80:
         a5:a2:12:d3:c2:ca:3a:50:44:9c:27:d6:8e:29:69:5e:7a:87:
         df:6f:48:0a:c2:cc:83:5a:ea:e2:93:3c:8b:43:12:00:80:4a:
         1e:f2:28:3c:e1:1b:08:95:d7:7f:71:bc:3b:49:3c:e8:da:a8:
         22:29:00:2a:f6:ae:75:d7:01:1e:8d:c6:fe:bc:e6:47:b4:6c:
         c8:3f:f6:c6:3b:df:6c:d1:a8:c1:b3:f2:a7:64:54:1b:0b:16:
         54:50:59:4b:81:97:80:bf:29:9e:9e:dc:c5:a0:a6:28:c1:d5:
         a8:95:d9:d5:d1:3a:68:f2:08:be:8f:9f:80:23:2f:e7:36:50:
         20:93:db:f7:08:98:e6:4f:b4:50:6b:85:3a:38:ad:ca:79:b7:
         57:38:13:93:34:f5:f7:c6:5a:c2:77:14:69:62:49:c9:a8:00:
         3b:eb:9a:24:b0:54:66:91:04:9b:2c:01:4c:fe:8a:f7:03:5f:
         24:23:49:c1:76:34:58:96:99:8d:77:70:ed:53:3c:4f:e4:8e:
         4c:b9:5f:fc:83:15:14:9b:88:a5:f9:ff:a6:83:11:f7:12:7d:
         e7:78:de:c7:45:d4:e3:c9:c5:69:4e:92:b2:9b:cf:3a:a7:5c:
         47:5a:b9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:16:19 2026 by rpki-client