Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
File:                     8V__itxu51EnLAqR0F3K_36NLWk.mft (raw, json)
Hash identifier:          onTC6Rfqucle/IJhf9mNPJTajvw+l0PnQj7Q8Q6bkuc=
Subject key identifier:   41:D6:83:8C:3E:C6:C4:4A:88:32:8F:A7:3A:8C:82:9E:63:AC:83:12
Authority key identifier: F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69
Certificate issuer:       /CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
Certificate serial:       01A0D19291839C8BCD92D87518A7277699B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
Manifest number:          1A6A
Signing time:             Thu 24 Sep 2026 04:00:38 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:38 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:38 +0000
Files and hashes:         1: 8V__itxu51EnLAqR0F3K_36NLWk.crl (hash: YoWVZBD17hjsEJST+x0iBxbWho8uS+WSAolfIePi92k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 04:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:91:83:9c:8b:cd:92:d8:75:18:a7:27:76:99:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
        Validity
            Not Before: Sep 24 04:00:38 2026 GMT
            Not After : Sep 25 04:00:38 2026 GMT
        Subject: CN=41d6838c3ec6c44a88328fa73a8c829e63ac8312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:51:0d:a9:a8:d3:b5:5f:2f:86:28:bc:9c:00:
                    27:a9:4a:c9:45:40:5e:31:d7:ac:52:39:99:63:d5:
                    27:d7:f7:72:78:59:51:a4:45:5f:be:d7:e5:ad:5c:
                    6e:7e:bc:27:c9:ad:d1:23:bf:f7:db:df:82:84:1c:
                    d2:1f:2b:b1:30:37:fa:60:4a:51:c0:3f:49:d7:81:
                    3d:46:df:0e:b6:cc:0e:56:ed:ac:6f:ea:0c:01:85:
                    71:1a:2c:4a:91:84:23:01:67:67:a1:74:3d:08:4b:
                    88:52:60:3a:45:61:08:df:85:b0:58:7e:47:bf:23:
                    93:00:4c:04:de:4e:a3:f4:cb:c9:ec:e5:6a:9c:4a:
                    2f:d0:3e:89:db:b5:c1:80:23:d8:b6:52:e3:5d:2d:
                    1f:e0:bc:85:98:36:25:7d:c4:a7:d4:57:cd:72:15:
                    42:46:1a:ea:04:d2:db:d6:79:f0:a7:6f:bb:09:75:
                    9f:3b:fe:d5:99:6d:d8:f9:c7:5d:22:55:a0:3a:7a:
                    c4:7f:46:0c:4a:7e:32:df:66:d6:f1:5a:c6:93:5b:
                    38:5e:62:3e:a1:4d:07:57:c7:49:35:ed:8e:ca:09:
                    e8:a1:12:5d:fe:31:af:7d:52:61:52:0f:5e:bb:10:
                    c6:7b:72:fc:d7:0f:f4:72:86:a5:06:0e:41:db:85:
                    37:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D6:83:8C:3E:C6:C4:4A:88:32:8F:A7:3A:8C:82:9E:63:AC:83:12
            X509v3 Authority Key Identifier:
                keyid:F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:3e:48:0b:36:fd:63:84:8c:5b:5b:4c:f3:de:9b:9c:43:48:
         9f:ed:4c:cd:9e:24:31:ce:8f:1c:81:4e:e6:d8:b6:cc:47:a8:
         8f:52:de:3b:56:bb:17:5a:b1:c8:b6:b6:04:aa:e3:97:11:d7:
         6e:fd:ef:fe:b6:05:55:c4:18:04:ae:6b:a8:e2:47:e9:5a:97:
         c5:5a:85:9e:e5:21:62:1d:05:49:25:5b:24:cb:bb:6f:21:4d:
         d2:e7:98:6b:64:e6:89:1b:d3:19:ee:f2:0e:8a:24:f6:06:d2:
         c8:e6:af:cd:ce:a4:0f:cd:48:c0:8f:be:a4:c3:f1:2e:98:ed:
         3d:1c:2f:c2:73:22:2d:97:62:54:76:ff:b6:54:b3:a8:10:51:
         d2:3e:d5:47:af:d2:14:51:46:3b:ce:c0:b8:a3:8c:76:2c:9b:
         6a:e5:10:81:4b:a4:28:9e:32:01:0b:0d:c7:9a:26:c8:84:f5:
         da:1e:eb:11:c4:53:8e:61:97:35:14:5b:ec:b0:08:70:5e:91:
         09:e9:05:4b:13:50:fc:7d:1e:b5:85:4a:3a:cb:7f:bf:98:a0:
         c6:c1:5b:c9:7f:0a:de:6c:a5:f0:4c:da:97:b7:12:4c:9f:10:
         f9:43:af:d4:21:fb:3e:0e:a3:aa:e9:e8:50:5e:23:77:37:50:
         8d:79:b7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:11:23 2026 by rpki-client