Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
File:                     8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json)
Hash identifier:          GwbJczESYzhIyAGDpocl2EbpxyzgGNIgvA2jaZ50PDs=
Subject key identifier:   D9:E5:26:4A:7B:83:53:98:98:74:54:F8:A8:1A:C1:D0:1D:8A:4C:85
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Certificate issuer:       /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial:       01A0FD5900EED434C067036C44678AFB2D26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
Manifest number:          1718
Signing time:             Fri 02 Oct 2026 16:01:03 +0000
Manifest this update:     Fri 02 Oct 2026 16:01:03 +0000
Manifest next update:     Sat 03 Oct 2026 16:01:03 +0000
Files and hashes:         1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: jfbqeD74qZwSBnoWNBQZKD32NhzTIEY3kAZOejGpFtI=)
                          2: pC6yrC521DUSFdHvnN6nZBgdl4c.roa (hash: z+BhB5WQOVSUH87uyCcKJiZh6jGZu+fv92loh3SKjUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 16:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fd:59:00:ee:d4:34:c0:67:03:6c:44:67:8a:fb:2d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
        Validity
            Not Before: Oct  2 16:01:03 2026 GMT
            Not After : Oct  3 16:01:03 2026 GMT
        Subject: CN=d9e5264a7b835398987454f8a81ac1d01d8a4c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:13:ec:3a:e4:1c:7c:2d:58:73:22:d9:75:60:
                    c3:d5:bb:2a:99:7f:29:c2:16:1d:09:7d:1d:5a:b9:
                    d0:41:00:72:96:e4:cd:65:0d:66:47:15:ca:19:d8:
                    9d:dc:2b:38:19:05:46:92:1d:44:9e:ce:9d:62:5e:
                    09:3e:66:c0:65:ff:b5:43:9e:a7:30:d7:24:66:05:
                    1b:6e:67:42:dd:ff:e1:48:cc:c1:bf:a6:41:5f:e0:
                    ab:a2:8c:bf:71:ec:98:1c:cb:11:b2:f3:bb:13:8b:
                    05:06:d3:93:d8:0a:d4:e0:4b:9f:86:e8:bb:16:63:
                    e2:30:0d:1f:7b:f6:04:93:d8:da:44:7d:8d:38:7e:
                    6a:9b:63:d9:c1:3f:eb:41:cd:69:72:02:c9:e5:4d:
                    d5:96:82:14:47:73:f7:8c:5d:0f:f0:b2:c7:4a:e1:
                    0d:ad:b8:79:69:08:82:6d:68:f6:25:52:16:f2:40:
                    f9:8e:8a:e6:0e:df:de:47:a2:19:b7:93:f5:51:d9:
                    b4:60:ca:fe:a5:02:4a:29:88:ab:7b:f0:ba:19:0b:
                    64:a9:70:b5:24:83:1b:d9:d2:6b:ed:0e:8c:34:ba:
                    b4:f4:2e:32:a0:d0:dc:91:0d:ee:e9:48:5b:ec:f4:
                    7e:44:44:b2:b7:e3:9b:91:41:7a:a6:c5:d7:19:de:
                    d6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E5:26:4A:7B:83:53:98:98:74:54:F8:A8:1A:C1:D0:1D:8A:4C:85
            X509v3 Authority Key Identifier:
                keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:37:d6:79:13:e3:3c:ca:46:ad:55:18:1f:75:d2:aa:4c:82:
         91:fa:e4:4e:62:ac:2a:3e:27:29:e5:57:fc:81:4c:8c:b9:a2:
         85:96:27:c2:49:a7:ab:9f:e9:b5:40:ae:00:51:f1:5e:bd:41:
         41:a4:63:1c:dd:a3:a3:e9:d8:e0:be:51:44:86:50:37:7a:c1:
         52:97:ed:8c:6b:cd:b0:da:f9:b1:57:c5:60:d3:0e:f8:81:25:
         80:7f:94:10:ff:9d:db:af:d5:96:4b:50:91:10:20:00:89:19:
         b7:2a:2b:3a:64:8f:97:ef:ff:41:ba:b6:ec:20:a3:ad:bc:bb:
         ec:f2:8d:f7:87:4b:28:ce:ff:54:34:43:8b:8d:99:6a:e3:f2:
         f6:bd:de:19:5c:74:d4:84:6d:87:96:c0:bc:4b:be:bc:1c:04:
         6c:a6:35:76:29:4a:c4:cf:36:1a:9c:f4:ed:06:dc:f7:bd:1c:
         f8:da:e1:ac:5e:c9:1b:0a:dd:26:1a:57:2a:a9:4a:93:6e:f7:
         00:f0:2a:3f:c5:b0:c6:7a:ae:c2:8f:3c:c0:c3:4e:37:bb:c1:
         68:13:e1:63:f8:7d:59:1e:4d:cf:fb:69:67:57:32:07:3c:c9:
         56:f3:0e:61:91:90:ba:44:ee:dd:90:ac:e2:95:7f:bd:8d:1d:
         dc:b0:7f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 21:46:56 2026 by rpki-client