Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
File:                     08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json)
Hash identifier:          XvNEFltyryvp6bugff1pLklspuKWO48qmR8SKvhOkLY=
Subject key identifier:   21:F1:D0:90:88:EB:E3:B4:15:8E:C3:1E:E8:D4:56:3F:D1:8C:1B:9D
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Certificate issuer:       /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial:       01A0CD1177CBD9F9679310EAAA041E7479F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
Manifest number:          137B
Signing time:             Wed 23 Sep 2026 07:01:09 +0000
Manifest this update:     Wed 23 Sep 2026 07:01:09 +0000
Manifest next update:     Thu 24 Sep 2026 07:01:09 +0000
Files and hashes:         1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: 2qtWgfBL6y+9+0JtwGaaxLLq45k9uUftNna+Uxqa46g=)
                          2: 8iiGHlsOJWwsrr4dYEu2DAJmDu4.roa (hash: 8N8stGdhMpNHOzJEakrzgY5qXFCD32clBj0A+s284Zo=)
                          3: AFteCS1Hd7e6qi02RMRsgw9AZFI.roa (hash: gi5cvPOf8jzBgqQP0MjAWXH2Iw3GEPq9YJDLxWTBGA8=)
                          4: EsIWvzYNxFeMPUFmjBH6kTpjbB0.roa (hash: 9ZtPQ0L/4UvcfpXOzs0mWSnfUX+7UiuSsVqPpiFMuzI=)
                          5: NYre9NG9YeEOV-9DADYBR1_ANFc.roa (hash: SGio3sReojeOyDGlNC4y1GQcfv+IKwO1tdbB5z6Ax9c=)
                          6: ilxsUka29LSmxhagYYgOUwx9G1M.roa (hash: Z+faE599Aw5TvsDGU85PKGJH3ruym0pUbib3gVDAVFE=)
                          7: ur620Y0Jnk61OHeYYoTBq--EZKE.roa (hash: OtNM19zTl3crChLyF+XGQsp+urHf9QrZvH/kX/2ejmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 07:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:11:77:cb:d9:f9:67:93:10:ea:aa:04:1e:74:79:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
        Validity
            Not Before: Sep 23 07:01:09 2026 GMT
            Not After : Sep 24 07:01:09 2026 GMT
        Subject: CN=21f1d09088ebe3b4158ec31ee8d4563fd18c1b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:75:e6:dc:ec:a4:66:d3:a4:9b:ff:ff:73:b4:
                    d2:04:6a:8f:58:9d:e3:13:27:a7:30:e5:66:ce:70:
                    c9:23:92:ce:5d:d3:0f:f6:d5:c7:f8:12:e7:22:b7:
                    a8:26:05:f3:0e:8e:21:e9:8a:4a:15:1a:4d:a4:72:
                    e9:7b:4c:46:2e:f6:ef:ce:c3:ef:c7:f3:b3:de:f2:
                    16:d5:1c:4b:7d:d9:ae:22:38:79:8c:fe:96:af:f5:
                    b9:b3:4b:ba:6b:c1:a2:4e:72:3e:2c:36:9e:ff:06:
                    f0:66:1f:f4:70:3d:5e:90:22:25:c6:ba:d0:57:fd:
                    77:b2:7d:b2:ea:85:ed:de:41:28:b6:88:24:f1:b0:
                    b6:22:96:50:f3:dc:d3:1e:54:5d:2d:0e:45:97:f8:
                    f2:d0:ee:6f:60:f4:1b:ad:ee:23:3a:ea:c2:74:12:
                    88:7d:35:1c:d3:b6:ba:a5:b8:4b:99:a3:8e:ff:11:
                    11:97:fb:50:b3:05:72:5b:f1:96:26:45:e2:c1:a3:
                    6b:b5:d6:4d:5b:93:f5:9b:0c:8a:c9:b4:5a:bc:85:
                    94:f8:5f:ef:7a:4b:82:22:80:a4:45:d7:d3:b1:bd:
                    5a:0a:8b:45:d1:9b:a9:f8:2e:74:89:43:ca:24:b0:
                    16:3c:39:c1:16:e4:1a:c3:5f:16:ef:02:3e:6f:ed:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F1:D0:90:88:EB:E3:B4:15:8E:C3:1E:E8:D4:56:3F:D1:8C:1B:9D
            X509v3 Authority Key Identifier:
                keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:da:a5:bc:5e:93:ba:80:87:0d:4e:05:d1:e7:1c:8c:f2:d7:
         ed:69:94:cd:be:61:4e:3a:19:2a:03:23:11:74:8b:e2:56:62:
         cd:da:b5:9a:e0:88:70:25:c8:84:84:e2:9d:ca:85:32:a2:aa:
         f8:c0:18:cc:ff:d4:7b:d2:fe:77:d4:83:61:2c:d1:82:58:3c:
         ec:08:ed:e7:93:24:58:91:94:f9:33:11:7f:df:dd:20:16:6c:
         64:af:9a:ae:9f:95:49:0a:30:a3:25:52:08:c6:a8:ee:1c:5a:
         11:cf:16:08:b3:b0:3d:c5:14:f0:64:1f:cf:da:a9:42:db:e5:
         de:49:07:68:a7:bc:44:01:8a:55:8e:14:a3:43:a4:36:77:e0:
         a9:a7:c0:15:57:82:63:6d:9e:84:4c:38:db:91:2e:2b:e5:5d:
         21:74:d3:af:5b:30:75:2c:41:5b:41:f7:1c:f9:91:2a:76:43:
         9e:a6:12:57:31:9e:2c:ed:f2:80:e9:a4:27:cf:58:3e:e6:5c:
         f3:b5:13:77:6b:bf:4c:cb:4c:96:fe:30:52:bf:a6:76:d9:10:
         e9:7b:89:96:0f:22:39:7b:7c:25:93:f3:a0:c1:e3:ef:69:43:
         fc:98:57:48:d7:45:3b:bb:56:6f:c8:cb:99:54:a9:e2:9d:99:
         cb:fb:5f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:28:48 2026 by rpki-client