Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
File:                     E8xjCawwp_wBXDNEy8gIYbTFR88.mft (raw, json)
Hash identifier:          7mdiM7s0ed5kfsk40L2CFAepnu7vU+Za7FxZY3Kn7T0=
Subject key identifier:   B8:7D:B2:53:42:7B:D8:B4:F7:62:BF:03:3D:A8:AB:1C:62:66:E4:83
Authority key identifier: 13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF
Certificate issuer:       /CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf
Certificate serial:       01A10F281DB1C4A0C34AE0803B0FCA04F5B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
Manifest number:          1A8D
Signing time:             Tue 06 Oct 2026 03:00:49 +0000
Manifest this update:     Tue 06 Oct 2026 03:00:49 +0000
Manifest next update:     Wed 07 Oct 2026 03:00:49 +0000
Files and hashes:         1: E8xjCawwp_wBXDNEy8gIYbTFR88.crl (hash: 5sW5+B6isgO2VrgWjrur6PIZBsHnnx7MejE1gR3WdeA=)
                          2: R8Gs30w7EN8-cgR-5U0CuiIru9c.roa (hash: /qQhhsnrEF9R0fNTeVrjFQh/rw+MYhaoTaP0tgVxg4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 23:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0f:28:1d:b1:c4:a0:c3:4a:e0:80:3b:0f:ca:04:f5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf
        Validity
            Not Before: Oct  6 03:00:49 2026 GMT
            Not After : Oct  7 03:00:49 2026 GMT
        Subject: CN=b87db253427bd8b4f762bf033da8ab1c6266e483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:dd:e6:d2:36:46:15:c5:ff:96:bd:e5:2e:
                    a5:19:dc:61:0e:7a:8f:51:fe:c4:e9:8e:aa:97:1a:
                    99:ef:ee:de:9b:82:3d:af:99:f2:2d:d9:7c:1c:3b:
                    5f:06:21:56:40:38:19:04:59:8e:f5:96:5c:fc:a5:
                    32:68:7c:b9:48:75:72:8a:3c:95:a0:b7:42:9f:f3:
                    32:be:2a:1e:fe:78:9e:d6:0b:79:d6:a4:96:23:63:
                    55:8b:72:6f:bc:03:b7:e7:6b:82:2a:53:86:44:62:
                    13:ad:dc:25:ae:a1:c2:c1:b5:6d:e6:e2:9c:79:38:
                    89:b7:6d:b9:9b:21:c0:f3:9b:39:28:9a:73:0c:6b:
                    e8:7c:c2:4e:cf:f2:47:4c:c6:41:f7:ae:89:ed:08:
                    22:b0:b4:ee:52:8e:75:78:db:57:e3:a1:8f:4c:d7:
                    6f:6c:f0:79:77:d4:7a:57:2c:80:9e:2c:6c:6f:43:
                    64:93:cd:04:ba:f3:2a:2c:d8:c8:d2:e1:f6:e6:b9:
                    b5:65:f1:ea:3e:e6:70:e3:83:56:51:f4:13:2c:83:
                    4c:90:86:c5:8d:21:d5:6d:c5:ed:9c:fc:c4:55:18:
                    00:67:23:84:c2:c8:ab:9e:25:b4:29:4d:a6:4c:7f:
                    4a:dc:ea:69:44:07:c3:5e:30:bc:d4:88:ca:1b:8f:
                    e2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7D:B2:53:42:7B:D8:B4:F7:62:BF:03:3D:A8:AB:1C:62:66:E4:83
            X509v3 Authority Key Identifier:
                keyid:13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:49:02:05:aa:44:9c:e0:82:bd:68:c1:90:23:89:c5:df:79:
         63:d2:14:e6:64:26:79:34:2c:36:f7:f3:3f:d5:73:df:ce:1c:
         d4:90:a2:54:5e:79:09:4b:ae:6a:9c:dc:10:4a:62:12:36:16:
         56:48:d0:52:58:8d:ab:df:a1:a5:d1:48:4e:32:05:6e:12:8b:
         05:31:e9:9a:e0:f0:f0:17:88:ef:74:0a:e1:e9:17:c1:76:5e:
         6f:73:0c:b8:c1:df:f6:19:7b:42:09:74:07:27:1d:c8:c2:fa:
         14:a0:d9:bd:42:96:39:c6:0b:50:20:51:b3:95:27:46:c8:05:
         3a:51:71:2d:38:f7:b9:d2:3b:ec:fb:33:57:19:8a:85:51:b6:
         11:28:70:8d:6c:48:12:c4:6b:82:fa:f0:9f:11:e8:c9:89:b2:
         8e:3a:03:1f:b3:b4:02:60:22:ee:55:30:b9:0d:b3:91:62:83:
         47:b1:7a:0a:c4:3d:32:79:3c:87:ef:11:2b:ce:ba:9b:05:ee:
         e6:7b:93:da:0d:73:85:4b:19:30:61:7a:69:65:82:7e:c8:83:
         cb:a0:c6:2b:f1:60:9d:2a:40:4a:07:28:81:7c:15:8b:2c:2e:
         8a:66:67:5b:2e:6b:9d:cc:0f:d7:9f:21:b1:95:20:41:6f:ea:
         4e:27:c6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 10:53:15 2026 by rpki-client