Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
File:                     8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json)
Hash identifier:          LnBwHGLoNXN3lPiEeqqOdgKgnUx4u9B1Uy8Q04riSZI=
Subject key identifier:   54:66:6F:99:08:70:AF:B7:AD:98:98:33:9C:BC:93:8E:A1:DA:CE:6B
Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
Certificate issuer:       /CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Certificate serial:       01A0D011F2AFB4A89A851DACA3D1A3B33880
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
Manifest number:          1A6D
Signing time:             Wed 23 Sep 2026 21:00:32 +0000
Manifest this update:     Wed 23 Sep 2026 21:00:32 +0000
Manifest next update:     Thu 24 Sep 2026 21:00:32 +0000
Files and hashes:         1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: 3C02GK1REJUXDelxL7av9bUVA/7MG0CtHc0vFWIeNYs=)
                          2: tEiznCRaCEXuSiqwVe-1WIaGDGU.roa (hash: pOXbDIJbSmZy8KsnI5uOSVFdRgYoW3ngwx0TRZi2I7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:11:f2:af:b4:a8:9a:85:1d:ac:a3:d1:a3:b3:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b
        Validity
            Not Before: Sep 23 21:00:32 2026 GMT
            Not After : Sep 24 21:00:32 2026 GMT
        Subject: CN=54666f990870afb7ad9898339cbc938ea1dace6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:6e:10:6c:c8:63:b0:78:cc:e1:79:ca:fe:
                    a2:f4:df:7c:67:42:22:ce:4d:9c:c6:a9:4a:f6:d1:
                    5b:a1:37:3d:09:74:3f:4b:5a:1e:cb:05:72:a5:59:
                    1d:5b:ff:59:8c:6f:3c:2d:b1:53:99:b4:e1:82:75:
                    c5:d0:60:97:76:e9:c5:94:44:33:5a:3f:51:71:ea:
                    5f:89:97:e4:b7:2c:ef:d0:fc:e9:1e:e5:5d:99:41:
                    f0:d2:78:ce:1c:41:f0:47:50:22:12:f2:a0:72:22:
                    42:0f:f0:d6:76:f3:3d:09:70:8a:82:6d:84:d1:40:
                    d8:ea:a9:e6:16:1f:98:3e:f7:a4:f4:84:d5:1d:e2:
                    5a:98:00:04:75:88:19:33:09:f0:c7:06:1e:0e:8c:
                    4c:68:ba:db:06:e6:69:ab:1f:2b:00:33:f7:a4:c5:
                    0d:50:e4:01:f5:fa:29:11:b1:bc:ac:f7:b4:6b:62:
                    6b:a3:5a:bc:aa:f3:5f:de:b5:55:50:d6:2f:6e:95:
                    a2:80:86:15:4d:69:f8:09:c9:89:7f:ef:d2:89:cb:
                    cb:90:05:49:16:f1:c7:9f:25:b4:50:50:7f:c1:30:
                    8d:5d:c1:15:48:f9:fb:90:20:6b:8f:25:34:15:14:
                    72:85:6b:f2:fc:b6:ec:82:ac:08:fc:ba:f9:cd:a9:
                    f0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:66:6F:99:08:70:AF:B7:AD:98:98:33:9C:BC:93:8E:A1:DA:CE:6B
            X509v3 Authority Key Identifier:
                keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:43:3d:c4:7b:ca:85:c2:56:ee:db:94:b0:2f:fe:dd:c8:20:
         20:5b:7b:64:6d:4b:41:fd:c6:61:18:85:45:73:66:08:a8:57:
         40:4d:21:c3:7b:23:ce:5e:9d:bd:ea:96:77:04:25:b1:72:18:
         9c:32:04:db:31:c5:6f:1a:d7:84:38:6a:21:2f:49:2f:43:ca:
         fa:a5:93:17:6c:66:b4:1d:0a:1b:37:1d:bd:11:4a:61:75:dc:
         6f:f0:07:11:c2:22:f8:b5:17:62:9e:2a:cf:d6:5c:ef:f1:d7:
         64:0a:b7:43:3b:d7:fe:c8:f6:66:b5:4a:32:95:74:4d:7e:7f:
         93:b6:c4:ea:0f:4a:72:88:a5:41:e5:8b:76:67:46:f9:bd:75:
         59:f8:16:61:61:de:ce:2f:f2:1c:2c:f7:c0:74:c1:da:08:41:
         3a:b4:ef:c8:fd:fb:0d:35:81:45:6a:c1:ba:02:d3:fd:a5:cc:
         d7:6a:9d:45:19:89:b5:e7:b4:f4:f4:64:22:d8:c8:a9:c2:68:
         3e:7c:af:46:a1:23:0b:f7:6b:8b:d0:ab:09:a2:2c:44:56:a0:
         65:56:10:a5:a2:24:e8:d8:84:00:d5:70:11:f6:f8:22:1f:cc:
         26:d3:df:39:81:c1:38:e1:7b:31:a6:ee:a9:91:13:ce:55:41:
         2a:b1:6e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:49:02 2026 by rpki-client