Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
File:                     k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft (raw, json)
Hash identifier:          9dEcWX/tWfKDHkS+tk+4QlAVeLGDe8vryrrvsya8YRI=
Subject key identifier:   8E:13:52:54:6A:1E:02:B6:AE:7C:A4:2A:0C:8D:F3:F7:4C:C4:44:5B
Authority key identifier: 93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
Certificate issuer:       /CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Certificate serial:       01A10DDF28AFB9ECE207AF174ACFC84C8099
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
Manifest number:          1A8C
Signing time:             Mon 05 Oct 2026 21:01:31 +0000
Manifest this update:     Mon 05 Oct 2026 21:01:31 +0000
Manifest next update:     Tue 06 Oct 2026 21:01:31 +0000
Files and hashes:         1: k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl (hash: X8TPhb61Q6TakaKWvRmk7JJ8+xCQmMsT77Mux2I50L8=)
                          2: wgb1-iULWQz8zD4swlphbIF6xCw.roa (hash: 6+l6f6hi4vlzVRdz3OtcxpncvT0dUWv6vEKKsHWTOaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 20:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0d:df:28:af:b9:ec:e2:07:af:17:4a:cf:c8:4c:80:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9382bdfc9b1b25002039123779ffaf2473f851b7
        Validity
            Not Before: Oct  5 21:01:31 2026 GMT
            Not After : Oct  6 21:01:31 2026 GMT
        Subject: CN=8e1352546a1e02b6ae7ca42a0c8df3f74cc4445b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3f:71:0c:07:7e:c3:bc:b9:de:63:84:8d:f2:
                    c4:2d:1a:e8:ea:7f:c3:50:04:26:c8:1d:9e:2e:9b:
                    17:1b:11:59:97:cb:3d:05:61:bd:e5:8c:ed:6d:c0:
                    fe:53:20:11:5f:1c:23:88:31:37:e9:d6:51:29:e7:
                    dd:ef:17:91:39:5a:b5:d6:ee:98:fc:0d:63:d8:50:
                    90:47:8d:a7:4f:45:a0:14:d5:ef:20:a8:fb:e7:66:
                    39:2d:64:6a:f2:2e:75:36:8b:53:d4:6b:1c:eb:b9:
                    2d:0f:30:b7:0c:fd:ba:0f:26:e4:97:5e:9a:71:7d:
                    a0:ac:7f:63:ac:20:bd:b4:e6:8b:64:7c:f1:75:07:
                    13:69:a2:af:cb:3a:90:f7:23:4e:f8:cf:d2:a2:d5:
                    89:2b:ae:ae:c8:ef:41:6e:af:41:d1:c7:a1:1d:a3:
                    c8:4b:3d:c6:b5:50:61:8a:e4:93:0e:53:52:b1:b9:
                    a8:f6:e0:ce:ae:7e:01:80:d7:eb:6a:71:a4:2e:c6:
                    4d:1f:bd:08:c9:b3:e7:0e:3f:a3:30:1a:43:79:bd:
                    bd:b5:dc:67:8b:e5:82:21:e6:f2:a4:d6:8c:21:06:
                    65:8f:52:d1:a6:eb:a2:59:56:5c:ba:4c:11:bb:b7:
                    b8:4c:24:d9:7e:ef:85:9b:67:75:ea:3f:23:f9:f4:
                    ac:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:13:52:54:6A:1E:02:B6:AE:7C:A4:2A:0C:8D:F3:F7:4C:C4:44:5B
            X509v3 Authority Key Identifier:
                keyid:93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f2:6d:63:ec:9c:70:e8:f6:d1:fd:55:91:77:14:eb:7c:45:
         f3:51:c2:c8:05:7d:e1:5a:ed:39:99:a1:c9:6c:25:a2:46:e1:
         c9:ec:d8:0b:a8:2d:c2:28:6c:2a:65:27:68:a0:59:37:42:25:
         e9:bc:91:f5:3e:65:a6:b7:af:ac:c5:49:c7:96:10:c6:22:77:
         82:48:d6:c2:e8:33:62:9e:c4:bb:1a:62:a8:aa:0f:13:7b:e8:
         4f:d8:96:c3:07:e4:16:6f:6f:82:92:cc:0c:7d:68:f8:6c:d3:
         b2:11:44:48:b5:e5:fa:d3:5c:16:25:24:e3:fb:66:23:57:65:
         fe:46:00:97:7e:5f:88:c6:5c:05:7c:35:b8:f3:6f:5c:d9:33:
         db:a9:5f:fb:e3:bc:94:72:22:07:35:23:af:6b:02:16:0a:ce:
         59:75:de:b5:56:14:5e:17:9c:a8:ba:3c:27:ed:b6:82:ed:cf:
         4d:ed:30:d8:fe:81:4d:cf:82:7b:5d:8e:81:44:3b:3f:f0:16:
         61:7d:78:1f:67:fd:90:b5:0a:7c:02:f2:4d:1d:30:1c:17:02:
         01:0d:b7:bc:26:49:48:7d:03:6c:4b:e5:00:fc:6e:51:ec:ae:
         58:af:f1:8f:77:67:aa:78:24:f5:5a:a0:26:e4:1e:45:c4:46:
         35:b6:b2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 05:39:11 2026 by rpki-client