Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File:                     invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier:          mA+H0hbGCSOGdOt50BV9gAqMBjGRHcV4z5n3lTmbYMs=
Subject key identifier:   EB:39:E0:9A:93:A2:1E:23:0C:B6:96:7F:C5:B1:17:F8:D2:7E:C5:E6
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer:       /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial:       01A0DC172DAB8E3B9F69D04803FAFD5EA3B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number:          0803
Signing time:             Sat 26 Sep 2026 05:01:41 +0000
Manifest this update:     Sat 26 Sep 2026 05:01:41 +0000
Manifest next update:     Sun 27 Sep 2026 05:01:41 +0000
Files and hashes:         1: 13bg8sr321aaC-jFOX86O1_lBzU.roa (hash: bU7Oi7TbB7FOIxER/ptIdZra1cEI8qAD1Nz/78F0Vtg=)
                          2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: K7c4ZeS9s1gICawV7VcFNyfM0z+igDZrz273vJWt9so=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 05:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:17:2d:ab:8e:3b:9f:69:d0:48:03:fa:fd:5e:a3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
        Validity
            Not Before: Sep 26 05:01:41 2026 GMT
            Not After : Sep 27 05:01:41 2026 GMT
        Subject: CN=eb39e09a93a21e230cb6967fc5b117f8d27ec5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b5:2e:e3:7d:3a:a2:8b:7f:58:7e:ec:c4:07:
                    d3:d0:29:4f:82:bc:2b:66:f3:9a:52:4b:c9:1c:b2:
                    7a:62:01:fe:aa:f8:12:43:49:b0:1b:b3:0b:32:7f:
                    65:0e:c0:b6:44:c8:23:d2:82:54:3f:af:23:45:26:
                    3d:9b:6f:3a:b9:1d:65:78:fc:b9:0f:38:6d:06:b4:
                    92:49:da:2c:34:81:32:40:2d:4d:8c:2a:c3:b2:99:
                    ec:4f:0f:d1:d9:37:1c:fe:00:5c:15:d6:f4:34:68:
                    5d:85:60:fb:01:2f:3f:f0:b4:82:e8:21:3b:0b:7e:
                    88:38:71:9a:0c:75:8b:b9:0f:ee:4a:c6:40:98:cb:
                    f6:d4:ac:b5:52:19:55:25:4b:08:c5:14:81:8f:17:
                    9e:d3:3e:b8:43:0d:d2:5b:4b:34:8a:cf:e9:7a:cb:
                    c8:39:13:13:68:73:b0:e7:86:aa:5a:65:1e:32:c0:
                    b0:db:d9:e5:3f:7e:e1:87:af:02:49:f4:70:84:1d:
                    a2:f3:b2:07:b8:17:97:22:a7:85:ad:cc:3a:10:2b:
                    b8:af:b5:41:0f:80:bc:07:13:44:28:03:f4:e4:07:
                    dc:4f:47:5b:4c:9d:34:a5:d4:d7:7e:1b:a8:bc:15:
                    f6:25:39:34:c6:1b:e1:50:bd:31:47:76:e6:6a:e9:
                    ae:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:39:E0:9A:93:A2:1E:23:0C:B6:96:7F:C5:B1:17:F8:D2:7E:C5:E6
            X509v3 Authority Key Identifier:
                keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f4:3a:5e:d9:4a:6d:fc:ea:35:d3:3f:6d:49:3e:aa:25:e3:
         f4:9b:ab:03:72:ca:5d:ab:f7:a1:b3:5f:aa:ae:5b:89:f9:40:
         c5:87:46:f2:83:e6:34:fe:c4:76:8a:65:01:1a:11:fe:f6:37:
         50:bb:0a:79:8a:61:82:79:d2:c8:36:69:ad:71:0d:dc:49:6f:
         8e:75:67:d7:ae:bb:2c:0f:2a:5c:fc:b2:4d:34:65:90:b4:20:
         b6:a2:51:9e:04:1b:80:5c:24:a4:ca:cd:44:9e:d6:48:2c:54:
         75:16:db:22:b2:05:bb:7a:12:a5:7e:39:ae:c8:79:47:ca:18:
         04:01:f2:5c:58:65:93:85:89:a0:93:6f:27:ed:19:51:e3:81:
         24:32:36:30:4f:52:1b:db:3c:32:e4:d7:ec:3f:be:ab:d8:1f:
         91:01:42:cb:85:af:e1:b7:65:b7:8d:f7:81:5d:1d:88:f6:ed:
         15:f6:ad:08:4d:29:fb:a1:75:c5:21:d1:53:29:33:06:06:4f:
         e8:80:a4:92:84:f2:f3:61:e2:6a:60:85:46:1e:b0:a7:66:58:
         9c:c9:b1:b8:25:79:3d:98:e9:a1:97:8e:a6:c7:e9:b0:ca:8a:
         ce:5a:ca:40:9e:68:89:32:80:09:d5:e7:76:76:64:cc:07:9f:
         6a:73:d3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:15:54 2026 by rpki-client