Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
File:                     8VCW_jOQRJyTboVwYdSmll1AijE.mft (raw, json)
Hash identifier:          qyav7DVOHro2lch51yT1W+zXC15VuYIBoN5MPYtgNUs=
Subject key identifier:   57:C0:C2:A5:48:4F:9D:D4:36:1F:A0:59:FB:B1:3E:A6:C7:4C:79:73
Authority key identifier: F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
Certificate issuer:       /CN=f15096fe3390449c936e857061d4a6965d408a31
Certificate serial:       01A0D983698B8284032D8D916CC39C95F99E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
Manifest number:          1076
Signing time:             Fri 25 Sep 2026 17:01:03 +0000
Manifest this update:     Fri 25 Sep 2026 17:01:03 +0000
Manifest next update:     Sat 26 Sep 2026 17:01:03 +0000
Files and hashes:         1: 8VCW_jOQRJyTboVwYdSmll1AijE.crl (hash: Fx2y84tCxrI84FMtH191NmybGf1RMoBePYqju36kDvM=)
                          2: WOvdhijn_s2DZtcctLEpLuIdUNw.roa (hash: Z7s2Qx4CcpmhX86cISi/NLHh5qOxWJPe6Z62x5xT1Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:83:69:8b:82:84:03:2d:8d:91:6c:c3:9c:95:f9:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15096fe3390449c936e857061d4a6965d408a31
        Validity
            Not Before: Sep 25 17:01:03 2026 GMT
            Not After : Sep 26 17:01:03 2026 GMT
        Subject: CN=57c0c2a5484f9dd4361fa059fbb13ea6c74c7973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:07:1a:ec:49:db:1b:ad:71:c7:c5:19:96:06:
                    df:25:c1:87:a8:f8:05:c1:d7:16:1b:9d:16:f4:82:
                    1f:7b:a5:24:94:7a:58:c4:7e:8d:e8:6e:a2:61:0c:
                    ef:aa:e4:75:ba:1c:42:e5:58:55:e9:0b:28:50:29:
                    46:fc:e8:74:74:d2:fd:2b:30:68:6a:ae:95:d9:86:
                    1e:09:99:2e:62:9f:34:73:7c:b8:a7:76:64:9e:44:
                    3e:d1:c3:7d:70:9f:81:10:8e:50:37:83:e6:6a:47:
                    ae:bc:55:85:3b:63:5c:45:ff:94:67:9f:08:e9:4a:
                    ea:31:b6:33:b6:78:a3:be:fd:d8:be:cd:f3:b4:0c:
                    45:83:31:b1:b6:8c:50:b3:64:a6:ab:30:2d:f1:01:
                    34:b3:46:3b:09:62:61:31:f7:d5:3a:14:5c:74:f1:
                    e0:d3:32:e9:d0:2d:f3:d6:1d:83:4f:30:37:ce:9d:
                    90:07:82:a9:d0:57:6c:81:f6:09:22:e5:9c:9a:9b:
                    b0:9e:65:ee:f7:27:ff:40:7b:b5:71:42:c0:b9:b8:
                    a9:83:ce:2e:a3:3c:d8:76:f6:74:50:64:39:0a:ce:
                    75:fd:e6:b4:45:6e:78:3a:86:61:c0:c4:7c:fb:8c:
                    3c:22:b6:24:8f:97:c0:26:a7:cd:d5:1e:25:88:54:
                    24:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C0:C2:A5:48:4F:9D:D4:36:1F:A0:59:FB:B1:3E:A6:C7:4C:79:73
            X509v3 Authority Key Identifier:
                keyid:F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:55:06:13:73:e5:dd:9c:d8:2b:94:df:f6:e0:2e:9f:6f:a6:
         b2:b1:46:1f:5d:95:d9:a1:c3:a9:6d:c9:6d:2b:7b:d3:ee:9c:
         6f:c8:d4:23:0a:a8:ac:1f:72:fb:97:31:83:3c:ff:50:ae:74:
         da:f1:68:1c:0f:a0:e0:45:17:62:ff:9a:01:4f:a4:67:08:ed:
         c9:a4:40:df:2f:55:59:11:8a:6d:c0:f5:72:e7:ce:89:0c:2a:
         cf:54:99:d8:7b:47:26:d2:00:93:c6:3e:96:b3:34:22:8a:1b:
         3c:9d:03:c1:12:7e:bb:0a:a7:da:77:3a:6f:54:78:e2:ba:dd:
         cc:e6:e0:e9:ad:df:cc:83:9d:fe:2b:7e:68:1c:fd:56:8b:66:
         01:ca:74:58:43:84:9f:87:be:e6:b1:4a:e6:45:24:70:88:8b:
         a5:53:b7:ab:73:1c:ee:c6:06:1a:d3:34:d2:70:43:90:b9:5a:
         f1:dc:cf:29:b7:95:ed:30:c1:03:dc:ec:46:70:ab:2d:50:9d:
         d0:e3:62:44:ff:4d:e3:0d:d3:08:f0:3b:7d:47:00:fa:5c:a9:
         a6:b6:ff:68:29:41:08:f4:b9:55:cc:94:45:08:30:27:7e:5a:
         c3:a3:a3:fd:88:c2:90:f5:35:16:18:46:cc:8c:ec:72:77:83:
         04:33:df:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:28:04 2026 by rpki-client