Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
File:                     8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json)
Hash identifier:          KhAyTtLPdFoa+X+PUA4Mam3g64CeF608Os02YhahNtc=
Subject key identifier:   09:22:FF:67:76:8B:53:0F:2A:09:9D:04:B8:AF:35:09:77:65:61:C6
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Certificate issuer:       /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial:       01A132FE03FC36776ECE5C0F7C0B66DCE8E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
Manifest number:          1BC6
Signing time:             Tue 13 Oct 2026 02:01:10 +0000
Manifest this update:     Tue 13 Oct 2026 02:01:10 +0000
Manifest next update:     Wed 14 Oct 2026 02:01:10 +0000
Files and hashes:         1: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: IOKVF+s+R5cx3pODwupDOTDY5esD58zFkZVLaVlZjeQ=)
                          2: BY90jgROFhJJZ1NbH4-tElkR_GE.roa (hash: Y5QIyQBYfCYfbH1jDCElmPITA4Jk6lEfynUlV4MgKn0=)
                          3: FjdVngLDionqDh_18cFGQYsmeKM.roa (hash: Tr+Fqc+oiTydduMLlPL1oc/kxHz+RUGFOArR1+9AQpM=)
                          4: jOKUVjy0c9vId2Sgar1ALyHha2U.roa (hash: LYaq4K0uwHA/ENOgkf4QZP3JMqPWmSKEI1664spJ028=)
                          5: q38Vrr1-lrXh4gRVryv7KRjcsHU.roa (hash: GS4WkhgAvCrSjsSDa1MVGmMSwhXFRTBu+xrlewUGZtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 02:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:fe:03:fc:36:77:6e:ce:5c:0f:7c:0b:66:dc:e8:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
        Validity
            Not Before: Oct 13 02:01:10 2026 GMT
            Not After : Oct 14 02:01:10 2026 GMT
        Subject: CN=0922ff67768b530f2a099d04b8af3509776561c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cf:98:0b:94:5d:03:8c:24:45:ea:88:bd:1e:
                    2a:90:cd:85:71:f4:82:00:54:e0:cf:72:9e:2a:ce:
                    52:7d:8b:f1:49:aa:74:c3:05:4d:8f:8c:f5:d0:fc:
                    6f:34:96:c1:42:d2:e2:27:93:be:54:1c:eb:9a:6c:
                    27:22:e2:06:b8:c0:7b:c5:32:d7:eb:cd:45:c7:12:
                    c0:c9:1b:87:ec:d0:04:14:c0:2c:7c:5a:57:53:66:
                    b3:69:63:72:b8:0a:64:24:80:a7:2b:72:c1:6d:1e:
                    fc:45:29:fb:37:29:4c:a6:48:b7:0f:ed:e4:99:6a:
                    50:0d:c1:4d:b2:f1:a7:66:dc:9d:f1:cf:38:50:9d:
                    09:44:3c:eb:fe:6a:b3:f6:49:38:65:d8:80:2a:99:
                    f3:e9:9e:a2:de:15:a8:53:51:db:fc:da:d6:41:3b:
                    0b:14:0d:83:65:b3:38:39:4e:92:de:96:f2:7b:37:
                    c8:e0:06:da:b1:85:d7:b9:a3:84:b1:5c:05:16:9e:
                    b8:3e:3e:75:2f:ca:1e:1a:bc:86:ec:98:af:bb:c8:
                    7c:7d:a0:fb:41:f7:ba:4b:9c:72:1d:42:85:b9:c8:
                    16:20:02:f6:26:cb:c4:12:2c:25:df:60:9a:7c:21:
                    b3:8b:69:7a:6a:25:c1:32:ec:cf:87:e2:f7:b9:33:
                    77:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:22:FF:67:76:8B:53:0F:2A:09:9D:04:B8:AF:35:09:77:65:61:C6
            X509v3 Authority Key Identifier:
                keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:18:28:96:08:94:3b:82:28:29:c9:af:af:66:2e:62:2e:cd:
         02:c0:6f:57:d9:cf:9a:6c:c9:a1:69:9d:9c:61:23:10:9e:ad:
         b9:13:37:92:32:9e:2f:3c:a1:fa:45:fe:00:08:33:11:22:4d:
         4f:72:e8:dc:87:d5:02:7a:2e:4b:b6:5a:1f:df:b4:20:72:27:
         a4:4e:06:74:cf:03:28:5e:21:f3:31:a5:34:22:8b:23:03:5f:
         e6:d4:12:98:01:df:9d:01:87:2b:5b:3c:61:da:0a:dc:fe:ce:
         31:3e:e8:ea:3f:64:72:47:e5:39:09:6f:d8:fd:66:3e:15:0f:
         8b:d2:42:fe:27:3b:fb:e3:cd:e6:d1:45:75:25:8b:9a:0c:96:
         9d:d9:81:61:66:c1:12:96:c8:84:b2:09:de:7e:e5:95:8d:bf:
         3a:55:be:9f:be:91:c2:a9:da:d8:71:70:2f:b1:76:92:d7:ee:
         a4:3f:8e:19:d2:e7:60:71:5f:a8:7b:99:9f:b2:70:50:b9:b3:
         c7:ff:bc:26:d2:70:22:db:b7:fe:15:05:3c:8e:62:a4:e8:fc:
         b7:1e:a0:93:a4:81:a1:e8:f9:0b:8c:5a:5a:a1:44:54:90:5a:
         4f:28:6d:16:a6:35:73:d0:4b:c3:48:1f:d4:47:f2:73:d6:26:
         71:cb:c8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:19:28 2026 by rpki-client