Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
File:                     8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json)
Hash identifier:          noMlbpw9/4wlpT4r588QEDtzQj37lAqibepw2bptxE4=
Subject key identifier:   F7:10:75:23:19:1E:07:AE:73:34:1B:3C:DE:44:A7:05:47:B4:49:44
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Certificate issuer:       /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial:       01A0DC84F8B54E4F6C69AA8CDFBCC2F39B40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
Manifest number:          1707
Signing time:             Sat 26 Sep 2026 07:01:36 +0000
Manifest this update:     Sat 26 Sep 2026 07:01:36 +0000
Manifest next update:     Sun 27 Sep 2026 07:01:36 +0000
Files and hashes:         1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: i5IxBwik8KasksCuWiXo8y0EyjzEVsfnSribohvRocY=)
                          2: pC6yrC521DUSFdHvnN6nZBgdl4c.roa (hash: z+BhB5WQOVSUH87uyCcKJiZh6jGZu+fv92loh3SKjUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 07:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:84:f8:b5:4e:4f:6c:69:aa:8c:df:bc:c2:f3:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
        Validity
            Not Before: Sep 26 07:01:36 2026 GMT
            Not After : Sep 27 07:01:36 2026 GMT
        Subject: CN=f7107523191e07ae73341b3cde44a70547b44944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:cc:9b:b5:b4:44:de:6f:8d:40:39:2b:7d:e7:
                    e1:f3:45:c7:c0:2a:f3:c0:c5:03:47:a9:81:65:3a:
                    00:90:1e:e9:9f:cf:77:cb:05:08:ae:95:49:b9:96:
                    0f:b1:03:1e:c7:c2:97:4e:76:2f:8e:8f:16:4a:db:
                    bc:7d:e3:43:24:aa:c8:5c:5d:84:04:79:3f:56:a7:
                    5d:45:16:5f:11:16:67:75:cb:b5:76:a6:6e:8a:3b:
                    fe:06:fc:ed:7e:e7:53:3d:37:fb:cd:88:1a:59:54:
                    86:c9:3a:82:16:8f:0c:a8:26:6a:5a:02:8c:f7:5f:
                    64:6b:b2:f7:c7:bf:d4:26:d9:82:22:fd:48:ab:f4:
                    e7:ab:a3:b9:a9:a5:b3:a4:e2:68:22:bb:6d:b6:e4:
                    32:ce:8c:9a:90:98:a4:83:59:6b:e1:e6:a2:7d:2d:
                    2c:c1:ec:50:0a:23:a4:61:1a:3d:ad:dd:be:3b:58:
                    21:fc:ce:87:d3:8e:6a:e9:8b:e7:f5:f8:bf:5c:05:
                    1e:96:c2:b8:88:1d:42:f8:9b:b6:49:c4:a0:16:5d:
                    8e:4b:25:8c:a1:26:d2:71:a8:eb:75:87:57:fd:57:
                    cf:18:12:11:99:3a:72:2e:df:a4:83:f6:ca:39:d6:
                    b7:19:40:72:d8:d0:f3:64:68:61:2c:9b:74:54:d5:
                    2c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:10:75:23:19:1E:07:AE:73:34:1B:3C:DE:44:A7:05:47:B4:49:44
            X509v3 Authority Key Identifier:
                keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d9:33:70:f6:7b:0c:42:ca:e2:09:8b:17:df:cf:1c:1a:28:
         08:00:a2:f7:4c:e8:7a:31:81:ca:aa:41:0e:ad:a5:7e:1b:b0:
         b3:e0:85:48:76:82:56:1e:2d:59:31:32:27:5a:5e:e5:68:e1:
         c9:dd:5f:d3:fb:a5:c6:92:62:53:f1:f5:c0:e0:10:d2:a3:34:
         6c:b0:1d:bd:0d:46:92:87:13:f6:88:bd:86:49:20:01:d0:f9:
         55:04:74:17:a2:1c:4a:09:b0:ed:b3:f8:52:e7:4d:c5:db:d7:
         48:44:73:3a:83:40:b9:50:8b:24:02:8f:81:2c:18:cb:1d:78:
         48:f0:da:73:35:fa:ea:dd:c3:6e:49:5f:83:e7:d2:5c:3b:11:
         12:25:27:2f:24:78:a1:ee:53:0a:bb:7c:44:2a:8b:d9:d7:fc:
         74:51:c7:4d:44:f0:d5:f1:9c:84:86:09:f5:b8:c4:c6:6a:b6:
         88:b1:e3:d4:97:a5:46:64:40:73:48:6f:81:c3:fc:c4:06:d9:
         0e:07:6e:0c:97:ad:a7:5c:dd:40:d9:e2:8a:b2:b9:2e:73:15:
         30:e4:99:1d:3c:08:43:04:4c:e0:ad:ee:fc:ae:42:9a:7b:56:
         59:d8:e1:22:65:e2:83:44:c5:9f:db:76:ed:0a:81:1d:38:9c:
         e5:86:67:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:31:02 2026 by rpki-client