Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
File:                     8zXtZqwB15F1zk149nKh_kcgN4A.mft (raw, json)
Hash identifier:          5samCCstrg6LCiOmEJ8qFMwpQLT9n9AtegrrQQsBIPc=
Subject key identifier:   8D:4E:4B:8F:BA:7B:32:3B:BB:A7:E8:26:E4:E8:8E:50:F1:4C:4C:88
Authority key identifier: F3:35:ED:66:AC:01:D7:91:75:CE:4D:78:F6:72:A1:FE:47:20:37:80
Certificate issuer:       /CN=f335ed66ac01d79175ce4d78f672a1fe47203780
Certificate serial:       01A12843C2DC68DF0458BCA1FA6B599ECD0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
Manifest number:          045E
Signing time:             Sun 11 Oct 2026 00:01:31 +0000
Manifest this update:     Sun 11 Oct 2026 00:01:31 +0000
Manifest next update:     Mon 12 Oct 2026 00:01:31 +0000
Files and hashes:         1: 8zXtZqwB15F1zk149nKh_kcgN4A.crl (hash: sFW1264CRgvqNOt+Ci5CeKSRkowWQU0NRTw0iqd9K7c=)
                          2: VpiFwK0hsjfTbGKdlZz4M450A4o.roa (hash: 7nG4whDnBMU971FoyHXyhGJf7PxhrWgEoIfy9EmmD2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:43:c2:dc:68:df:04:58:bc:a1:fa:6b:59:9e:cd:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f335ed66ac01d79175ce4d78f672a1fe47203780
        Validity
            Not Before: Oct 11 00:01:31 2026 GMT
            Not After : Oct 12 00:01:31 2026 GMT
        Subject: CN=8d4e4b8fba7b323bbba7e826e4e88e50f14c4c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ca:7f:ae:2a:01:cb:07:65:fd:08:27:55:8a:
                    35:20:1d:dc:e7:3a:a6:c1:7d:54:74:8d:f2:29:63:
                    b0:2b:f0:93:80:4e:ff:32:cd:82:36:a1:f7:6f:78:
                    19:8c:71:bd:85:64:08:09:5d:17:3e:59:61:89:23:
                    fc:fe:33:1d:d4:19:65:b1:06:09:49:20:dc:9c:08:
                    9c:71:1c:ee:a0:4e:41:cf:bc:15:3a:ab:dd:29:87:
                    cd:9a:83:95:66:10:1c:ce:60:21:d1:8c:61:8b:38:
                    cb:cb:72:94:44:12:db:fa:23:dd:99:c9:56:8a:16:
                    e0:a1:e3:4b:8e:13:29:5a:e4:53:82:fb:d2:03:92:
                    75:5f:8a:97:71:61:cc:2d:1f:8a:14:d4:6d:ec:31:
                    7f:5d:6f:f4:d5:d4:3d:08:4b:ab:03:92:ae:a1:41:
                    82:ec:4c:ec:29:85:e9:f0:37:e2:e2:63:21:70:ec:
                    63:30:63:b4:cb:05:aa:1b:1f:71:8d:97:f5:60:18:
                    9e:2a:07:5c:2d:23:c6:e4:ab:42:c2:6f:13:4f:2e:
                    33:d8:89:8f:28:f6:c5:39:0c:59:67:9e:63:79:db:
                    f8:47:c9:95:b0:e4:6c:c3:4e:7f:55:2a:e1:54:ff:
                    9d:5d:2c:b4:ff:b0:82:7b:cd:99:e6:19:b0:da:92:
                    a6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4E:4B:8F:BA:7B:32:3B:BB:A7:E8:26:E4:E8:8E:50:F1:4C:4C:88
            X509v3 Authority Key Identifier:
                keyid:F3:35:ED:66:AC:01:D7:91:75:CE:4D:78:F6:72:A1:FE:47:20:37:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:5a:a0:c8:d0:55:b6:75:f9:e4:75:6c:eb:28:89:d3:33:1d:
         8b:81:19:8c:18:ad:4d:2f:17:4a:b1:96:8f:f5:1a:99:5c:eb:
         9f:b1:fd:13:70:78:7b:01:29:0b:17:27:6c:54:9a:7c:49:b9:
         4b:37:1a:00:33:bc:59:12:21:00:dc:43:81:a2:05:69:01:41:
         8b:b9:96:4e:0d:d7:ad:80:79:4f:50:13:6f:07:69:63:1d:1c:
         ee:6b:ab:f9:1f:b0:81:57:29:9d:86:94:25:af:de:ef:46:3e:
         e8:0b:3b:9b:56:a4:2a:75:d6:65:bf:ce:46:c4:36:4b:91:5c:
         2f:4a:44:c2:42:54:17:b6:5b:f5:23:e1:3f:86:67:07:38:45:
         36:5f:0e:1e:98:4c:60:4d:22:f5:fd:46:f8:65:16:62:1c:69:
         51:d8:98:17:6b:89:98:1c:c5:93:35:a0:3d:4b:ba:bb:f6:df:
         73:e4:6b:43:e7:b9:5b:de:9a:93:0f:2c:6e:de:1c:70:02:0d:
         78:d7:34:0e:9b:27:97:d0:e2:3a:61:34:b4:ff:70:d2:af:26:
         9f:88:be:74:09:94:e5:21:cd:25:90:e0:af:b9:57:bc:cc:aa:
         6f:5c:d2:ec:06:79:93:2b:92:93:ba:d4:ee:b7:42:c9:33:fc:
         31:d7:57:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:36:34 2026 by rpki-client