Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
File:                     8JLOTWiFNFSE6Zp312Fm_HICIDM.mft (raw, json)
Hash identifier:          cHfYkWRdzZlelD/AUzPVc7FzzCYJETTPKdvCfvO12ss=
Subject key identifier:   64:2F:79:D9:4A:FE:77:E5:5A:93:FF:05:F8:32:8A:68:82:D4:0F:9C
Authority key identifier: F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33
Certificate issuer:       /CN=f092ce4d6885345484e99a77d76166fc72022033
Certificate serial:       01A0D64C4ADAD6B7C008DD3C77D2575191E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
Manifest number:          1A6D
Signing time:             Fri 25 Sep 2026 02:01:59 +0000
Manifest this update:     Fri 25 Sep 2026 02:01:59 +0000
Manifest next update:     Sat 26 Sep 2026 02:01:59 +0000
Files and hashes:         1: 8JLOTWiFNFSE6Zp312Fm_HICIDM.crl (hash: tjKNu0uWc/LUgRABiRsz+1GRHzBs0un8hDxY4/mAhH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:4c:4a:da:d6:b7:c0:08:dd:3c:77:d2:57:51:91:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f092ce4d6885345484e99a77d76166fc72022033
        Validity
            Not Before: Sep 25 02:01:59 2026 GMT
            Not After : Sep 26 02:01:59 2026 GMT
        Subject: CN=642f79d94afe77e55a93ff05f8328a6882d40f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:73:21:7f:a8:d6:30:0e:52:56:c7:59:dd:cc:
                    51:fd:7c:77:f9:7c:c0:13:df:e9:e7:3e:d2:7d:e2:
                    4d:f0:a1:fe:95:06:2c:d9:30:56:26:f0:ce:e0:52:
                    8a:38:c2:1d:68:e5:7a:52:b0:5d:0b:26:05:07:67:
                    ad:fc:21:32:6c:80:e7:d4:fb:a6:a8:9a:c8:49:e6:
                    91:60:ba:48:1c:f6:88:b7:fb:24:14:f0:6b:9b:46:
                    a1:95:74:2d:f2:60:7b:0b:c8:b4:84:c8:90:7c:b1:
                    4a:ba:cd:a7:cf:05:be:d0:a5:21:ad:46:e5:f4:8f:
                    a5:6e:15:fc:fa:a6:a5:43:b5:75:b3:16:ae:06:d2:
                    28:b4:49:26:b1:3a:11:79:79:d6:dd:c6:0e:ce:1a:
                    13:89:5c:03:1c:e2:bb:84:49:da:8b:52:ff:66:11:
                    8e:ed:84:28:15:b3:56:fb:99:89:af:ff:c8:f3:41:
                    25:be:ef:32:a9:20:36:3f:da:4e:6f:03:a7:b2:9f:
                    9a:f8:fb:77:b0:67:1a:2f:39:fc:dc:ed:29:37:17:
                    75:02:e8:ce:7b:7d:00:0c:ac:c0:b3:12:16:64:43:
                    35:03:6d:48:8b:b7:3e:4a:98:e0:27:1f:5d:5d:04:
                    6e:a5:32:02:80:50:ee:fd:64:ed:da:40:23:fa:a2:
                    ce:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2F:79:D9:4A:FE:77:E5:5A:93:FF:05:F8:32:8A:68:82:D4:0F:9C
            X509v3 Authority Key Identifier:
                keyid:F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:0f:60:f8:3c:7a:b9:05:69:43:b9:31:c9:f0:82:d5:c0:80:
         df:f0:12:b7:b9:7a:d5:c0:68:68:cb:4f:30:3d:8a:dc:e2:74:
         8c:9a:67:38:ae:50:d6:62:26:5f:29:11:c9:d9:b5:d2:8c:2d:
         ef:23:d1:6b:4a:48:38:09:cf:54:da:23:05:6e:05:cc:39:d1:
         76:a4:a8:be:2f:26:1a:d1:e1:27:8a:51:41:be:13:56:3a:58:
         09:47:05:2a:0a:5d:c4:fc:b4:52:fb:aa:7d:63:77:2b:b6:29:
         88:6b:a8:5e:82:f7:77:d9:17:e1:e8:3e:18:2f:bb:bc:c6:e8:
         ba:b6:00:30:18:a8:63:47:a3:ee:7d:dd:7e:7c:98:73:92:c9:
         5c:7e:a8:13:ef:ac:bf:a6:78:70:2a:5b:62:46:5c:57:54:ee:
         92:e3:5d:78:da:6e:8d:1e:e0:ec:8e:85:ff:b3:85:49:c9:40:
         3a:ef:df:7e:1e:33:d3:a3:e4:60:ef:17:c9:fa:16:6f:b0:cd:
         ee:c4:3d:d9:27:46:09:b8:4b:bf:bc:78:4b:fa:39:43:96:7f:
         63:fe:a8:c8:b9:9e:63:5d:67:00:3c:eb:01:ef:af:0c:ea:31:
         2f:57:9b:ec:7a:e5:2c:1c:a3:87:04:81:94:10:51:83:03:8a:
         31:1e:ff:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:54:56 2026 by rpki-client