Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
File:                     8D9771R9ACUziqa2rueqHb4Urio.mft (raw, json)
Hash identifier:          EE9lCBDYAdrnzyufaaOYfPHMLX4DtJq1nGeE0rvcviM=
Subject key identifier:   E8:1D:13:1A:D7:68:A5:DD:D4:79:FC:19:C3:36:30:3D:D6:08:04:84
Authority key identifier: F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
Certificate issuer:       /CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Certificate serial:       01A0CBC7C39E6B68EA85CAF75796BA0BC808
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
Manifest number:          1A66
Signing time:             Wed 23 Sep 2026 01:01:01 +0000
Manifest this update:     Wed 23 Sep 2026 01:01:01 +0000
Manifest next update:     Thu 24 Sep 2026 01:01:01 +0000
Files and hashes:         1: 8D9771R9ACUziqa2rueqHb4Urio.crl (hash: 0AZ3KYZSfiZbCoiVtvW5mHE0nGYtryUsi8q1/D5eyRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:c3:9e:6b:68:ea:85:ca:f7:57:96:ba:0b:c8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
        Validity
            Not Before: Sep 23 01:01:01 2026 GMT
            Not After : Sep 24 01:01:01 2026 GMT
        Subject: CN=e81d131ad768a5ddd479fc19c336303dd6080484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0c:45:ec:11:71:1f:89:2a:b3:7a:b4:13:2a:
                    ae:b0:43:92:1a:e2:5b:93:88:04:eb:46:3c:d7:c3:
                    ab:32:de:34:a3:ba:15:ae:66:4e:a8:4a:c5:26:97:
                    9d:6d:1e:b4:b2:df:e6:02:6b:1c:6d:b3:9d:25:3a:
                    f6:76:cb:aa:64:d0:2a:17:70:c4:d6:40:91:a7:8f:
                    0c:9d:11:6b:30:0f:12:73:b5:86:ee:ec:1e:73:72:
                    fa:ee:64:0d:7e:15:d2:37:4c:0d:ca:73:d4:3c:26:
                    92:f8:43:73:1e:62:90:ab:80:5c:de:94:13:56:52:
                    3e:ce:fe:19:a3:3a:5f:41:8e:55:03:1f:ac:de:d0:
                    24:76:36:0f:fa:60:85:d1:52:53:5b:55:de:bb:b1:
                    41:0a:38:a1:69:22:f3:63:86:a5:b4:47:49:85:a8:
                    35:6e:98:06:f5:54:08:92:68:c4:a4:dc:9d:dd:55:
                    00:07:09:f1:53:85:40:1c:23:42:76:8a:5b:80:df:
                    10:72:17:8c:a0:49:dc:20:e5:5d:2d:74:a2:04:6f:
                    21:b5:10:72:f7:78:80:f9:c9:2f:65:8a:df:7a:85:
                    60:fc:69:4a:31:35:14:63:7b:3d:66:39:05:f3:c1:
                    03:e8:02:09:96:84:5a:ef:af:54:70:d8:3e:a8:77:
                    93:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1D:13:1A:D7:68:A5:DD:D4:79:FC:19:C3:36:30:3D:D6:08:04:84
            X509v3 Authority Key Identifier:
                keyid:F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:88:72:56:3b:b3:5b:c5:72:d2:21:49:81:0c:2b:cf:9c:e0:
         de:f6:70:5f:0f:56:a6:5c:c2:e3:c1:8d:77:8c:35:26:58:98:
         38:11:64:ce:75:5d:56:bf:34:64:b8:33:00:7a:f1:c5:5d:9d:
         6e:e5:11:d3:d8:c1:ad:61:a8:1f:2e:16:40:af:3f:71:0d:c2:
         c6:4f:8e:c1:57:cb:68:07:e1:96:b2:b9:90:e2:7b:e1:a0:43:
         c2:26:c4:e8:f0:57:4d:d7:d5:4f:0c:c3:04:19:ca:a8:bf:a6:
         81:71:50:2a:f1:b1:d8:25:1e:84:c8:ba:83:47:d4:cd:b4:24:
         67:68:d9:d7:63:d4:d8:dc:f9:28:cc:74:a6:43:cb:48:83:9f:
         db:ea:9c:bd:27:52:da:b6:25:c0:02:52:40:4d:01:12:d1:ff:
         2b:3f:09:70:8c:07:97:d0:e5:bd:7c:b0:e2:6a:cb:77:5c:ff:
         14:e7:1c:f0:bf:7c:82:a2:d1:1c:2d:14:12:a9:04:bd:59:00:
         aa:80:16:97:be:60:92:84:38:aa:99:a9:00:d5:ce:59:c1:06:
         cd:d8:fa:2d:ad:ef:04:45:84:02:8e:0f:b5:ba:d2:64:e4:f6:
         ec:55:9b:70:95:5f:7c:10:6b:f1:67:fa:6e:35:29:4e:dc:b0:
         36:18:d0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:06:43 2026 by rpki-client