Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
File:                     8XShpC1Ap_uCpsCM6XZRy2ar83A.mft (raw, json)
Hash identifier:          dl1t1vNLSUcilWvoKknYFcSS2j1SGG7ZmqwtpsOM05w=
Subject key identifier:   DE:0D:F5:2B:08:FE:6C:02:54:A7:D1:94:CD:4A:C6:0D:68:5D:9D:01
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Certificate issuer:       /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial:       01A0CD1119E0CE03FCC5BDD5C0908D73F2EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
Manifest number:          0E6A
Signing time:             Wed 23 Sep 2026 07:00:44 +0000
Manifest this update:     Wed 23 Sep 2026 07:00:44 +0000
Manifest next update:     Thu 24 Sep 2026 07:00:44 +0000
Files and hashes:         1: 8XShpC1Ap_uCpsCM6XZRy2ar83A.crl (hash: qk1RJCPTHit+flHLPH87An2IZBhqzNP/dIpAzk3UkZE=)
                          2: uBozqFCRP6q6-fMqqEdxvia5s2w.roa (hash: 7my1TEAY49gz3OCc/3WBB7kXgHGx+R9z5VTiKjlGzfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 07:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:11:19:e0:ce:03:fc:c5:bd:d5:c0:90:8d:73:f2:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
        Validity
            Not Before: Sep 23 07:00:44 2026 GMT
            Not After : Sep 24 07:00:44 2026 GMT
        Subject: CN=de0df52b08fe6c0254a7d194cd4ac60d685d9d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5d:68:45:30:4d:ba:36:7c:a0:6d:8b:0e:92:
                    9f:40:2f:09:16:a1:d6:29:99:80:01:4f:5c:d4:fd:
                    2a:66:81:83:cc:f0:bc:6e:c4:85:21:20:e4:25:27:
                    94:49:e1:02:e2:7c:5b:d1:37:6f:29:d8:dc:f1:75:
                    1d:99:4e:be:d5:17:35:c5:26:52:76:54:51:4b:15:
                    b5:83:25:14:3e:81:d4:bb:79:7d:ac:0e:7a:37:f2:
                    50:d3:3c:fb:df:44:88:96:24:7b:f5:7c:af:15:95:
                    bd:05:19:fe:aa:d7:3d:20:5e:b9:9e:57:8e:3a:56:
                    47:db:1b:c7:68:a7:b5:a6:91:bc:f4:12:95:00:97:
                    e0:ae:bd:8a:4f:1b:39:11:42:f2:fe:e1:5f:2c:4a:
                    4c:2b:55:b5:57:ac:88:2d:7e:de:3c:98:9a:f2:3d:
                    bf:ce:40:fb:f6:49:6a:b5:f0:65:64:b0:fc:8b:f8:
                    d8:d5:8b:08:2c:ff:65:23:80:65:51:13:4b:2c:e3:
                    52:65:d8:f7:ef:61:d0:cc:2b:f4:cc:13:ce:3b:04:
                    c2:a1:75:b5:65:33:72:f6:5a:5d:cd:1e:e8:08:2a:
                    e6:77:e1:31:1f:54:cf:c5:a5:92:70:d4:5c:5c:79:
                    44:3d:e0:58:53:d7:45:e1:99:5e:26:de:3c:6c:9a:
                    76:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0D:F5:2B:08:FE:6C:02:54:A7:D1:94:CD:4A:C6:0D:68:5D:9D:01
            X509v3 Authority Key Identifier:
                keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8e:f1:6e:8a:32:c7:0a:82:b3:b8:68:21:ce:35:99:b9:9d:
         34:9d:93:f0:96:3f:2e:ee:e8:10:7e:ba:fb:2a:05:79:73:2a:
         ae:ed:f3:67:58:a2:62:c1:5e:76:ff:ce:c5:f1:e9:c8:ab:99:
         48:26:50:20:4e:46:f4:c4:e5:2e:3f:d9:5f:8a:6c:68:43:c1:
         f9:d6:3d:6f:15:4a:0a:7e:5d:26:02:56:4e:9d:ac:34:be:96:
         f7:86:d4:56:7f:45:36:d4:fd:67:08:ab:1a:f5:5d:8e:2d:c7:
         f1:fd:72:d3:25:bb:91:b3:fa:43:7f:ee:c9:64:ba:7b:f7:9e:
         89:67:26:07:37:ad:20:0b:6f:00:c5:4d:d9:14:ba:24:b7:e6:
         e6:1b:00:43:60:ea:15:7d:9a:26:3f:58:c0:33:f5:d7:ed:0c:
         f0:a4:e6:c8:36:e8:f8:e5:a6:db:3e:79:25:35:8c:37:7a:49:
         97:b9:71:61:c0:ec:33:50:d5:d7:88:7d:c2:b2:c0:57:51:be:
         6a:fd:bf:8b:62:b0:dc:b8:c4:17:e9:6a:44:a1:a3:38:4e:d2:
         15:76:06:70:10:c0:59:ef:f0:03:2f:97:96:99:c3:4f:9d:2b:
         25:e4:ab:c1:0c:80:a6:3d:47:50:82:d7:de:57:e3:f3:1d:98:
         33:b2:61:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:37:43 2026 by rpki-client