Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
File:                     8-NiIsy8bHIhNgVAurOp26nyN6A.mft (raw, json)
Hash identifier:          hE+iS1IyRXQ5SdU6D7hXWgmcWK0jWczA16GpY5NkVx8=
Subject key identifier:   B1:19:C3:B6:DB:50:E0:C8:3D:C0:E3:83:C6:D7:68:4D:6A:F2:41:C3
Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
Certificate issuer:       /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Certificate serial:       01A0DACD4E339D65323B9EB7FB39B746266B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
Manifest number:          1831
Signing time:             Fri 25 Sep 2026 23:01:22 +0000
Manifest this update:     Fri 25 Sep 2026 23:01:22 +0000
Manifest next update:     Sat 26 Sep 2026 23:01:22 +0000
Files and hashes:         1: 8-NiIsy8bHIhNgVAurOp26nyN6A.crl (hash: CslgKFtIw7TWwmwQyclAZMMYr2oaV82u4K1Mdb3bNMk=)
                          2: A0z7IQh1Pr8fvyL5I4TT_hj-k0Q.roa (hash: z/I+DSZiJhEoYfti3DU2Ke90Z0Knyu3rdi+RgDuTITU=)
                          3: PUhDyJdQbqGBAoiIPQqOIuxt2NE.roa (hash: WjBKvJrOfiKeEL68xDsyhZV8pUdA94BoBT1vP1PsXEY=)
                          4: orvP4nORXq0UzKjHkst8J153qic.roa (hash: eMGuLib/+B5pjoOYYUaTYix8ol70cyONihtgI6VfEKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 23:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:cd:4e:33:9d:65:32:3b:9e:b7:fb:39:b7:46:26:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
        Validity
            Not Before: Sep 25 23:01:22 2026 GMT
            Not After : Sep 26 23:01:22 2026 GMT
        Subject: CN=b119c3b6db50e0c83dc0e383c6d7684d6af241c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5f:1b:48:f6:ce:7b:15:3e:a3:cb:30:ba:b1:
                    2c:39:ce:73:eb:12:f0:f4:67:04:42:12:33:fc:4a:
                    15:24:0a:e2:3c:97:9c:66:1d:60:6b:79:bc:e7:01:
                    70:23:59:5a:08:e3:48:aa:6e:af:d8:d6:f4:0a:dd:
                    15:72:6b:a1:84:56:39:d7:d3:ec:aa:7b:48:75:a8:
                    8b:96:25:7c:3e:76:3f:e1:f3:73:c3:4d:66:aa:74:
                    f6:8a:d4:a3:a8:d1:92:92:12:70:38:14:67:e2:ee:
                    ca:c6:54:3c:32:dc:6f:49:83:a9:b2:04:20:be:46:
                    66:df:bc:ba:ea:b6:0c:2c:fe:17:76:f8:31:ea:a6:
                    15:c1:6f:49:a8:5e:a6:70:e8:0e:c9:be:3c:9d:83:
                    eb:12:8a:b5:dd:7b:4d:d5:25:bf:ca:a7:4e:aa:ba:
                    cf:7b:b0:4e:6a:67:ec:ea:91:9d:3e:81:32:70:5c:
                    b6:96:27:42:b4:d0:d6:a7:9e:f8:b5:80:a7:b3:a1:
                    fa:c9:76:90:9f:a7:fb:f2:31:dc:0c:9d:4d:73:24:
                    17:4a:ff:37:15:dd:d5:77:40:19:52:5d:3b:b1:ae:
                    42:12:d6:c4:ef:8e:c3:74:a6:3e:12:69:26:f4:cb:
                    ed:00:37:19:26:b9:37:ed:4b:55:1a:db:1f:37:d4:
                    98:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:19:C3:B6:DB:50:E0:C8:3D:C0:E3:83:C6:D7:68:4D:6A:F2:41:C3
            X509v3 Authority Key Identifier:
                keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:09:8c:eb:7c:ac:5d:3e:c9:77:ce:74:ce:7a:57:39:f0:bb:
         1a:19:4c:b3:e7:9b:97:8b:01:46:6c:86:6e:07:cd:d9:59:61:
         74:ee:43:5e:e2:15:21:1a:e4:98:b1:49:cd:e9:66:0e:77:49:
         4f:ee:37:94:70:62:a5:73:8e:82:66:27:63:ae:b5:45:7f:ea:
         9b:1a:9d:10:bf:d3:b8:05:cc:c5:cf:3e:f6:46:da:50:b5:e7:
         b4:28:16:b7:66:b1:0b:5e:ad:7c:7b:5a:08:3b:8e:4d:c2:97:
         a1:86:d9:25:0a:a3:02:87:77:de:da:9e:cc:b7:58:58:dc:92:
         62:88:61:ba:8b:53:4d:94:1c:a9:0f:78:a4:2c:c1:90:60:e4:
         ea:9e:05:77:84:44:c7:f8:83:6c:a2:4c:dd:a8:04:f6:32:8c:
         54:ff:9a:d5:a2:5e:7b:6f:86:90:8a:dd:38:0f:a2:8b:7c:85:
         35:52:6e:7b:7d:a3:fb:9b:51:f1:8e:d0:e0:7f:53:f3:d7:4d:
         39:4b:2b:e2:1f:34:40:0a:a0:5b:d1:e9:52:10:73:7f:49:91:
         54:d2:b9:a2:72:71:c7:72:23:91:6a:b9:5a:7f:7f:01:43:d3:
         39:c7:64:fc:17:9c:fa:9a:fb:16:32:2b:0d:6f:ad:30:f0:3b:
         2c:9f:6e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:45:49 2026 by rpki-client