Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
File:                     B_8L7Dwze0fdzzZvQwFQO-eD15g.mft (raw, json)
Hash identifier:          WHGrmEgQ3q0InjLoI2Q02omTM9j3BvtD1Ejjz9f1rkE=
Subject key identifier:   89:2D:79:D2:4F:ED:F4:A0:A2:3C:98:8A:51:0F:9C:26:D4:A1:C1:4D
Authority key identifier: 07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98
Certificate issuer:       /CN=07ff0bec3c337b47ddcf366f4301503be783d798
Certificate serial:       01A0D0ED547118C0E049BDE986E90FA0456A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
Manifest number:          10D2
Signing time:             Thu 24 Sep 2026 01:00:09 +0000
Manifest this update:     Thu 24 Sep 2026 01:00:09 +0000
Manifest next update:     Fri 25 Sep 2026 01:00:09 +0000
Files and hashes:         1: B_8L7Dwze0fdzzZvQwFQO-eD15g.crl (hash: nqMtOg8cjkRZ+LfBB6KVUeSbRV3YSyPmEI4lGkqbiec=)
                          2: Iv-RS1GWW-xLn8dNxq7r5YXXjSs.roa (hash: oE5PL3Krr0r9ntiL9YECi1nkIPrZCu90vdTKGFyXWag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ed:54:71:18:c0:e0:49:bd:e9:86:e9:0f:a0:45:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ff0bec3c337b47ddcf366f4301503be783d798
        Validity
            Not Before: Sep 24 01:00:09 2026 GMT
            Not After : Sep 25 01:00:09 2026 GMT
        Subject: CN=892d79d24fedf4a0a23c988a510f9c26d4a1c14d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:bb:34:5e:07:a6:0a:2c:de:1b:22:86:6c:
                    44:63:48:cf:36:a8:75:39:09:02:b2:f3:c0:88:6f:
                    c9:6a:45:94:76:07:00:72:78:00:b4:bd:37:ba:fa:
                    99:90:ac:c3:63:9c:4c:df:94:78:5d:fa:4d:4f:bc:
                    04:a3:28:bf:88:d9:32:9f:04:f5:58:60:58:ad:7e:
                    a3:1b:16:b4:14:b7:e9:f8:13:d1:5f:41:d4:95:b5:
                    79:3f:f3:d2:65:dc:a8:d1:5b:a8:c4:95:76:ef:37:
                    34:cb:4f:e0:ff:e3:48:8c:3e:f7:42:90:10:fb:02:
                    26:d8:14:a3:c7:5a:21:94:89:c1:be:29:f0:37:e7:
                    87:aa:85:0d:df:2b:c8:ad:bc:67:27:4f:73:d6:b9:
                    e2:3c:f1:9c:5f:f7:5c:24:3e:d1:79:8b:5c:14:5f:
                    82:1b:69:fb:a1:86:9d:95:00:e3:8d:4e:bf:c3:43:
                    7b:5a:b7:c7:78:b9:45:2e:ef:10:f4:97:88:2a:c1:
                    29:24:b3:cf:82:61:0b:cf:af:97:03:d2:6d:96:c1:
                    af:db:4e:b7:c1:d4:08:ab:3c:d1:bd:62:9f:cb:2e:
                    33:4a:b0:c0:1f:37:eb:8a:9d:e9:35:75:bf:55:f7:
                    9d:f5:71:ef:f0:b2:90:a0:af:5c:fb:14:12:80:af:
                    3b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2D:79:D2:4F:ED:F4:A0:A2:3C:98:8A:51:0F:9C:26:D4:A1:C1:4D
            X509v3 Authority Key Identifier:
                keyid:07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:12:9c:fe:cd:38:e9:77:a5:0e:e1:d5:a0:3c:a4:ef:06:08:
         44:8d:0e:44:a7:5c:bb:94:88:b4:73:5e:fa:32:19:97:7b:41:
         35:04:ff:a9:f6:cc:79:85:53:04:27:f4:87:cb:ca:85:92:85:
         10:bf:c2:71:df:2d:33:e0:a8:93:a9:0a:46:4b:a0:b7:bc:74:
         b5:a1:60:8b:ce:ed:33:40:4c:d5:35:5e:a4:14:e0:fb:ee:5c:
         f7:cf:5e:88:bb:bb:9d:e8:d5:37:4c:83:21:4c:38:45:9c:c2:
         77:12:90:93:9c:a0:05:73:3b:88:ae:d3:51:4b:26:cb:eb:4c:
         97:d1:48:83:47:32:3c:58:53:44:c4:62:80:fb:6a:c2:a5:16:
         7f:67:25:c7:ee:4a:0c:a6:61:55:a6:31:f0:19:22:b6:57:35:
         1a:8a:47:c2:c0:23:fa:e9:6e:81:1f:a0:0c:bd:f5:ea:6b:58:
         09:b3:a1:db:cf:14:42:4e:e0:cb:ab:bc:d2:b2:dd:05:24:71:
         90:c5:fa:56:d3:d9:a3:ef:36:ba:f7:4b:b3:62:7d:d0:3e:42:
         ce:fb:e0:1a:0b:5e:5b:8e:75:ba:74:08:95:d9:62:a9:44:2a:
         d0:a6:e7:b9:da:68:d5:3a:f5:37:7c:ff:0a:57:ec:4e:d4:81:
         4b:77:62:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:42:15 2026 by rpki-client