Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
File:                     8rwR5uzToK8-5DlNy7ez75AYfTA.mft (raw, json)
Hash identifier:          +lwGmA7HBxwOMdOn0Mf7m3RDpEngzSQwxkHKUWfYauU=
Subject key identifier:   83:90:80:16:B0:EB:D8:A5:03:21:6D:30:E1:76:6F:AC:68:4C:D3:6D
Authority key identifier: F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30
Certificate issuer:       /CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
Certificate serial:       01A0D15C4CC91CD347931A9CC4C93A491338
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
Manifest number:          0DEF
Signing time:             Thu 24 Sep 2026 03:01:22 +0000
Manifest this update:     Thu 24 Sep 2026 03:01:22 +0000
Manifest next update:     Fri 25 Sep 2026 03:01:22 +0000
Files and hashes:         1: 0GtHSCiaQJFiDwKeyKhxviPbL4M.roa (hash: nhw++IeOTGTOw+566EuGYf99+61Y7CRqE1zkmgOdkhw=)
                          2: 8rwR5uzToK8-5DlNy7ez75AYfTA.crl (hash: xFNrbH31lVGIw/E7z6ZjA9YCehgGGrE+o7JXuipO8a0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5c:4c:c9:1c:d3:47:93:1a:9c:c4:c9:3a:49:13:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
        Validity
            Not Before: Sep 24 03:01:22 2026 GMT
            Not After : Sep 25 03:01:22 2026 GMT
        Subject: CN=83908016b0ebd8a503216d30e1766fac684cd36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:01:81:dc:d2:21:2c:11:51:be:73:fa:9b:4a:
                    03:39:a0:dd:72:1d:cd:bf:3c:15:df:f2:a6:c2:f3:
                    7a:df:22:b8:1b:f5:84:11:36:d4:6e:29:7c:92:d3:
                    96:f8:5d:b7:6e:98:3d:9d:ba:5d:71:74:8e:7b:3d:
                    6f:22:59:42:0b:ec:35:9d:b8:4b:c7:41:58:dc:8e:
                    ed:fd:ca:56:15:3b:39:86:90:77:88:e4:6d:5b:26:
                    8f:5d:1a:f9:9f:58:7f:85:bd:35:5a:95:c6:75:db:
                    ef:c5:79:57:fa:bd:56:0a:cb:62:21:33:bd:ea:50:
                    3a:b0:51:b8:9e:5b:9c:ea:e9:98:33:81:1c:f7:77:
                    50:f0:16:01:bf:43:da:67:d4:d1:0e:7f:40:87:08:
                    b2:85:14:c4:18:52:ea:33:7d:fb:d9:84:35:d8:59:
                    88:65:4d:a5:99:03:ba:d5:54:79:50:0a:82:ff:63:
                    2b:ed:69:21:ec:97:7e:18:eb:80:0b:e2:55:fd:c6:
                    95:f4:b5:d0:c3:11:fd:43:89:bc:51:36:06:f3:0a:
                    c8:9e:0c:50:09:31:be:e4:3b:ed:84:5b:de:82:05:
                    3c:32:d6:d1:3e:2c:47:25:30:7a:14:c5:ef:9c:fd:
                    af:bc:ff:e1:e2:a4:b9:86:4d:32:ad:81:93:fa:ff:
                    dc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:90:80:16:B0:EB:D8:A5:03:21:6D:30:E1:76:6F:AC:68:4C:D3:6D
            X509v3 Authority Key Identifier:
                keyid:F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:01:a0:31:40:50:8b:cd:6a:19:dd:a0:d7:35:c7:04:11:64:
         e9:95:96:2e:13:21:b8:2b:cc:8f:93:27:bf:cf:d7:da:d2:c1:
         8a:be:1f:07:86:8e:ec:50:b9:07:3e:44:1d:98:92:57:1e:cb:
         83:3e:72:b1:25:f8:d1:af:34:9a:84:22:d4:ae:ca:b1:c6:ee:
         8c:3f:2e:a0:a2:c5:2c:29:dc:64:9c:48:a2:64:72:c1:d0:1a:
         f6:37:7f:b0:d1:10:17:54:00:66:eb:02:25:ad:9b:83:4a:58:
         34:d3:2d:7a:12:f7:f8:9b:b9:55:3a:f7:79:1e:e2:8d:45:90:
         da:f3:ad:6e:a1:ea:8b:b6:ad:28:45:97:a5:e6:1d:eb:ef:b5:
         f5:1a:05:3d:1a:50:3e:74:8e:ca:d5:f6:d6:8e:40:43:82:61:
         3e:2c:e6:dc:2a:d0:a1:c2:cb:c3:d3:3b:93:f6:7e:f6:bc:9d:
         78:5f:a8:9f:9a:e6:3a:05:80:6a:6a:fa:e9:d9:e0:95:94:2b:
         e2:dc:2b:fe:ed:04:4e:51:58:40:5b:68:c9:4b:44:45:cc:37:
         69:63:76:d8:db:b6:d2:e7:87:21:63:d4:98:69:53:4c:a1:25:
         cb:e5:cc:eb:ab:83:9b:71:67:0c:5e:bc:f9:4e:e5:9f:95:f2:
         03:26:14:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:50:24 2026 by rpki-client