Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
File:                     08ixCjj4HGTiASB7_DVEwpcq9fM.mft (raw, json)
Hash identifier:          yUF6lN8VO9upf72iJHQGFXHUyS05HpIjbum8ncL6Hu4=
Subject key identifier:   BF:DD:B2:48:C9:FD:46:43:3E:D6:EF:8C:50:AB:9E:7E:4F:0C:CC:BF
Authority key identifier: D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3
Certificate issuer:       /CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
Certificate serial:       01A0CF35EE4586E86A585C9A65DB1E66901F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
Manifest number:          142B
Signing time:             Wed 23 Sep 2026 17:00:13 +0000
Manifest this update:     Wed 23 Sep 2026 17:00:13 +0000
Manifest next update:     Thu 24 Sep 2026 17:00:13 +0000
Files and hashes:         1: 08ixCjj4HGTiASB7_DVEwpcq9fM.crl (hash: pF/S7kPV5fqZj0wDF8Pa9XjzGdcaRAHnQwqKYoMhGTg=)
                          2: yXhNyXRSfQjfxmo-xnpGQqFi810.roa (hash: SLF2lVj7vn7i6fplRiTtNXFnugUCA5oqM+ECg7CqrFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:35:ee:45:86:e8:6a:58:5c:9a:65:db:1e:66:90:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
        Validity
            Not Before: Sep 23 17:00:13 2026 GMT
            Not After : Sep 24 17:00:13 2026 GMT
        Subject: CN=bfddb248c9fd46433ed6ef8c50ab9e7e4f0cccbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:08:be:ab:b4:77:88:93:e6:e1:b6:51:ba:14:
                    6f:03:53:e3:08:93:b1:ed:b1:39:0d:83:ad:12:a6:
                    07:eb:f9:ff:35:c7:4d:e8:bf:9d:1a:a9:17:88:65:
                    66:ac:16:4b:e5:34:28:d1:78:e9:27:af:09:08:c9:
                    e0:23:a6:e1:ff:fb:5a:d3:3b:55:8b:44:7d:b4:f0:
                    d4:ac:8e:6e:1f:95:d1:ee:98:dc:b2:d3:1f:d3:14:
                    74:25:49:6c:70:6d:75:b5:a6:d2:bc:43:c9:a5:5a:
                    1e:e9:29:6c:a7:f3:e3:05:cf:89:1d:36:37:74:00:
                    b0:48:e9:a6:9d:2f:f3:18:f0:8c:71:7a:38:e4:d8:
                    7f:2e:1e:51:6d:0d:79:5b:16:fe:a5:ef:7a:dc:25:
                    ab:34:cd:f3:55:9f:2a:33:75:ad:3f:3b:15:69:0a:
                    f1:02:56:0a:06:ee:bd:48:67:2d:29:ed:15:b2:30:
                    cb:63:16:13:52:29:3f:85:05:5b:85:4c:fc:69:3e:
                    33:86:98:87:9f:d8:c1:1b:a3:0f:9e:c3:02:70:3a:
                    0e:46:ec:83:50:21:1b:12:aa:ff:f2:23:80:2f:05:
                    4f:40:7d:f5:54:c1:1f:b0:49:6f:38:5a:1d:99:4a:
                    1d:7f:d6:66:69:5b:80:33:f0:ff:d1:8e:1d:ae:f4:
                    85:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DD:B2:48:C9:FD:46:43:3E:D6:EF:8C:50:AB:9E:7E:4F:0C:CC:BF
            X509v3 Authority Key Identifier:
                keyid:D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:64:05:1c:81:0a:d3:f2:01:7c:96:7a:f8:e2:67:ed:95:e4:
         ac:d1:51:90:cf:2c:f1:6a:13:41:2a:7e:fd:cf:de:0b:93:b6:
         0b:e7:25:db:1b:8a:ed:d3:44:78:01:c8:7a:49:56:66:0d:b2:
         7a:17:4b:3c:ea:4f:36:42:ce:ff:32:6c:07:ac:23:38:ee:00:
         44:c4:09:8b:1e:86:49:ab:c5:93:a1:f9:e4:2b:85:c6:10:1b:
         d5:33:ff:94:33:78:e9:ec:ae:b4:ce:c4:33:ee:0e:de:83:07:
         e2:4c:99:3d:14:bf:89:31:f9:b8:ba:5f:3b:7b:1a:9b:26:e1:
         d4:d3:22:3a:de:82:23:84:90:ad:8f:e8:89:0f:e1:b4:7f:b1:
         cc:4b:66:a3:5c:5a:5c:ce:ad:40:1b:ec:48:6e:80:bc:fe:5d:
         f6:2d:87:7c:85:4d:cc:6a:2e:b9:5c:5e:bc:2b:48:03:16:ab:
         04:d7:20:63:f3:d9:0f:0a:b6:cb:d7:b1:36:9b:7d:5f:67:5b:
         9b:60:a1:06:6f:df:f4:81:4b:5e:e3:b1:0f:30:06:9c:39:fd:
         38:50:fd:51:64:cc:53:9e:99:1a:7d:07:f5:13:6d:cc:dd:b1:
         e5:6e:1e:d3:98:e8:fd:76:00:20:9a:ee:98:f0:a3:11:81:c1:
         db:86:d4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:59:28 2026 by rpki-client