Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
File:                     8L-tMcFMk9qlNEugT0tSNUaW368.mft (raw, json)
Hash identifier:          VJL8/usJZm9G3tfkcZE1LxJHNbUIy61/M+pUw5+nPjE=
Subject key identifier:   54:73:7D:84:83:D3:2C:70:73:1D:05:B7:B7:6B:AE:E7:8A:5F:51:7B
Authority key identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
Certificate issuer:       /CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Certificate serial:       01A0CC6BD0C3E55CF150531B83A839811EDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
Manifest number:          1A6E
Signing time:             Wed 23 Sep 2026 04:00:12 +0000
Manifest this update:     Wed 23 Sep 2026 04:00:12 +0000
Manifest next update:     Thu 24 Sep 2026 04:00:12 +0000
Files and hashes:         1: 8L-tMcFMk9qlNEugT0tSNUaW368.crl (hash: 1ZyxfP+m4K1tQI5HpYa0/JKsGuDkMLp6CsFbG+UZEt0=)
                          2: OXg0TjUhSvtV7LtPBTa7S_RSHjs.roa (hash: canGGkhdPWTKzNqqcACagBLpPsyetsivYP+q4meoXFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 04:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:6b:d0:c3:e5:5c:f1:50:53:1b:83:a8:39:81:1e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
        Validity
            Not Before: Sep 23 04:00:12 2026 GMT
            Not After : Sep 24 04:00:12 2026 GMT
        Subject: CN=54737d8483d32c70731d05b7b76baee78a5f517b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:62:c7:89:86:24:c9:b4:49:88:5d:c4:3b:ca:
                    fc:09:ba:e5:7a:30:19:a6:e1:4b:3f:70:68:7d:96:
                    48:7b:c7:43:02:c2:fd:4e:e8:8e:18:c7:d7:cc:26:
                    93:77:20:81:da:7c:58:32:9d:a5:50:92:26:02:33:
                    4c:16:de:2e:96:62:f0:f6:b8:16:fd:c6:30:25:09:
                    f9:8c:84:7a:52:ec:29:08:ea:45:eb:50:db:6e:46:
                    3c:2c:25:28:67:f0:77:59:ab:4d:41:50:7b:51:b5:
                    34:6f:8d:e0:43:af:81:cf:62:1d:8a:76:1b:1b:31:
                    3a:99:fa:a1:6e:bd:4b:50:b1:36:be:28:0c:7e:72:
                    57:80:3c:37:2e:c8:2f:e3:05:f8:e4:4e:8d:9f:8c:
                    0c:8a:09:00:7b:80:66:c0:36:25:db:1d:4e:ae:7e:
                    09:94:58:81:09:c7:ce:af:5c:8d:b6:be:78:75:21:
                    6a:2a:a5:da:8a:2b:ee:65:e8:bc:99:4c:58:10:f0:
                    ed:7b:51:c0:e5:78:eb:c7:b4:f4:6b:a5:67:49:57:
                    96:c7:03:61:8e:7a:8e:73:c0:b8:bf:93:55:66:35:
                    7b:dd:2a:7e:7d:0c:74:36:0c:44:76:88:88:02:94:
                    25:15:50:ef:cc:dc:94:f3:cd:fc:6a:20:80:8e:70:
                    e4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:73:7D:84:83:D3:2C:70:73:1D:05:B7:B7:6B:AE:E7:8A:5F:51:7B
            X509v3 Authority Key Identifier:
                keyid:F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c5:76:96:66:4d:6d:8c:d9:63:c1:7d:48:85:5e:8c:95:64:
         5e:98:48:a6:fb:08:1d:e6:c4:37:e3:d3:14:e8:0e:6d:2a:dc:
         30:cb:05:8e:34:aa:e8:36:38:e2:d6:97:4a:a7:c3:68:20:9b:
         37:c6:1f:65:1e:9e:f7:51:80:88:69:a8:af:53:76:f6:79:7b:
         0c:50:8f:2d:9a:7b:fb:76:12:f7:f2:11:b8:d6:4d:18:26:25:
         6e:c4:7d:dd:04:d3:15:f3:ba:62:00:87:81:7d:6f:9a:1e:20:
         8f:08:bd:4e:ea:a3:71:81:21:8f:d6:7c:f2:4e:af:4f:f6:3b:
         ad:58:c5:71:14:3c:40:9e:b9:84:0f:8c:cf:30:ad:d3:05:76:
         01:55:66:2d:a5:5c:d1:76:8c:71:84:85:59:42:62:49:13:95:
         f5:9b:0e:83:41:41:db:45:bf:71:4c:8b:fe:14:8b:08:2a:c7:
         36:aa:a6:8b:8a:1e:18:c4:e3:3c:5c:02:ea:dc:52:8f:ec:4a:
         cc:70:f1:83:81:03:2a:fa:46:b0:22:45:b8:2e:8d:61:57:be:
         a6:72:b2:1d:91:15:b7:fc:04:4c:54:9f:48:24:53:8b:00:a0:
         e9:99:c4:21:1a:c5:34:f4:d9:5b:20:f5:81:be:82:fb:ad:ec:
         9d:4d:27:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMa9DD5VzxUFMbg6g5gR7fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYmZhZDMxYzE0YzkzZGFhNTM0NGJhMDRmNGI1MjM1NDY5
NmRmYWYwHhcNMjYwOTIzMDQwMDEyWhcNMjYwOTI0MDQwMDEyWjAzMTEwLwYDVQQD
Eyg1NDczN2Q4NDgzZDMyYzcwNzMxZDA1YjdiNzZiYWVlNzhhNWY1MTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGLHiYYkybRJiF3EO8r8CbrlejAZ
puFLP3BofZZIe8dDAsL9TuiOGMfXzCaTdyCB2nxYMp2lUJImAjNMFt4ulmLw9rgW
/cYwJQn5jIR6UuwpCOpF61DbbkY8LCUoZ/B3WatNQVB7UbU0b43gQ6+Bz2IdinYb
GzE6mfqhbr1LULE2vigMfnJXgDw3Lsgv4wX45E6Nn4wMigkAe4BmwDYl2x1Orn4J
lFiBCcfOr1yNtr54dSFqKqXaiivuZei8mUxYEPDte1HA5Xjrx7T0a6VnSVeWxwNh
jnqOc8C4v5NVZjV73Sp+fQx0NgxEdoiIApQlFVDvzNyU8838aiCAjnDkyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRzfYSD0yxwcx0Ft7drrueKX1F7MB8GA1UdIwQY
MBaAFPC/rTHBTJPapTRLoE9LUjVGlt+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9kYzM1ZWItNmVjZi00NDUyLTg1OTkt
NzBkNTljYzRmN2NjLzEvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9kYzM1ZWItNmVjZi00NDUyLTg1OTktNzBkNTljYzRmN2Nj
LzEvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesV2lmZN
bYzZY8F9SIVejJVkXphIpvsIHebEN+PTFOgObSrcMMsFjjSq6DY44taXSqfDaCCb
N8YfZR6e91GAiGmor1N29nl7DFCPLZp7+3YS9/IRuNZNGCYlbsR93QTTFfO6YgCH
gX1vmh4gjwi9TuqjcYEhj9Z88k6vT/Y7rVjFcRQ8QJ65hA+MzzCt0wV2AVVmLaVc
0XaMcYSFWUJiSROV9ZsOg0FB20W/cUyL/hSLCCrHNqqmi4oeGMTjPFwC6txSj+xK
zHDxg4EDKvpGsCJFuC6NYVe+pnKyHZEVt/wETFSfSCRTiwCg6ZnEIRrFNPTZWyD1
gb6C+63snU0nvA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:18:58 2026 by rpki-client