Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
File:                     8v_48bgcLGFPw-lOsXy6CUAhGgE.mft (raw, json)
Hash identifier:          WpTbb9DrB3jXlqUbKOWWo+ia4ooeiLT7LWvnuB7i8SI=
Subject key identifier:   A9:70:80:95:12:BE:A0:ED:B4:BF:FF:6F:E3:3F:B5:A7:5C:F2:10:05
Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
Certificate issuer:       /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Certificate serial:       01A0D6F1315DF619A3347216F23AFC74CAD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
Manifest number:          1A6E
Signing time:             Fri 25 Sep 2026 05:02:06 +0000
Manifest this update:     Fri 25 Sep 2026 05:02:06 +0000
Manifest next update:     Sat 26 Sep 2026 05:02:06 +0000
Files and hashes:         1: 8v_48bgcLGFPw-lOsXy6CUAhGgE.crl (hash: fqVUFRPcSkESlK0rdOfce4JHUAOVYLcxgpzpVew0OAI=)
                          2: jRpXU9eqysmsAJR80B3Aax6y_BQ.roa (hash: XRM8W3BWblehC6PY0lBpqApKx5419cv1D4/Jksn00jI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 05:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:f1:31:5d:f6:19:a3:34:72:16:f2:3a:fc:74:ca:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
        Validity
            Not Before: Sep 25 05:02:06 2026 GMT
            Not After : Sep 26 05:02:06 2026 GMT
        Subject: CN=a970809512bea0edb4bfff6fe33fb5a75cf21005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ed:94:98:d7:48:db:47:46:2e:23:00:a2:68:
                    f5:a8:f5:7a:a5:18:85:f1:89:ad:7a:30:03:92:fa:
                    15:65:3f:17:1a:20:ab:af:70:cb:d4:56:da:0f:56:
                    9b:e9:2e:9e:da:1f:70:4a:93:f0:a8:f6:5a:5b:ed:
                    cf:ce:66:53:0b:f3:d4:0c:b0:a2:1d:62:6d:62:d1:
                    f3:bf:cb:a5:d0:a4:c6:2f:38:17:85:20:4f:f1:0f:
                    38:75:a4:da:1c:3d:15:14:4b:f7:9a:6f:b4:8f:04:
                    7d:69:90:31:17:b7:3e:64:03:2c:23:7e:24:6d:6f:
                    9b:6f:44:62:8a:2f:4d:c5:43:53:de:a0:46:f4:e5:
                    13:dc:92:ae:97:c3:64:6d:2d:b3:c6:b1:86:07:e8:
                    89:95:b9:14:d2:09:f8:9f:39:d6:f6:4a:f8:5c:8f:
                    ec:fc:03:30:73:a3:c0:b8:81:d0:a9:56:cb:1a:62:
                    28:62:99:25:3b:1b:50:33:e7:0e:6a:6f:73:7a:4e:
                    b8:d7:e7:27:a7:ad:22:29:1e:78:de:4f:aa:16:4a:
                    b6:84:ba:e8:b8:bc:d7:40:99:c6:22:7e:35:04:ad:
                    f1:15:f0:98:d2:97:97:7f:d4:84:70:0c:11:73:72:
                    cc:5d:ab:5f:72:52:86:14:f1:34:c4:34:72:ff:d8:
                    b1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:70:80:95:12:BE:A0:ED:B4:BF:FF:6F:E3:3F:B5:A7:5C:F2:10:05
            X509v3 Authority Key Identifier:
                keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:78:18:2d:2d:98:3f:81:3b:f7:da:eb:dc:cb:3e:c0:eb:c3:
         60:75:1b:41:3d:81:57:5f:cd:02:76:8d:e0:0e:08:4f:4e:1f:
         16:c7:e3:75:13:64:7c:ff:f2:23:73:3f:ab:dc:f0:66:17:84:
         53:d0:8a:45:d6:6c:01:df:c8:f3:f5:18:d0:df:ae:d8:9e:78:
         6e:63:e9:16:c8:19:6d:24:68:17:e8:71:0f:5e:69:c0:00:37:
         4a:d2:11:0d:06:cc:4a:7c:96:a4:fe:ff:b7:f7:69:21:71:27:
         a5:0a:7f:e9:3c:e0:f2:27:62:65:f4:2a:7b:ac:d9:13:3d:1b:
         fe:b1:f0:df:b7:7a:4c:f5:c1:40:7c:c1:bd:e4:6a:99:e0:99:
         37:c1:78:c8:24:ce:9a:8d:21:71:96:f9:24:bb:db:d3:67:b8:
         66:86:2a:e2:c0:c9:32:ef:f3:b1:47:0a:5a:a6:17:73:a5:08:
         43:66:71:a0:11:07:b2:80:56:d8:ee:35:e8:af:cd:54:5a:1f:
         99:e2:3f:99:01:bc:a9:02:65:10:49:c7:e2:a3:f9:f4:0f:e0:
         00:09:e1:0d:2d:55:d3:07:6c:1e:3c:44:f3:e7:87:6d:9c:ba:
         88:58:39:7e:d8:36:0d:0d:17:56:a3:7a:e0:db:30:f2:4d:80:
         c2:56:7e:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDW8TFd9hmjNHIW8jr8dMrTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZmZmOGYxYjgxYzJjNjE0ZmMzZTk0ZWIxN2NiYTA5NDAy
MTFhMDEwHhcNMjYwOTI1MDUwMjA2WhcNMjYwOTI2MDUwMjA2WjAzMTEwLwYDVQQD
EyhhOTcwODA5NTEyYmVhMGVkYjRiZmZmNmZlMzNmYjVhNzVjZjIxMDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+2UmNdI20dGLiMAomj1qPV6pRiF
8YmtejADkvoVZT8XGiCrr3DL1FbaD1ab6S6e2h9wSpPwqPZaW+3PzmZTC/PUDLCi
HWJtYtHzv8ul0KTGLzgXhSBP8Q84daTaHD0VFEv3mm+0jwR9aZAxF7c+ZAMsI34k
bW+bb0Riii9NxUNT3qBG9OUT3JKul8NkbS2zxrGGB+iJlbkU0gn4nznW9kr4XI/s
/AMwc6PAuIHQqVbLGmIoYpklOxtQM+cOam9zek641+cnp60iKR543k+qFkq2hLro
uLzXQJnGIn41BK3xFfCY0peXf9SEcAwRc3LMXatfclKGFPE0xDRy/9ixBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlwgJUSvqDttL//b+M/tadc8hAFMB8GA1UdIwQY
MBaAFPL/+PG4HCxhT8PpTrF8uglAIRoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHZfNDhiZ2NMR0ZQdy1sT3NYeTZDVUFoR2dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yMDAyYzQtZWIwYS00NzAwLTkwNzYt
MTc0NDFiZmU1NmNmLzEvOHZfNDhiZ2NMR0ZQdy1sT3NYeTZDVUFoR2dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8yMDAyYzQtZWIwYS00NzAwLTkwNzYtMTc0NDFiZmU1NmNm
LzEvOHZfNDhiZ2NMR0ZQdy1sT3NYeTZDVUFoR2dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXgYLS2Y
P4E799rr3Ms+wOvDYHUbQT2BV1/NAnaN4A4IT04fFsfjdRNkfP/yI3M/q9zwZheE
U9CKRdZsAd/I8/UY0N+u2J54bmPpFsgZbSRoF+hxD15pwAA3StIRDQbMSnyWpP7/
t/dpIXEnpQp/6Tzg8idiZfQqe6zZEz0b/rHw37d6TPXBQHzBveRqmeCZN8F4yCTO
mo0hcZb5JLvb02e4ZoYq4sDJMu/zsUcKWqYXc6UIQ2ZxoBEHsoBW2O416K/NVFof
meI/mQG8qQJlEEnH4qP59A/gAAnhDS1V0wdsHjxE8+eHbZy6iFg5ftg2DQ0XVqN6
4Nsw8k2AwlZ+EQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:20:03 2026 by rpki-client