Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/8BEN0EuQ0jaaSydktx_TjQUIX-w.mft
File:                     8BEN0EuQ0jaaSydktx_TjQUIX-w.mft (raw, json)
Hash identifier:          fuin4XJQBO6FuQNY9yB0HjvcZZhIgqMLTR51VEEneHs=
Subject key identifier:   58:61:B7:3C:AC:5D:50:AD:80:10:3C:38:B7:48:8F:B6:46:49:F2:F0
Authority key identifier: F0:11:0D:D0:4B:90:D2:36:9A:4B:27:64:B7:1F:D3:8D:05:08:5F:EC
Certificate issuer:       /CN=f0110dd04b90d2369a4b2764b71fd38d05085fec
Certificate serial:       01A0CE235AA63E812D5EFB8A617EC7B2F374
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8BEN0EuQ0jaaSydktx_TjQUIX-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/8BEN0EuQ0jaaSydktx_TjQUIX-w.mft
Manifest number:          E4
Signing time:             Wed 23 Sep 2026 12:00:18 +0000
Manifest this update:     Wed 23 Sep 2026 12:00:18 +0000
Manifest next update:     Thu 24 Sep 2026 12:00:18 +0000
Files and hashes:         1: 4ZQr3EKg7XLkj-p9Nvw6XTVpPbo.roa (hash: exTQU9dmfmZhdPx8oGiUL/j0MT0I/USYBEi+eDQjOJc=)
                          2: 8BEN0EuQ0jaaSydktx_TjQUIX-w.crl (hash: A5pnAjX5xgH/lXfF8Iif74rF0fTilcPWLaMV+YJPIzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/8BEN0EuQ0jaaSydktx_TjQUIX-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/8BEN0EuQ0jaaSydktx_TjQUIX-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8BEN0EuQ0jaaSydktx_TjQUIX-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:23:5a:a6:3e:81:2d:5e:fb:8a:61:7e:c7:b2:f3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0110dd04b90d2369a4b2764b71fd38d05085fec
        Validity
            Not Before: Sep 23 12:00:18 2026 GMT
            Not After : Sep 24 12:00:18 2026 GMT
        Subject: CN=5861b73cac5d50ad80103c38b7488fb64649f2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:3f:59:8a:ac:b1:a9:81:6e:14:62:89:12:
                    a0:63:6e:16:7e:34:4f:6f:1b:41:39:7a:6a:e2:5a:
                    97:e1:6d:a1:5e:99:3d:95:ab:46:e7:28:e9:fb:4a:
                    54:0d:c4:3b:97:8b:3e:90:fb:f6:5f:44:44:69:c4:
                    ca:25:24:a3:3a:d3:aa:1d:f6:ca:82:84:a8:1c:17:
                    3b:70:4a:8f:06:d7:dc:a4:60:37:7b:fa:e7:ab:b6:
                    12:0f:ea:ce:f0:bc:37:fc:37:29:fc:75:0f:4f:d1:
                    8a:96:25:ab:64:c1:d9:76:77:08:01:7b:3d:71:f4:
                    45:6b:51:09:18:26:32:8a:0d:1e:b9:2a:8c:aa:20:
                    fa:72:f7:77:43:7a:1f:40:fc:65:f4:e8:ce:1a:64:
                    90:69:38:9e:7f:69:83:a9:c1:cc:37:18:c9:93:05:
                    31:2d:66:76:c2:2b:d0:62:14:75:1f:5c:4e:cf:83:
                    56:be:71:34:bf:cb:55:cb:19:55:39:b3:78:d9:8f:
                    c2:88:ce:33:95:12:24:ab:7e:3e:02:4f:f9:67:59:
                    6e:e6:f9:14:c6:ab:fa:27:4c:4e:28:d9:95:90:ca:
                    98:1b:96:88:aa:56:96:ad:28:5f:11:27:f2:04:7c:
                    17:c0:03:41:1c:79:85:3e:97:64:8d:cc:da:48:bb:
                    ed:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:61:B7:3C:AC:5D:50:AD:80:10:3C:38:B7:48:8F:B6:46:49:F2:F0
            X509v3 Authority Key Identifier:
                keyid:F0:11:0D:D0:4B:90:D2:36:9A:4B:27:64:B7:1F:D3:8D:05:08:5F:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BEN0EuQ0jaaSydktx_TjQUIX-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/8BEN0EuQ0jaaSydktx_TjQUIX-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/8BEN0EuQ0jaaSydktx_TjQUIX-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:69:0e:ee:02:70:7f:c4:db:ed:68:ca:fe:a9:c7:7f:e2:24:
         10:eb:b3:97:ef:a0:c5:78:ff:5b:39:7e:93:33:22:2f:19:9f:
         32:45:f7:56:94:af:a0:02:8b:f8:f6:f1:0c:4e:e3:c3:27:0b:
         bf:17:66:15:a7:4f:e6:55:8a:25:2c:cc:09:ea:0e:64:97:09:
         16:79:52:78:40:fe:6e:d6:e9:80:17:20:12:a4:83:79:91:01:
         68:18:a4:44:48:e9:d9:25:89:b3:7d:1c:a6:99:7f:07:f0:a4:
         1b:59:63:02:dc:9d:dc:5c:a2:27:88:b0:ea:12:3f:cf:18:cf:
         89:2d:43:bc:f4:ac:44:12:1a:5d:51:ec:56:48:79:48:48:03:
         24:6a:dd:29:39:aa:fe:9e:44:6a:18:bd:19:97:3a:08:af:53:
         b9:ee:f0:b8:4b:ca:5e:64:c3:31:01:13:65:cc:95:82:4e:84:
         f7:13:27:49:1d:e7:54:4b:a6:22:c8:0c:e8:4a:27:02:02:1e:
         cf:37:92:84:eb:c7:f8:81:f9:09:ce:63:b4:6d:14:a8:38:7a:
         81:ad:a8:ea:d7:83:c7:3f:f4:76:88:0e:78:0f:fa:42:ce:00:
         5f:6c:4c:93:69:5c:a4:44:0e:40:ce:13:6a:89:26:02:8f:b2:
         09:9f:e2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:31:23 2026 by rpki-client