Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
File:                     8VzG8-5-0llTHW0Izp4JNztxYGI.mft (raw, json)
Hash identifier:          k0Jmo3x3ZwOzaAgC2qU69qGd2AaKEZA5Kn9KFCdUIbo=
Subject key identifier:   F8:64:4B:6A:19:31:92:AD:78:45:CD:DD:1C:98:0B:18:13:A4:FB:BF
Authority key identifier: F1:5C:C6:F3:EE:7E:D2:59:53:1D:6D:08:CE:9E:09:37:3B:71:60:62
Certificate issuer:       /CN=f15cc6f3ee7ed259531d6d08ce9e09373b716062
Certificate serial:       01A0D236EBAD4FC5D62ECEEEB0103C95B657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
Manifest number:          0809
Signing time:             Thu 24 Sep 2026 07:00:09 +0000
Manifest this update:     Thu 24 Sep 2026 07:00:09 +0000
Manifest next update:     Fri 25 Sep 2026 07:00:09 +0000
Files and hashes:         1: 8VzG8-5-0llTHW0Izp4JNztxYGI.crl (hash: Gv+CRlgV59oNi/cJUckjLTDpS6ySuAkc5nCnubf+jQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:36:eb:ad:4f:c5:d6:2e:ce:ee:b0:10:3c:95:b6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15cc6f3ee7ed259531d6d08ce9e09373b716062
        Validity
            Not Before: Sep 24 07:00:09 2026 GMT
            Not After : Sep 25 07:00:09 2026 GMT
        Subject: CN=f8644b6a193192ad7845cddd1c980b1813a4fbbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:da:c2:ed:93:1d:a7:34:b4:3d:d1:a3:93:9a:
                    c1:8d:fe:b9:c4:fa:98:3d:0b:92:b5:84:7d:ba:90:
                    d2:13:5f:7c:c4:f6:d4:ab:35:3e:db:08:43:8c:07:
                    8d:cd:a0:c3:9e:05:62:e3:58:16:c4:42:d2:b9:b1:
                    94:0b:d1:6e:e6:b9:45:9a:1e:fa:6f:2c:4b:77:83:
                    54:01:3b:51:67:da:cf:b3:30:76:ca:4a:3f:8c:7f:
                    c5:34:f9:7c:23:d3:8a:b4:18:a3:7b:14:32:9e:a9:
                    da:2b:73:29:25:0a:62:ec:7f:f3:d7:6c:07:ac:65:
                    58:2e:f8:42:e6:67:1d:2d:62:a2:ef:13:dc:fb:45:
                    c6:cd:cf:1b:70:60:11:9e:d0:06:14:8f:2b:00:cb:
                    82:0c:e6:91:05:35:6d:e8:83:a2:1f:f7:f8:b8:ba:
                    76:bd:77:cd:56:e6:5e:3d:02:09:2e:43:1e:6d:36:
                    20:e4:78:e9:47:3e:60:b3:ac:fb:55:db:e1:3e:1d:
                    8a:91:89:51:de:95:34:5f:a8:b5:a4:b3:04:fb:b5:
                    ae:1f:e7:23:e4:cd:2c:cd:fb:f6:52:a8:5d:d7:58:
                    96:f5:b4:4c:c9:c6:c6:ec:85:22:1e:20:fd:a2:2f:
                    5d:5b:9f:aa:e8:41:b8:e6:0e:fa:af:cd:c3:c6:e3:
                    61:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:64:4B:6A:19:31:92:AD:78:45:CD:DD:1C:98:0B:18:13:A4:FB:BF
            X509v3 Authority Key Identifier:
                keyid:F1:5C:C6:F3:EE:7E:D2:59:53:1D:6D:08:CE:9E:09:37:3B:71:60:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:68:a4:d0:99:ec:17:82:7c:55:0e:d9:19:1f:ff:20:de:4f:
         93:55:91:f9:4e:e2:ba:4d:82:8f:4e:2d:2b:81:64:af:27:60:
         64:c0:82:8e:3c:bb:23:8c:41:01:25:f5:15:4b:68:dc:93:d6:
         54:85:cf:1d:26:67:c7:01:e4:43:fc:bc:96:d1:70:48:f8:b4:
         67:b4:b6:e5:cb:e5:e3:d3:69:c2:e5:88:ae:a6:33:d8:e3:ec:
         82:ba:0b:0c:bf:40:1a:2b:57:69:38:df:6a:9f:56:2d:39:3b:
         65:f3:50:14:9b:df:18:a4:6d:f3:67:25:69:f9:3f:99:fd:c6:
         2d:da:c2:6f:73:3c:d2:34:0b:23:d4:52:63:87:26:f3:2a:f1:
         de:3c:f2:f6:a3:b2:1f:fe:9b:47:7d:53:b2:29:ca:14:e9:09:
         11:55:8f:12:ed:0f:0a:5c:58:a4:3e:62:05:7b:ee:4a:9f:cd:
         19:f7:5b:4b:d6:95:4d:fb:52:e1:ea:6d:5c:b1:0c:72:11:f2:
         95:a6:fe:15:d9:83:9d:84:c9:ba:81:65:c7:57:5f:65:9b:80:
         e3:4c:89:0e:cd:85:06:9e:e3:6f:00:f9:fc:8e:9d:8c:ce:c3:
         36:7b:a6:da:6d:26:2c:ec:6d:70:be:28:6d:ce:18:a6:4e:2f:
         c6:48:2d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:01:14 2026 by rpki-client