Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
File:                     8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json)
Hash identifier:          AI6JchXXHjbptXSPlFhp2rHxwUkniUjv0LD050ymPJA=
Subject key identifier:   DD:6D:C6:92:DB:8B:5B:54:3E:42:4E:16:A5:BB:5B:10:0A:26:A5:85
Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
Certificate issuer:       /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Certificate serial:       01A0CAB4ABFFC9098E2639746B3A8B4E6BBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
Manifest number:          1A6B
Signing time:             Tue 22 Sep 2026 20:00:33 +0000
Manifest this update:     Tue 22 Sep 2026 20:00:33 +0000
Manifest next update:     Wed 23 Sep 2026 20:00:33 +0000
Files and hashes:         1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: GBO4mxvs/Um5W6f4232LK/it/1VcLDa1hyFwlUrg21A=)
                          2: UFHh3vV19ELev_hBQqmjdsJvdRk.roa (hash: xSmonOfsBVxyyfdFAzmkSxeWMqfBkDOi/XXRvC/iB2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:b4:ab:ff:c9:09:8e:26:39:74:6b:3a:8b:4e:6b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
        Validity
            Not Before: Sep 22 20:00:33 2026 GMT
            Not After : Sep 23 20:00:33 2026 GMT
        Subject: CN=dd6dc692db8b5b543e424e16a5bb5b100a26a585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cc:50:47:ce:06:63:2f:1a:73:6a:d5:6e:a2:
                    25:07:e4:d2:27:a5:05:b4:35:9d:93:68:49:1f:90:
                    8b:49:8c:dc:65:5d:b3:d1:d4:1f:8f:52:1b:b6:65:
                    82:01:f9:dc:13:d5:9b:4b:eb:b2:84:1a:df:62:00:
                    21:eb:82:2e:fb:0b:ce:dc:32:e7:b1:ff:be:fd:96:
                    dc:30:bd:91:2b:90:81:84:8d:21:44:b2:2a:96:dd:
                    86:c2:75:a2:bb:4a:1b:93:89:57:4d:0c:c7:03:7b:
                    1a:b2:78:e1:a9:13:df:9b:0c:f3:d7:9e:9f:b0:68:
                    63:87:18:e3:b2:45:06:01:a1:d4:2a:27:92:90:d0:
                    73:9b:07:8e:5f:0f:3c:59:cf:0e:34:48:74:9a:ec:
                    9f:54:41:7e:e0:59:1c:71:82:9b:d4:db:3d:cb:03:
                    24:25:0b:62:82:70:02:b0:5b:96:02:97:10:2f:ff:
                    97:6d:3e:c4:0e:e2:a7:36:c3:28:c4:dd:7a:85:9a:
                    6b:e4:93:9b:13:7a:07:0a:cc:d0:1d:f1:ba:b8:3d:
                    70:ea:0f:e3:bf:e4:24:0d:57:3c:d3:46:74:60:72:
                    fa:52:58:b6:10:42:b7:77:bd:2d:dc:c0:3c:f3:a2:
                    6c:81:00:0b:5d:7b:5e:4f:b0:b0:ea:44:3f:a5:c2:
                    99:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6D:C6:92:DB:8B:5B:54:3E:42:4E:16:A5:BB:5B:10:0A:26:A5:85
            X509v3 Authority Key Identifier:
                keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0d:3c:d9:59:fd:d4:0a:64:6b:2f:28:d7:a9:fe:d9:67:2d:
         86:f4:35:8d:37:f4:b7:40:09:be:69:3b:a8:e5:d9:8c:17:7f:
         0b:a8:25:4b:2a:98:87:b6:8d:46:14:42:6e:b2:6c:8d:d3:b5:
         e8:7d:9e:1c:f6:c0:ee:7f:6a:6a:ae:a7:2b:6b:f1:84:bf:72:
         52:c1:b5:fe:b8:b3:5d:0c:7a:bf:c8:20:46:04:f8:53:8d:3d:
         70:22:11:59:ba:c6:03:80:ce:b5:f3:ae:48:8e:b6:ae:f0:4b:
         55:8c:bb:a1:2c:ae:e1:e6:80:20:68:49:d5:f9:1f:3f:bd:9d:
         97:90:55:92:e8:57:33:8c:bb:28:1a:67:6a:9b:80:40:d0:cd:
         64:e1:ec:8e:9b:3a:4d:d2:35:55:7e:6a:73:04:ad:1d:c1:27:
         26:4a:e5:9e:54:22:51:fc:ae:e7:aa:d6:f3:8d:51:01:fc:bc:
         22:6d:57:de:72:11:cf:75:6e:68:51:bf:47:e0:c4:d5:f3:71:
         cf:5e:6a:07:85:3b:7d:da:9c:39:ec:f5:6c:42:fc:34:16:8f:
         be:47:d2:a1:93:1e:59:82:65:a5:ce:68:f8:09:94:17:f1:ee:
         72:63:d8:4d:45:83:b7:fe:f5:1b:67:ad:93:1f:f3:b6:0e:2d:
         bb:ee:34:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKtKv/yQmOJjl0azqLTmu6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOWE1ZDVjYjc5NDljZTFiZDIwOWRjMjEzOTkzNTIwZTAy
ZDEwODUwHhcNMjYwOTIyMjAwMDMzWhcNMjYwOTIzMjAwMDMzWjAzMTEwLwYDVQQD
EyhkZDZkYzY5MmRiOGI1YjU0M2U0MjRlMTZhNWJiNWIxMDBhMjZhNTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8xQR84GYy8ac2rVbqIlB+TSJ6UF
tDWdk2hJH5CLSYzcZV2z0dQfj1IbtmWCAfncE9WbS+uyhBrfYgAh64Iu+wvO3DLn
sf++/ZbcML2RK5CBhI0hRLIqlt2GwnWiu0obk4lXTQzHA3sasnjhqRPfmwzz156f
sGhjhxjjskUGAaHUKieSkNBzmweOXw88Wc8ONEh0muyfVEF+4FkccYKb1Ns9ywMk
JQtignACsFuWApcQL/+XbT7EDuKnNsMoxN16hZpr5JObE3oHCszQHfG6uD1w6g/j
v+QkDVc800Z0YHL6Uli2EEK3d70t3MA886JsgQALXXteT7Cw6kQ/pcKZqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1txpLbi1tUPkJOFqW7WxAKJqWFMB8GA1UdIwQY
MBaAFPGaXVy3lJzhvSCdwhOZNSDgLRCFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zMDliZmQtY2JlNy00MTQ0LWE2MzAt
MmY4MGEwYTAyMDZhLzEvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zMDliZmQtY2JlNy00MTQ0LWE2MzAtMmY4MGEwYTAyMDZh
LzEvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWw082Vn9
1Apkay8o16n+2WcthvQ1jTf0t0AJvmk7qOXZjBd/C6glSyqYh7aNRhRCbrJsjdO1
6H2eHPbA7n9qaq6nK2vxhL9yUsG1/rizXQx6v8ggRgT4U409cCIRWbrGA4DOtfOu
SI62rvBLVYy7oSyu4eaAIGhJ1fkfP72dl5BVkuhXM4y7KBpnapuAQNDNZOHsjps6
TdI1VX5qcwStHcEnJkrlnlQiUfyu56rW841RAfy8Im1X3nIRz3VuaFG/R+DE1fNx
z15qB4U7fdqcOez1bEL8NBaPvkfSoZMeWYJlpc5o+AmUF/HucmPYTUWDt/71G2et
kx/ztg4tu+40kg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:41:45 2026 by rpki-client