Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
File:                     8DqRN3TbyeYF3BerI6BaFoA5jeU.mft (raw, json)
Hash identifier:          PbZbXwwurSNOkvb0n3GjrnDY1dbu4vq7NJxL13cBv/E=
Subject key identifier:   B0:72:FF:1B:A3:CF:8D:49:38:93:9B:0A:F9:AE:0E:8C:16:9F:1D:16
Authority key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
Certificate issuer:       /CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Certificate serial:       01A1DD26CD6A6F39E39FF3A1A40C4A495274
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
Manifest number:          0EBA
Signing time:             Sun 15 Nov 2026 03:01:09 +0000
Manifest this update:     Sun 15 Nov 2026 03:01:09 +0000
Manifest next update:     Mon 16 Nov 2026 03:01:09 +0000
Files and hashes:         1: 8DqRN3TbyeYF3BerI6BaFoA5jeU.crl (hash: UmPyUgNsyYq8qDZBVPdLUoNa++u6NNFrC9/zqoMJtb4=)
                          2: oDHRY2p4X6qIRWZRDGncYz0E4F0.roa (hash: DS/v77bYi2U6NujVd5gI6DZQbrS7LjtyuAFDzI6STCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 03:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:26:cd:6a:6f:39:e3:9f:f3:a1:a4:0c:4a:49:52:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03a913774dbc9e605dc17ab23a05a1680398de5
        Validity
            Not Before: Nov 15 03:01:09 2026 GMT
            Not After : Nov 16 03:01:09 2026 GMT
        Subject: CN=b072ff1ba3cf8d4938939b0af9ae0e8c169f1d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b5:73:7a:f9:63:cc:f0:46:79:51:79:3a:f0:
                    e3:c6:25:ae:5b:0e:95:9b:77:a8:38:e7:bc:33:b8:
                    7b:60:2e:c0:88:21:71:34:6d:30:1a:b7:be:34:27:
                    7e:04:1c:21:f2:57:72:d4:50:4a:a9:d9:4e:75:54:
                    b9:af:e3:ce:9e:e5:bd:12:d8:dc:85:1a:18:34:b7:
                    cd:1d:f4:46:60:c9:f5:67:bc:cd:5e:9e:7e:09:3b:
                    2d:b0:c1:6d:29:7d:75:fb:93:7e:f1:1a:da:f2:49:
                    6f:70:e1:b1:3f:44:0d:87:2b:d2:59:21:ac:a6:52:
                    34:d8:78:66:a5:19:47:f4:67:59:92:b1:55:8a:f3:
                    f2:c4:31:d1:3d:81:ea:a6:65:36:3f:41:26:0b:af:
                    fb:07:9c:98:9b:64:98:95:a4:cc:b6:1a:f5:54:68:
                    74:34:3d:6d:0a:d2:0f:5b:27:d3:b7:1a:32:3f:fa:
                    b1:ff:6a:52:2a:27:83:0b:61:57:83:f5:6b:5f:03:
                    71:06:16:be:f9:7e:b1:ce:f1:b0:b9:de:9a:0e:46:
                    d4:6f:95:81:e3:86:05:3b:ad:8c:6c:21:d0:7f:aa:
                    ea:29:8f:80:00:b8:f9:e5:cf:28:d0:ac:56:c1:b5:
                    4c:fe:9a:af:b2:33:e2:6b:42:36:28:9d:15:8f:7f:
                    b8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:72:FF:1B:A3:CF:8D:49:38:93:9B:0A:F9:AE:0E:8C:16:9F:1D:16
            X509v3 Authority Key Identifier:
                keyid:F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:0c:68:d5:55:b6:80:c2:31:1c:6f:67:cb:43:d0:bf:fd:4d:
         59:48:ef:53:fa:42:94:f2:b5:0c:ea:c4:e0:20:13:7c:c6:a0:
         31:e5:47:f6:f3:27:c3:5e:a2:bb:8e:9e:13:6b:dc:2a:e0:c9:
         f4:2e:20:84:13:97:51:58:6b:bb:79:9e:56:df:2f:38:41:52:
         8a:9b:41:8f:2c:32:66:c2:67:38:64:56:aa:b4:88:a7:4e:78:
         78:c4:29:67:40:95:f4:3e:c0:5d:6c:b9:ad:1e:3f:ab:0a:35:
         58:4e:48:bc:41:7e:67:13:75:fa:d4:f5:01:74:3d:62:9a:8f:
         39:f2:b6:8f:28:5f:af:64:c7:53:27:37:83:46:2b:a7:ce:08:
         6d:f9:9f:fb:ef:d3:c6:a3:88:46:d0:1d:2d:3e:ee:d7:bc:90:
         99:1b:ee:ad:e8:ec:bb:1e:79:c8:c8:c7:64:76:3b:a5:17:9c:
         80:2c:40:65:df:16:3e:90:59:e8:53:d4:d3:d4:49:15:8c:79:
         d8:7a:60:1a:b9:19:6d:0e:d9:fd:b3:ba:30:2b:4f:32:a2:5b:
         65:9d:82:e7:54:a9:0d:61:b8:1a:04:79:3a:fa:c2:f0:4b:dd:
         42:25:16:3f:2e:d1:6e:7b:1e:e8:15:60:08:dc:8b:41:e2:d0:
         bf:6f:9b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:14:11 2026 by rpki-client