Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
File:                     IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft (raw, json)
Hash identifier:          3K5tw5hF9iyrorJJZvftKmhz7Nl6K9Ve0rgehSCHYpQ=
Subject key identifier:   CC:13:FF:61:A4:EA:B7:60:08:76:CF:5E:B2:C1:AE:61:63:42:CF:AD
Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
Certificate issuer:       /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Certificate serial:       01A0EE544251620F70ABAFC1E7C5392A2550
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
Manifest number:          08C8
Signing time:             Tue 29 Sep 2026 18:01:34 +0000
Manifest this update:     Tue 29 Sep 2026 18:01:34 +0000
Manifest next update:     Wed 30 Sep 2026 18:01:34 +0000
Files and hashes:         1: 3ikFkz22nnfnGP5hBgt33RenFhw.roa (hash: US6DxVZfyMhjP4KTe/oYRgElRLqid9PGBdLialNLJ/g=)
                          2: IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl (hash: WycsDe3S23+MgHTCCYs1JU027c0qHTYXGt72x4sIe9Y=)
                          3: kYfIEsvVk_BOJEOYO8dzHl3yBqw.roa (hash: DJXKuUPzcXdeE6GAzh9NmYNgIzihSsE64bR0VlSG96A=)
                          4: yQugqDhsoFCyt4EOU-Yd8LiriqA.roa (hash: RbGDZvWEo1F7e5KTPgIMqC+hpQ10KuDrmfUdpa03+bk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ee:54:42:51:62:0f:70:ab:af:c1:e7:c5:39:2a:25:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
        Validity
            Not Before: Sep 29 18:01:34 2026 GMT
            Not After : Sep 30 18:01:34 2026 GMT
        Subject: CN=cc13ff61a4eab7600876cf5eb2c1ae616342cfad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:63:55:43:b2:f3:29:58:14:45:c0:65:05:5c:
                    21:6c:fc:1c:ba:f4:c0:a1:e4:be:ac:1a:af:31:ef:
                    45:8f:8d:41:24:ae:e0:72:ff:2e:45:f0:ca:55:7b:
                    60:73:ee:50:12:76:ed:ec:d7:97:3e:f5:46:61:19:
                    4b:9d:eb:88:93:c1:5f:a0:17:d1:4b:e0:d2:a7:df:
                    3b:e6:c0:6d:92:78:ab:ff:28:74:54:ef:ea:38:54:
                    32:ee:6d:e8:cb:6b:f1:1f:81:80:c9:bd:2e:c9:cd:
                    8d:7e:71:4a:93:ba:ae:9b:74:18:01:c0:17:83:94:
                    19:a7:b3:ca:70:28:c4:f5:c9:73:4c:d9:e8:90:5b:
                    9d:d1:c3:05:7c:b9:ca:b1:3c:16:28:4b:24:77:6b:
                    70:66:68:cc:89:e6:00:32:23:ae:b2:4c:d6:28:0b:
                    57:98:5a:6a:c4:b6:3d:5f:ac:36:b0:eb:7b:43:bc:
                    fb:19:72:5c:38:22:37:95:c9:3d:d0:44:e7:b0:4c:
                    a7:6b:e6:c9:3e:e2:45:b0:ed:0d:2a:c5:7c:9c:69:
                    3e:73:20:93:7a:dd:88:f8:bf:6a:d9:58:c8:f7:4c:
                    a1:37:6b:ee:47:d3:91:23:72:fe:86:94:78:b1:2e:
                    79:8a:25:5c:59:f0:68:36:82:de:d1:94:aa:07:89:
                    b8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:13:FF:61:A4:EA:B7:60:08:76:CF:5E:B2:C1:AE:61:63:42:CF:AD
            X509v3 Authority Key Identifier:
                keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:1a:be:47:e7:07:e8:ee:03:86:10:ee:91:46:36:dc:9b:17:
         12:19:57:1a:7e:a0:56:2f:7c:d1:b8:3f:d0:50:2f:7e:7c:1b:
         37:10:7b:59:83:c3:78:b6:d7:d7:97:27:99:cf:68:68:34:a5:
         74:ac:71:4d:0b:4f:44:9a:33:db:84:ba:85:31:2e:6c:f5:bf:
         2a:35:cd:4d:db:c5:c6:9c:a4:60:fa:d3:01:88:e0:e1:27:c0:
         2f:a4:02:f7:d0:01:4f:e9:47:80:f9:9a:8b:8b:52:af:b0:30:
         e0:32:b6:3c:97:0c:e6:f3:9a:3f:8a:6b:3e:76:32:f5:4d:57:
         d2:29:f5:66:bc:11:0d:f4:75:c5:66:e2:41:f9:88:21:22:04:
         f4:cf:16:18:84:1a:26:22:94:23:3c:c1:d2:af:e3:05:cb:1d:
         b0:9a:bc:0d:39:cb:a3:b1:04:f7:f5:05:e9:fd:00:46:3b:a2:
         33:00:8c:98:a7:42:37:6b:0d:5f:40:94:fb:b6:e5:d1:81:fc:
         86:d4:dc:4b:e0:35:dd:77:15:31:2e:6d:f8:03:94:03:d9:4e:
         7f:fc:0e:d3:65:38:3f:c0:22:d7:e4:23:7a:2f:a9:d9:cc:61:
         68:2e:80:cf:2f:0a:f5:35:46:38:69:d5:e1:62:ee:7c:36:0a:
         53:4e:8d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:56:15 2026 by rpki-client