Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/8-vHwbZUMXYi__kRI0BOtsQnr6I.mft
File:                     8-vHwbZUMXYi__kRI0BOtsQnr6I.mft (raw, json)
Hash identifier:          V5nLKsR4Nkcj3ZU2EF03AesK9sH2ZhcOOLJrPQgQ1mI=
Subject key identifier:   F0:3F:B2:30:F5:8C:08:6C:80:86:E3:B7:08:69:12:D7:A6:AD:A2:67
Authority key identifier: F3:EB:C7:C1:B6:54:31:76:22:FF:F9:11:23:40:4E:B6:C4:27:AF:A2
Certificate issuer:       /CN=f3ebc7c1b654317622fff91123404eb6c427afa2
Certificate serial:       01A0CE5AD4E23CC881554C459B4B11F07517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-vHwbZUMXYi__kRI0BOtsQnr6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/8-vHwbZUMXYi__kRI0BOtsQnr6I.mft
Manifest number:          024A
Signing time:             Wed 23 Sep 2026 13:00:54 +0000
Manifest this update:     Wed 23 Sep 2026 13:00:54 +0000
Manifest next update:     Thu 24 Sep 2026 13:00:54 +0000
Files and hashes:         1: 4v-r8tm-P9znIu9Sp8u0kVVPcGA.roa (hash: +BMKvF15LDUCBxzxeTxtgEpB32mqtwgEcOe7ln9nh3E=)
                          2: 8-vHwbZUMXYi__kRI0BOtsQnr6I.crl (hash: Zcw8vmHzBJcv464E664NeMPdcxxIZFkHBibgxOV2ezg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/8-vHwbZUMXYi__kRI0BOtsQnr6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/8-vHwbZUMXYi__kRI0BOtsQnr6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8-vHwbZUMXYi__kRI0BOtsQnr6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:d4:e2:3c:c8:81:55:4c:45:9b:4b:11:f0:75:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ebc7c1b654317622fff91123404eb6c427afa2
        Validity
            Not Before: Sep 23 13:00:54 2026 GMT
            Not After : Sep 24 13:00:54 2026 GMT
        Subject: CN=f03fb230f58c086c8086e3b7086912d7a6ada267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9a:8b:ca:25:22:46:9a:94:c0:08:9a:39:0f:
                    c7:36:3d:9b:22:ec:d9:2e:7a:ae:cf:69:bb:7a:a0:
                    74:42:87:ae:ba:aa:7a:f4:c6:b6:eb:50:5d:c1:b8:
                    1e:55:3e:ef:cb:b6:d9:60:57:e2:4a:87:b2:84:e9:
                    b5:9e:fb:6c:bf:66:74:4c:76:fc:f8:e7:e7:b2:09:
                    e3:0f:8e:5c:b8:bc:7b:41:0c:2a:2d:dc:ba:72:0c:
                    ba:90:06:ff:c9:c6:ac:61:80:81:37:53:1d:3e:7b:
                    19:3b:5d:b1:01:81:ce:5e:ba:79:42:a0:62:b0:96:
                    6f:0a:84:67:3f:3c:16:3e:93:7b:7b:65:8a:a2:58:
                    e6:47:b3:21:1c:66:f0:4e:f8:cb:8c:59:b2:e0:ce:
                    00:41:8a:0e:ee:91:a8:c5:e2:92:d0:2d:7b:bf:42:
                    ef:1a:b1:ff:d9:6b:59:b5:b4:97:7f:56:3c:26:77:
                    9d:17:b0:39:af:50:fa:02:08:97:d6:d5:c6:ab:ae:
                    29:b7:5a:f5:de:22:e1:0c:ba:5b:75:17:d8:48:1a:
                    0b:8c:8e:84:3f:cc:c7:3b:dc:dc:cb:36:38:a4:31:
                    2b:dc:06:c6:49:8d:ff:24:93:6b:7f:9d:ac:c1:ea:
                    1e:37:41:82:df:84:c4:b3:ff:98:be:c2:1b:cd:28:
                    8f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3F:B2:30:F5:8C:08:6C:80:86:E3:B7:08:69:12:D7:A6:AD:A2:67
            X509v3 Authority Key Identifier:
                keyid:F3:EB:C7:C1:B6:54:31:76:22:FF:F9:11:23:40:4E:B6:C4:27:AF:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-vHwbZUMXYi__kRI0BOtsQnr6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/8-vHwbZUMXYi__kRI0BOtsQnr6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/8-vHwbZUMXYi__kRI0BOtsQnr6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:80:e2:cb:bb:34:a6:6d:b1:f2:90:c6:c6:2e:25:fe:99:72:
         4c:9f:4a:1d:0a:08:c3:8a:36:47:c4:c3:f1:ee:2f:09:49:a1:
         c3:ff:a2:77:fb:14:c2:51:97:b1:a4:8b:a0:08:0a:02:3a:10:
         06:3e:5d:52:a0:eb:77:c2:7e:bc:b8:94:f9:86:30:19:70:0f:
         64:25:bb:b8:48:57:94:9a:bb:be:30:ba:da:3b:81:92:f8:0f:
         96:79:d1:e9:6a:e1:34:20:03:c1:fd:58:0c:16:8a:40:e5:49:
         6a:5e:82:46:38:1c:1b:85:ec:8d:2d:93:56:ad:09:6d:ee:72:
         10:45:e5:52:a5:c2:99:d4:9f:2b:20:1b:93:5c:47:93:f7:9e:
         7c:f5:4d:8a:68:b6:bc:5b:02:95:12:bf:e7:2b:f7:5c:54:82:
         27:67:5b:bd:d8:00:f8:0d:f5:6e:46:62:08:64:d7:46:f1:4b:
         e9:12:24:7e:4d:25:b2:38:66:54:64:8c:4d:4a:9e:5f:41:85:
         10:80:80:4e:bf:7e:2a:4c:8c:43:fb:b9:d7:fb:43:a5:fa:ad:
         e3:8f:f0:81:87:4b:2f:69:00:10:e1:44:7c:14:40:2f:4a:6f:
         7d:38:0d:8e:f8:6c:0f:25:df:ce:bb:d2:3a:91:e6:6b:36:dc:
         f1:1e:63:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:24:47 2026 by rpki-client