Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
File:                     8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft (raw, json)
Hash identifier:          4/6NtEOGLDTdX6d6E5DKOXzk7xtEW+e0jz00XA9JEDk=
Subject key identifier:   D7:6D:77:D8:C2:6F:60:8B:21:C9:FA:8C:2F:4A:D0:82:BA:67:8A:AE
Authority key identifier: F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
Certificate issuer:       /CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Certificate serial:       01A0CBC81FE06E5469AB28F9CCF2DB8AEFEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
Manifest number:          1A66
Signing time:             Wed 23 Sep 2026 01:01:25 +0000
Manifest this update:     Wed 23 Sep 2026 01:01:25 +0000
Manifest next update:     Thu 24 Sep 2026 01:01:25 +0000
Files and hashes:         1: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl (hash: hPkbD//5/fq7Sgtk6Uk1ch3tJKD+H/IKpI8ZQyzwtoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 01:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c8:1f:e0:6e:54:69:ab:28:f9:cc:f2:db:8a:ef:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f27808519f2b08045c7fb41a61fda4e09e51891b
        Validity
            Not Before: Sep 23 01:01:25 2026 GMT
            Not After : Sep 24 01:01:25 2026 GMT
        Subject: CN=d76d77d8c26f608b21c9fa8c2f4ad082ba678aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a3:f6:93:36:4a:72:2e:3f:70:b2:9e:be:67:
                    ec:26:4e:c8:4f:3f:3e:12:fa:a1:3a:ae:00:7a:48:
                    9e:2d:dc:ce:de:56:3c:03:f0:06:c7:39:db:8c:53:
                    9f:f0:f0:24:20:da:f8:a4:d8:5f:b6:43:bc:94:ba:
                    7f:01:91:13:2c:f1:71:a6:84:ba:0c:58:a6:b0:d7:
                    6d:17:5e:dd:8b:8d:51:43:46:b6:ec:13:5e:8e:62:
                    86:2a:b5:48:9b:74:80:43:d7:24:a2:61:d1:59:a0:
                    a7:4b:58:0c:71:9d:b4:8e:c9:2d:f1:c9:9d:ad:17:
                    10:02:7f:a6:c2:e9:17:fb:54:02:43:f5:11:11:be:
                    0a:72:44:b7:5e:be:c3:c6:6c:4b:23:bf:75:3e:67:
                    fa:cc:fc:77:2b:af:f5:c9:84:5d:b3:1d:c6:48:75:
                    a1:48:e2:82:e7:5d:3c:b2:3e:39:40:10:bd:e6:f2:
                    cd:98:ab:62:ab:b0:ce:19:ff:cc:b8:16:c9:51:4b:
                    da:12:e8:98:15:fa:b8:38:40:01:87:69:a1:e0:92:
                    da:5b:84:8f:58:d5:91:e1:3e:0e:bd:c1:f3:6d:47:
                    39:bc:91:42:67:0a:3d:5e:b3:60:2b:d2:17:92:90:
                    f4:eb:42:57:90:3c:ba:e3:33:01:ec:9b:85:89:b1:
                    1a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6D:77:D8:C2:6F:60:8B:21:C9:FA:8C:2F:4A:D0:82:BA:67:8A:AE
            X509v3 Authority Key Identifier:
                keyid:F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:4a:1d:9a:52:44:c5:8c:17:bc:82:d3:eb:41:cd:0f:42:3a:
         e9:1e:f2:a3:85:4d:b7:75:aa:87:23:b9:54:4c:2c:45:7b:2a:
         80:bb:8b:74:bc:f8:6e:96:75:84:68:d8:78:b5:15:8a:e8:ac:
         6c:98:d6:52:a9:74:2f:1e:1d:00:b9:ba:94:ed:01:05:b9:1d:
         97:93:61:30:9b:eb:31:37:47:cf:a9:71:e2:67:76:23:91:eb:
         19:b1:d1:9e:3b:a8:05:5f:d4:39:ff:70:4e:47:4c:d0:01:a9:
         d9:70:65:93:a6:27:fa:4a:ce:62:e1:32:0b:54:2c:b2:bd:3c:
         18:d4:a3:21:39:22:0f:89:4f:b5:52:74:07:e7:eb:33:c6:65:
         19:b3:26:f4:a8:1b:1c:e5:bf:d8:38:65:10:a7:b9:61:85:7e:
         17:da:5e:ca:9b:cd:3a:91:5d:66:14:b7:bd:5f:2c:c3:27:c1:
         19:8b:36:21:25:66:f2:0d:3f:55:6e:c5:d2:4d:ce:a3:46:e1:
         4e:9b:9c:41:2a:9a:14:b4:ab:ac:dc:72:de:99:bd:3f:61:c2:
         87:c8:da:85:40:82:e8:a6:f4:3d:e2:d2:65:c5:29:16:d4:c0:
         a2:49:b3:a9:1d:c7:ab:a9:8c:0e:77:18:a5:e0:97:58:91:94:
         e9:e0:4d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----