Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
File:                     8_74sMHKR-cW2iGdMQKAKH026-M.mft (raw, json)
Hash identifier:          wBhMPRLr5s3fRYwBBI9sET72+4s2XDAuY/GJ/bf6cDI=
Subject key identifier:   A2:43:1A:42:3F:D9:00:66:C8:5E:48:22:D6:9A:A4:F4:B5:FB:F0:B0
Authority key identifier: F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3
Certificate issuer:       /CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
Certificate serial:       01A0CFDAC679BD8F283AFCC28E0C3560B98A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
Manifest number:          10F8
Signing time:             Wed 23 Sep 2026 20:00:16 +0000
Manifest this update:     Wed 23 Sep 2026 20:00:16 +0000
Manifest next update:     Thu 24 Sep 2026 20:00:16 +0000
Files and hashes:         1: 8_74sMHKR-cW2iGdMQKAKH026-M.crl (hash: 5rTyAM1b+3wN3teX4TlNsUcq/ddXw1QV8201AjG6Obc=)
                          2: UIIn39nTLp1morWauT7gr2in8-4.roa (hash: jTFbYC8gMB5ReO3RhcTGo44tsBwWXySORvyGFBMm9pk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:da:c6:79:bd:8f:28:3a:fc:c2:8e:0c:35:60:b9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
        Validity
            Not Before: Sep 23 20:00:16 2026 GMT
            Not After : Sep 24 20:00:16 2026 GMT
        Subject: CN=a2431a423fd90066c85e4822d69aa4f4b5fbf0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6c:04:86:a4:e5:ef:f4:3b:c3:60:09:c1:c2:
                    fd:fe:61:b1:21:0c:bc:3f:73:bf:db:c2:f0:99:ba:
                    e9:87:ff:6f:eb:d0:0f:03:41:4d:ac:ae:19:95:b0:
                    10:28:6d:3b:ab:65:ee:d5:b0:96:b1:82:15:f2:05:
                    b7:42:96:dc:89:70:3c:9d:17:19:10:9b:7f:dd:08:
                    e1:0d:4c:5e:e2:f9:16:53:e8:e4:42:be:81:ec:bb:
                    10:bb:d2:3a:30:0a:a2:ff:c9:7a:05:04:00:22:19:
                    c9:ea:52:57:09:37:ba:c3:39:8b:73:77:90:d7:d4:
                    8f:2b:0f:7d:d3:07:45:7e:e8:a0:7f:96:c9:50:c5:
                    39:31:51:e7:7f:97:83:65:5f:5d:40:ba:7b:18:7e:
                    79:a4:75:b1:7e:5a:1d:b8:75:43:97:98:c3:67:14:
                    0c:63:f5:f3:e3:65:67:45:a0:89:01:7c:ec:e2:cf:
                    bb:b5:1e:b5:72:2a:d1:2c:67:05:44:82:35:2b:de:
                    d0:30:17:c8:14:5d:50:2a:41:75:4d:0a:1d:97:c1:
                    e3:a9:f7:ce:74:3e:2f:36:96:cb:9a:d7:fa:94:db:
                    dd:be:3f:04:bf:b9:b0:a1:6e:b5:3e:6f:d0:4a:35:
                    be:e1:24:a5:3a:1f:17:55:b9:b2:91:6a:bf:9a:8a:
                    f1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:43:1A:42:3F:D9:00:66:C8:5E:48:22:D6:9A:A4:F4:B5:FB:F0:B0
            X509v3 Authority Key Identifier:
                keyid:F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:9e:65:6e:15:5a:41:40:2c:0c:19:44:68:9a:78:3c:61:08:
         ca:4b:ef:c8:08:29:5b:c0:94:b2:6b:c1:2a:a5:af:96:cd:60:
         7a:0e:3a:35:7c:bd:ca:48:36:8b:7c:fa:34:d8:c9:22:36:78:
         94:ad:6a:9b:29:36:eb:b4:1c:e9:c3:31:4a:72:be:bd:fd:39:
         67:5a:db:fa:0c:e0:4d:38:d1:76:be:cc:07:6d:12:12:7b:4e:
         bd:ce:63:7a:75:c4:63:aa:e5:2c:98:e2:e5:c5:5c:29:64:56:
         be:09:78:0f:39:8d:7d:2a:de:bd:e9:6b:ef:83:91:ee:7a:81:
         8e:c0:bc:e1:36:fc:d7:ad:0c:56:ea:0f:32:9e:01:e7:c8:56:
         e4:9d:a9:be:bd:b0:ba:55:40:34:f0:46:db:7a:a4:c9:15:ee:
         f5:53:4e:42:5a:0c:2f:b5:97:11:9c:1d:3a:95:c8:a6:0e:4a:
         8a:da:d1:59:86:cf:81:ff:be:f7:ac:82:7a:db:4e:c2:52:fb:
         00:f5:96:58:95:5e:67:84:f8:3d:72:0f:65:66:22:f8:d2:03:
         47:5e:94:29:4c:fc:a0:fb:da:37:56:36:15:e9:a9:47:ba:0b:
         91:a4:15:6b:40:ed:de:dc:84:57:07:e2:ae:d2:7a:36:85:fe:
         94:0c:9d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:51:57 2026 by rpki-client