Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
File:                     8x7XsfY7UapRap_8sDWjoNaeZaE.mft (raw, json)
Hash identifier:          xTIuao8VeoUCL147fNJ0XBHGPUdHpq6mzepI+VDLXPQ=
Subject key identifier:   D0:7A:37:9C:8D:15:72:D0:3B:E3:41:E5:D1:7C:98:57:B5:53:05:4C
Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
Certificate issuer:       /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Certificate serial:       01A0CE92091F35330E76C32E1D50628338B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
Manifest number:          0B6D
Signing time:             Wed 23 Sep 2026 14:01:12 +0000
Manifest this update:     Wed 23 Sep 2026 14:01:12 +0000
Manifest next update:     Thu 24 Sep 2026 14:01:12 +0000
Files and hashes:         1: 8x7XsfY7UapRap_8sDWjoNaeZaE.crl (hash: ULTUSRucQEgPHrn3MpvOQ35qBYOfH+3UbH7WGV0Ti8o=)
                          2: GueQ_mhDztm052O4uyOCzydd4Hs.roa (hash: epijumWayC3hiz/5d4RYWJuCrfwASsOYBSEL2afKyYw=)
                          3: LnJF2aD-QXKwpEm_SmQC9mOkxDQ.roa (hash: Pb/xRiuCx9q0KwFGi99PEmlzF0Owu6wPxhv4o/s2A64=)
                          4: TQVndCb0s6YbFLg-Ck3Joxzpvnk.roa (hash: ALeZt1J1EgV6UsgwxbSFKJyWQMJa1LqFVoBIsMSrHbY=)
                          5: UEtK2s9ZvqqGCPFs3MJ1YFHeSL0.roa (hash: xgK5dHExfmkfjOi2PqzjV2F80ioIPm+SIscsQO2bVck=)
                          6: o8bBYWpde5zB25G3op0chPWF1KA.roa (hash: 0RPyFNyYu7Qe34unEDC/iTRz2G6+VT+jFUVRlVn3fYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:92:09:1f:35:33:0e:76:c3:2e:1d:50:62:83:38:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
        Validity
            Not Before: Sep 23 14:01:12 2026 GMT
            Not After : Sep 24 14:01:12 2026 GMT
        Subject: CN=d07a379c8d1572d03be341e5d17c9857b553054c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:67:db:4c:41:1d:58:70:1a:b1:79:17:f9:
                    01:9a:55:44:d8:3c:8e:b5:47:d9:1b:bf:f8:1f:a3:
                    58:fb:af:f0:cb:6d:9a:89:71:d9:84:86:cd:88:24:
                    e7:75:4f:74:29:18:e7:2d:d2:14:93:b9:56:c7:ec:
                    37:4f:66:ef:66:e0:d7:ca:74:ff:16:96:a7:f3:eb:
                    ac:81:27:2b:bb:00:5a:5c:1c:13:e9:87:68:7e:5a:
                    fb:e8:ae:c1:3c:da:6e:f6:fa:a2:3d:ad:ae:f6:ea:
                    4a:d2:37:ae:80:29:24:c1:36:a6:95:7b:7d:cd:0f:
                    65:d6:e4:44:c4:57:fc:7f:66:0a:f9:31:32:0f:7a:
                    2e:4f:9f:01:9a:11:86:83:a7:40:55:98:56:94:dd:
                    dd:96:53:95:30:57:97:ef:08:6c:4c:ef:cd:f4:fd:
                    c7:58:1a:f2:de:f4:7b:4b:7b:61:f0:38:8b:d9:bd:
                    24:30:3f:af:5c:69:7d:89:79:d1:18:7c:53:40:1c:
                    6c:88:6f:31:15:e5:6f:34:c0:09:10:62:af:55:fd:
                    90:4f:e0:00:ea:d1:f6:ee:f0:a0:96:42:7f:9b:cf:
                    6c:d7:d2:d4:51:75:46:a7:32:7b:57:cf:5c:29:08:
                    80:b5:5b:d2:7d:8b:bb:f3:00:0f:35:93:b2:09:f4:
                    0a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7A:37:9C:8D:15:72:D0:3B:E3:41:E5:D1:7C:98:57:B5:53:05:4C
            X509v3 Authority Key Identifier:
                keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:7f:7d:9b:9a:54:b1:8c:2f:1f:78:c9:28:fd:4b:64:1c:1e:
         3d:9a:2d:e9:a6:9b:ff:50:d3:21:41:e4:e2:21:eb:a9:5d:76:
         17:33:14:32:8f:3b:b1:ca:10:87:07:4f:09:93:99:e3:32:e3:
         90:f7:03:dd:c6:a8:73:bd:b6:b3:b2:af:62:bb:96:d6:b3:6f:
         8f:bf:32:4c:c8:ff:fd:51:ed:d5:60:d7:83:ca:10:48:48:8a:
         c4:98:53:4d:64:b1:f5:09:58:65:b0:82:4e:a9:31:b3:b7:9f:
         e8:9c:1e:3e:6a:1e:bc:c8:d8:43:d1:36:dc:0e:08:a5:a3:a7:
         1c:9d:7c:c5:3f:b2:01:3c:e7:d1:12:da:08:ed:11:6c:68:0f:
         a9:57:92:4b:0b:d6:24:d3:3a:7b:92:9c:e0:05:d9:39:16:33:
         99:48:12:50:7c:e3:b4:dd:1d:56:63:00:ea:d3:6b:22:cf:61:
         b3:72:66:1c:8e:3b:e3:dd:45:16:f1:c8:e3:73:84:9a:c5:7d:
         b8:e9:6a:c7:f7:f9:d1:f4:e4:aa:7a:65:1c:f7:24:5c:1d:c8:
         fe:53:96:aa:03:d3:af:92:41:f1:9e:11:a7:3b:71:4d:81:32:
         01:3c:63:5d:91:7e:36:13:1a:2e:8e:07:c1:e6:01:49:f3:0b:
         67:e8:04:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:03:01 2026 by rpki-client