Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
File:                     8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json)
Hash identifier:          Pn9b0rxWgp4tHv69YWjPSC1N+ch1hU6TTormLHYmvI0=
Subject key identifier:   BD:05:E8:7D:4E:18:45:FD:1C:50:A5:D2:00:2B:7E:CF:A0:D8:9A:78
Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
Certificate issuer:       /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Certificate serial:       01A0D19263D3983FAF9DF337B516D6472059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
Manifest number:          11F0
Signing time:             Thu 24 Sep 2026 04:00:26 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:26 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:26 +0000
Files and hashes:         1: 1-2N7o3rXa2kEXEc9L-KyAvOeqf0.roa (hash: yUMOwLX6anzQEJQZ/ZLwqV3uE8drjI2D4SrjYJX1k20=)
                          2: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: sCcSYV7VnWerMH+Sb/MdwOZBHGximqhl2TbzVEqQOcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:63:d3:98:3f:af:9d:f3:37:b5:16:d6:47:20:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
        Validity
            Not Before: Sep 24 04:00:26 2026 GMT
            Not After : Sep 25 04:00:26 2026 GMT
        Subject: CN=bd05e87d4e1845fd1c50a5d2002b7ecfa0d89a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:fb:50:ae:b8:94:c2:e3:e0:e1:5f:9f:0b:
                    9b:82:9a:95:9b:92:da:28:82:d0:79:09:1e:50:e0:
                    f6:d8:4b:ba:95:1c:6c:b9:9b:09:42:14:ee:16:46:
                    bc:5f:76:d2:7c:3f:ac:ed:52:53:f0:9e:07:46:7c:
                    e1:56:24:26:4e:2a:1e:96:ef:dc:6c:a3:43:55:a7:
                    a6:ab:d6:57:4d:ae:67:17:00:55:2f:63:28:00:4a:
                    df:0e:a9:35:8d:98:c2:d8:e6:0c:62:c4:e7:a8:8c:
                    6b:ce:22:a8:e0:4b:fa:d7:09:e0:7a:2a:9e:f3:13:
                    fb:2c:06:66:f6:bb:60:e5:21:d4:f2:dd:12:89:73:
                    e5:31:e0:dc:c1:5a:c3:95:41:40:dd:de:49:4c:91:
                    f9:2d:8a:f4:0c:84:04:f9:84:3b:f9:2c:84:ec:4a:
                    bc:88:4f:9b:5b:48:51:a2:2f:c3:ca:73:85:48:cd:
                    79:33:f7:1e:78:dc:1e:51:e3:11:81:2e:c1:eb:a2:
                    06:f3:b9:d6:50:f2:86:65:03:d5:88:22:bb:e1:93:
                    3b:56:f0:2d:ec:70:f1:32:9c:0e:ea:eb:3a:f4:37:
                    d3:eb:b1:0d:52:c7:eb:e6:59:2f:57:54:7c:e5:fe:
                    d8:53:95:fa:04:fa:e0:ad:59:ab:8f:e7:3c:a8:5c:
                    64:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:05:E8:7D:4E:18:45:FD:1C:50:A5:D2:00:2B:7E:CF:A0:D8:9A:78
            X509v3 Authority Key Identifier:
                keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:bb:ed:f8:33:00:37:a7:46:c6:18:61:a8:7b:b8:b7:c0:e6:
         f0:b7:af:41:9b:64:61:8f:6f:e6:45:19:15:9f:51:01:1e:6b:
         0e:95:2b:da:c7:2d:ca:c0:63:93:c1:ab:d5:96:27:62:e3:7d:
         de:26:0e:f8:28:4d:d1:3b:03:35:46:ae:3f:6c:14:ec:04:d6:
         30:59:28:f1:da:d5:60:7c:f5:9f:70:19:9c:bd:50:a0:d4:1a:
         55:89:5b:84:21:41:a2:e9:b6:6f:09:cc:4d:ba:b5:92:47:9b:
         3d:0b:d9:3a:37:b1:79:06:99:fb:56:82:36:56:34:58:2e:b9:
         ed:0e:c4:ae:fe:b2:dc:8b:70:1a:33:24:99:cd:bc:bc:1f:ee:
         4d:d4:60:ff:c7:07:7d:53:37:37:99:85:fe:cc:22:d8:c5:cd:
         1d:a3:3c:37:ba:ab:c6:ce:0a:f0:e5:ed:0b:0d:e7:12:4c:21:
         69:d6:3f:22:9c:42:7d:b5:38:d6:cb:5d:16:b4:47:de:cf:ed:
         c0:2c:01:cb:67:60:fa:38:fb:84:bf:3c:79:25:18:84:2a:fb:
         a6:07:35:ba:4c:93:96:2c:1f:ca:16:fb:97:38:aa:13:c8:ef:
         50:cb:60:76:d3:a7:c0:6f:40:f7:2a:70:93:95:4c:9a:08:48:
         13:e3:33:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:54:24 2026 by rpki-client