Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/ce838a-d1d5-4707-821e-29c473386a90/1/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.mft
File:                     RHV8jQr1Y0rhQTfVIUAKL6yWKi4.mft (raw, json)
Hash identifier:          O0XmUnLkYmW4lXd0GLFFMxnPSPK9zvihM5OC7ZQgtcQ=
Subject key identifier:   24:E4:98:90:3C:5D:39:4D:59:54:49:60:2A:0A:BE:D5:C6:84:29:63
Authority key identifier: 44:75:7C:8D:0A:F5:63:4A:E1:41:37:D5:21:40:0A:2F:AC:96:2A:2E
Certificate issuer:       /CN=44757c8d0af5634ae14137d521400a2fac962a2e
Certificate serial:       01A0DF4EB03F20EB1CFCDEF52925BB73C5A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/ce838a-d1d5-4707-821e-29c473386a90/1/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.mft
Manifest number:          08
Signing time:             Sat 26 Sep 2026 20:01:11 +0000
Manifest this update:     Sat 26 Sep 2026 20:01:11 +0000
Manifest next update:     Sun 27 Sep 2026 20:01:11 +0000
Files and hashes:         1: G4UKp7_RGWS2eYNH1DVAyjr8YBM.roa (hash: r3jrCU9hKuBbcVfgFcmR3GrcrKrdMbHwwMc4+q5VzlE=)
                          2: RHV8jQr1Y0rhQTfVIUAKL6yWKi4.crl (hash: oLxUeBLjnlMyiniehoSDENjO44pJLeMq+SFdsUQcO/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/ce838a-d1d5-4707-821e-29c473386a90/1/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/ce838a-d1d5-4707-821e-29c473386a90/1/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:4e:b0:3f:20:eb:1c:fc:de:f5:29:25:bb:73:c5:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44757c8d0af5634ae14137d521400a2fac962a2e
        Validity
            Not Before: Sep 26 20:01:11 2026 GMT
            Not After : Sep 27 20:01:11 2026 GMT
        Subject: CN=24e498903c5d394d595449602a0abed5c6842963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:82:be:05:b2:8f:9d:15:91:2e:9e:34:32:
                    82:64:2b:c6:0d:8a:8b:8c:f8:89:e6:e6:68:4c:69:
                    3b:a7:1f:e0:f8:2c:55:49:44:04:62:a3:c7:f7:9e:
                    68:ca:84:16:47:44:3d:f7:e5:cb:ac:24:e9:bc:b1:
                    b8:5b:ca:e7:d4:db:bd:dd:ae:5b:33:5f:d4:13:29:
                    6a:02:18:ff:a2:13:59:5f:79:96:c9:59:d6:74:71:
                    c0:1b:da:5a:f7:ab:6b:f1:a6:cb:18:22:8e:30:8b:
                    7c:33:ad:fe:6b:e6:23:bd:ba:d4:00:b9:ce:ea:9d:
                    9b:9d:6d:f0:32:6a:3b:2d:e5:30:8c:d3:ba:2a:35:
                    b1:19:1d:c5:ca:79:77:a2:d4:3d:25:28:80:d4:18:
                    4b:47:7e:17:59:72:a1:f4:2b:02:c4:83:dd:e8:80:
                    65:6d:ca:23:ae:79:f4:b9:d9:a1:90:b7:6f:9c:8c:
                    83:87:56:77:0e:35:82:58:ba:35:b6:77:0e:c8:b3:
                    9a:9e:eb:a3:4d:0a:72:95:a8:94:a1:4c:33:f8:31:
                    8a:e4:f7:25:d4:7e:6b:26:0e:3b:c7:02:93:f5:3c:
                    25:87:66:6a:2b:fa:a5:b1:09:4b:1b:51:4f:7f:1b:
                    31:4e:43:c6:24:e2:b0:00:1b:17:c1:75:a5:b2:da:
                    18:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E4:98:90:3C:5D:39:4D:59:54:49:60:2A:0A:BE:D5:C6:84:29:63
            X509v3 Authority Key Identifier:
                keyid:44:75:7C:8D:0A:F5:63:4A:E1:41:37:D5:21:40:0A:2F:AC:96:2A:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ce838a-d1d5-4707-821e-29c473386a90/1/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ce838a-d1d5-4707-821e-29c473386a90/1/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:7b:58:64:b4:66:a8:2b:61:02:b6:6c:12:64:65:eb:c5:1d:
         d8:a0:d9:04:70:b6:26:b2:03:c9:46:cc:ac:d2:95:40:55:ef:
         0a:0f:1e:cb:08:ae:40:39:0c:0e:63:fa:70:3f:c4:c7:fb:60:
         f4:5a:7f:18:18:7c:4a:46:6f:14:64:d0:d9:d1:8c:a3:de:f4:
         6f:a1:d3:55:6b:29:76:d9:ea:e7:7b:fe:fc:d6:03:1f:72:b7:
         84:87:00:9a:d6:0b:35:ac:17:f8:ef:a0:29:0b:72:6f:05:44:
         3d:f3:8f:e4:0a:f2:af:bc:af:df:4d:d8:ce:c1:f6:d7:ca:9d:
         01:13:08:b6:38:bb:de:4f:e3:b0:30:d6:78:57:bd:ad:8c:ea:
         20:a0:52:80:a4:57:24:9a:7f:86:c0:86:11:4b:7b:93:98:06:
         81:ae:6a:a8:61:7f:b6:2d:db:c4:69:ce:14:ce:33:32:3f:41:
         e2:a9:d4:1b:d8:55:e8:4d:26:c0:90:1e:d0:1d:fc:2a:fc:8b:
         0b:0e:e4:92:b4:77:7b:d2:78:35:e2:3a:fa:0f:4e:09:f0:72:
         c5:de:70:c1:de:90:12:2d:9a:d5:0b:10:d6:cf:ca:31:50:c8:
         ce:f7:76:3b:5c:9d:1c:0c:59:3f:99:3a:be:42:5c:27:00:ea:
         42:67:88:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfTrA/IOsc/N71KSW7c8WpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NzU3YzhkMGFmNTYzNGFlMTQxMzdkNTIxNDAwYTJmYWM5
NjJhMmUwHhcNMjYwOTI2MjAwMTExWhcNMjYwOTI3MjAwMTExWjAzMTEwLwYDVQQD
EygyNGU0OTg5MDNjNWQzOTRkNTk1NDQ5NjAyYTBhYmVkNWM2ODQyOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv+CvgWyj50VkS6eNDKCZCvGDYqL
jPiJ5uZoTGk7px/g+CxVSUQEYqPH955oyoQWR0Q99+XLrCTpvLG4W8rn1Nu93a5b
M1/UEylqAhj/ohNZX3mWyVnWdHHAG9pa96tr8abLGCKOMIt8M63+a+YjvbrUALnO
6p2bnW3wMmo7LeUwjNO6KjWxGR3Fynl3otQ9JSiA1BhLR34XWXKh9CsCxIPd6IBl
bcojrnn0udmhkLdvnIyDh1Z3DjWCWLo1tncOyLOanuujTQpylaiUoUwz+DGK5Pcl
1H5rJg47xwKT9Twlh2ZqK/qlsQlLG1FPfxsxTkPGJOKwABsXwXWlstoY+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTkmJA8XTlNWVRJYCoKvtXGhCljMB8GA1UdIwQY
MBaAFER1fI0K9WNK4UE31SFACi+sliouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkhWOGpRcjFZMHJoUVRmVklVQUtMNnlXS2k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jZTgzOGEtZDFkNS00NzA3LTgyMWUt
MjljNDczMzg2YTkwLzEvUkhWOGpRcjFZMHJoUVRmVklVQUtMNnlXS2k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jZTgzOGEtZDFkNS00NzA3LTgyMWUtMjljNDczMzg2YTkw
LzEvUkhWOGpRcjFZMHJoUVRmVklVQUtMNnlXS2k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdHtYZLRm
qCthArZsEmRl68Ud2KDZBHC2JrIDyUbMrNKVQFXvCg8eywiuQDkMDmP6cD/Ex/tg
9Fp/GBh8SkZvFGTQ2dGMo970b6HTVWspdtnq53v+/NYDH3K3hIcAmtYLNawX+O+g
KQtybwVEPfOP5Aryr7yv303YzsH218qdARMItji73k/jsDDWeFe9rYzqIKBSgKRX
JJp/hsCGEUt7k5gGga5qqGF/ti3bxGnOFM4zMj9B4qnUG9hV6E0mwJAe0B38KvyL
Cw7kkrR3e9J4NeI6+g9OCfByxd5wwd6QEi2a1QsQ1s/KMVDIzvd2O1ydHAxZP5k6
vkJcJwDqQmeIeg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:27:44 2026 by rpki-client