Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File:                     8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier:          EcQBWLhz2MWWTCajLvMzNRwhrrr4VCtJXfsYEObqP/g=
Subject key identifier:   26:8E:C4:1E:46:31:35:BF:79:EC:73:F4:7E:C5:49:63:1C:7C:3A:92
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer:       /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial:       01A0D0494FB4E7CD75DBEF794B8518A1BEFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number:          11F9
Signing time:             Wed 23 Sep 2026 22:01:00 +0000
Manifest this update:     Wed 23 Sep 2026 22:01:00 +0000
Manifest next update:     Thu 24 Sep 2026 22:01:00 +0000
Files and hashes:         1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: U4K/iPIQvSnJ7CS3mVIOXs57S3QgLbt3OR5OOeaDSfg=)
                          2: kAZmzQ0U-tWvr0f-02x69bXjUAU.roa (hash: 5WlvJHiQOeb7v4dnN4FdtefOtV8drHOu9JZO31PSCrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:49:4f:b4:e7:cd:75:db:ef:79:4b:85:18:a1:be:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
        Validity
            Not Before: Sep 23 22:01:00 2026 GMT
            Not After : Sep 24 22:01:00 2026 GMT
        Subject: CN=268ec41e463135bf79ec73f47ec549631c7c3a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1c:a5:ce:a9:1b:39:9f:03:4b:a8:7e:9c:f8:
                    94:3b:0a:ff:d1:37:ce:bb:76:59:70:cb:cc:09:1a:
                    6a:6f:0e:12:8b:e4:67:79:e4:bb:97:0b:2c:52:9e:
                    34:bb:62:d2:57:47:01:d7:bb:92:d4:e4:f1:34:20:
                    b3:bb:bc:6a:9e:a6:f0:65:d5:e0:2f:ca:16:64:4a:
                    4e:e0:38:6d:cd:be:d8:86:85:16:24:b5:7e:9d:f0:
                    e9:a6:4b:57:a1:9c:49:b3:be:45:e3:7a:75:52:4f:
                    69:a8:11:84:e7:24:e0:43:59:cf:35:ce:7d:6e:f8:
                    d6:4a:ed:df:6c:a4:76:76:60:4a:f1:73:d7:c6:5b:
                    41:24:84:21:59:0c:41:f8:28:e1:35:ec:b1:f7:11:
                    bb:e4:20:67:a3:c4:b0:89:b6:a2:37:03:8d:d6:a9:
                    8f:c7:3e:08:bc:cc:2d:3b:cc:29:10:33:2b:b6:0e:
                    56:d0:0c:87:e8:37:73:a8:7b:92:b6:12:61:d7:d6:
                    74:5a:16:b0:d1:41:41:3f:b6:4c:4f:f8:e6:3b:77:
                    96:d5:c9:55:2e:a0:bc:94:ad:23:43:eb:77:5a:4c:
                    ad:b6:72:e4:c4:74:71:58:42:58:c1:6d:70:ae:9d:
                    e9:a2:00:be:71:3d:41:bf:5b:7c:26:da:94:f0:9c:
                    8c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8E:C4:1E:46:31:35:BF:79:EC:73:F4:7E:C5:49:63:1C:7C:3A:92
            X509v3 Authority Key Identifier:
                keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:59:b6:cb:9f:24:41:15:cd:b1:07:2b:97:5e:04:14:4c:4e:
         0c:d3:ac:85:96:3d:39:8b:7a:a0:77:27:c0:ef:ab:ec:8b:64:
         5a:9f:67:71:2f:52:09:dd:91:ac:5a:50:2e:e2:cf:5d:c0:2e:
         b1:36:83:3c:2f:5d:78:53:4b:bd:f5:b1:a5:32:35:a8:f4:da:
         0a:ea:8b:cc:c1:98:7a:07:39:99:f4:c7:a7:39:f8:bf:3b:15:
         c4:ef:e3:92:88:29:6f:9b:90:b2:9f:8f:91:59:c4:9c:ce:b4:
         17:88:7a:b6:48:e5:d8:eb:b3:1a:0b:3f:08:be:ec:48:38:c6:
         6d:f4:5d:d7:d2:d1:9f:8a:07:7a:83:b8:06:d6:ab:97:ca:aa:
         3b:2c:78:2f:56:52:e8:28:c2:0c:d9:51:05:7a:12:0b:cb:89:
         25:54:cf:af:0f:87:0c:59:0a:a2:3c:11:dc:27:a0:02:68:06:
         f0:d4:63:7c:71:a0:2c:9e:e7:59:27:d2:d8:16:03:79:c3:82:
         09:f5:4e:2d:80:ad:76:5b:e0:45:2b:eb:4b:7b:4a:c3:63:04:
         92:86:af:e0:55:53:10:38:50:a8:64:38:f1:56:3c:f2:fa:df:
         6e:eb:48:a4:aa:1a:ce:42:62:1c:4c:9a:cf:02:7e:1e:72:1e:
         5c:4d:20:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:49:35 2026 by rpki-client