Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File:                     8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier:          W3woZ+7G4qrh/guqx4gMnnNreboOFrMRpFHu7YZcR34=
Subject key identifier:   F2:62:33:15:8A:0B:3A:44:99:DD:26:3E:0D:F3:7C:A6:50:67:A9:73
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer:       /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial:       01A0DA5F90500D448A2220D5A834807AD47D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number:          1366
Signing time:             Fri 25 Sep 2026 21:01:30 +0000
Manifest this update:     Fri 25 Sep 2026 21:01:30 +0000
Manifest next update:     Sat 26 Sep 2026 21:01:30 +0000
Files and hashes:         1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: UfZOxKG4TVD7Mh57RSjXOrJGoUgEDGesoW127eg+nT8=)
                          2: VK5J5QXmsEfKr-yeuBSA7pgMRS0.roa (hash: QEOQEZoGmfNdE7eYFQFsPYIivVEyHZdR3wVt3CbFPeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 21:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:5f:90:50:0d:44:8a:22:20:d5:a8:34:80:7a:d4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
        Validity
            Not Before: Sep 25 21:01:30 2026 GMT
            Not After : Sep 26 21:01:30 2026 GMT
        Subject: CN=f26233158a0b3a4499dd263e0df37ca65067a973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f4:03:8e:91:27:2a:00:c0:09:73:af:c0:f9:
                    77:93:9e:b2:0e:d2:5a:38:05:28:f9:83:23:db:28:
                    09:4f:2c:5a:16:91:1b:30:7c:2e:19:7e:d1:d9:af:
                    cb:c4:e1:f4:d8:02:68:f3:f5:e0:ae:d2:06:4c:9d:
                    e2:1c:cd:af:6c:3e:8d:c6:04:c4:a1:f4:03:3c:40:
                    3c:a5:bd:2d:d4:1d:bd:82:a1:5a:2f:21:e1:f9:a4:
                    2e:d0:1d:64:47:5c:7f:4a:92:55:8f:8a:b1:c5:95:
                    8f:b7:6f:e5:7f:77:e0:3c:6d:f1:3a:2a:57:27:05:
                    23:f5:95:8d:a0:f7:e1:58:89:20:ce:50:cc:62:36:
                    20:a0:66:59:6e:33:f7:b9:4f:93:f4:2b:46:c4:a0:
                    9a:5c:9a:1b:51:d8:8a:96:60:39:0a:02:bc:08:bf:
                    97:b4:37:0d:31:e2:bf:21:75:12:1d:97:56:51:ba:
                    25:a5:e9:66:09:c2:ee:dc:8b:49:e0:51:ac:88:c5:
                    e7:9c:c0:a1:28:f5:ef:bc:21:f6:b8:ae:c3:5e:b7:
                    12:bd:90:2c:8f:f9:13:b0:81:d1:d5:3b:e9:8d:d6:
                    40:0d:3b:0a:3f:bd:47:a7:78:64:9e:f0:ef:1a:5d:
                    6e:bb:28:61:52:2a:0f:85:eb:5e:da:1b:fd:bc:b4:
                    19:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:62:33:15:8A:0B:3A:44:99:DD:26:3E:0D:F3:7C:A6:50:67:A9:73
            X509v3 Authority Key Identifier:
                keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ce:86:3b:22:2d:ad:8a:46:1c:b7:9a:8a:d3:d0:31:73:87:
         5e:44:7d:d0:6a:40:b1:7b:c9:17:78:72:ca:b4:2c:b3:97:b2:
         c5:c1:e4:ee:da:7e:2e:5c:6b:8c:43:78:d6:61:d9:c4:0e:08:
         dc:9d:1f:4f:f8:30:09:08:3f:e0:f4:3e:82:e4:ca:44:a7:28:
         e2:d5:56:eb:13:51:3c:2a:cb:9e:45:75:16:fb:d2:eb:0e:90:
         d8:fe:97:4f:77:a3:a6:ab:ef:3e:5f:56:75:90:e9:56:20:83:
         6f:38:81:15:8a:a0:cf:81:52:7b:71:b4:3f:ba:be:18:e7:c4:
         3e:0a:9e:2b:24:64:a5:10:f5:e9:4a:2e:70:14:ba:a1:b5:3f:
         17:ff:15:b8:ee:17:a0:5b:ee:90:f9:f3:5c:e6:01:01:3f:ff:
         e1:15:05:92:82:f2:07:4f:84:f1:aa:a4:3e:52:df:a9:fa:85:
         28:9c:02:09:a4:8f:c4:18:bf:2b:b3:9d:d1:01:07:d1:32:5e:
         2d:a7:3b:77:ce:ee:79:4f:7f:bd:06:6a:a0:1e:0d:10:29:ce:
         99:2c:84:dc:32:bb:65:5d:e2:5e:26:96:fa:0e:42:51:56:25:
         1a:79:e7:98:07:18:b4:b3:d3:46:3b:ff:fb:1e:49:ac:85:66:
         6a:2b:3e:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaX5BQDUSKIiDVqDSAetR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZDU5M2IxYzg3YjgxNzM5ZWM0MTkxMDI5NWJmMzg1ZjJj
OWE5OTIwHhcNMjYwOTI1MjEwMTMwWhcNMjYwOTI2MjEwMTMwWjAzMTEwLwYDVQQD
EyhmMjYyMzMxNThhMGIzYTQ0OTlkZDI2M2UwZGYzN2NhNjUwNjdhOTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPQDjpEnKgDACXOvwPl3k56yDtJa
OAUo+YMj2ygJTyxaFpEbMHwuGX7R2a/LxOH02AJo8/XgrtIGTJ3iHM2vbD6NxgTE
ofQDPEA8pb0t1B29gqFaLyHh+aQu0B1kR1x/SpJVj4qxxZWPt2/lf3fgPG3xOipX
JwUj9ZWNoPfhWIkgzlDMYjYgoGZZbjP3uU+T9CtGxKCaXJobUdiKlmA5CgK8CL+X
tDcNMeK/IXUSHZdWUbolpelmCcLu3ItJ4FGsiMXnnMChKPXvvCH2uK7DXrcSvZAs
j/kTsIHR1TvpjdZADTsKP71Hp3hknvDvGl1uuyhhUioPhete2hv9vLQZ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJiMxWKCzpEmd0mPg3zfKZQZ6lzMB8GA1UdIwQY
MBaAFPLVk7HIe4FznsQZEClb84XyyamSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHRXVHNjaDdnWE9leEJrUUtWdnpoZkxKcVpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85MzkxYTYtZGQzZi00OTMzLTlkYTIt
OWI4ZDY4ZWU4N2ZjLzEvOHRXVHNjaDdnWE9leEJrUUtWdnpoZkxKcVpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85MzkxYTYtZGQzZi00OTMzLTlkYTItOWI4ZDY4ZWU4N2Zj
LzEvOHRXVHNjaDdnWE9leEJrUUtWdnpoZkxKcVpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhM6GOyIt
rYpGHLeaitPQMXOHXkR90GpAsXvJF3hyyrQss5eyxcHk7tp+LlxrjEN41mHZxA4I
3J0fT/gwCQg/4PQ+guTKRKco4tVW6xNRPCrLnkV1FvvS6w6Q2P6XT3ejpqvvPl9W
dZDpViCDbziBFYqgz4FSe3G0P7q+GOfEPgqeKyRkpRD16UoucBS6obU/F/8VuO4X
oFvukPnzXOYBAT//4RUFkoLyB0+E8aqkPlLfqfqFKJwCCaSPxBi/K7Od0QEH0TJe
Lac7d87ueU9/vQZqoB4NECnOmSyE3DK7ZV3iXiaW+g5CUVYlGnnnmAcYtLPTRjv/
+x5JrIVmais+0g==
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:00:33 2026 by rpki-client