Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
File:                     8x7XsfY7UapRap_8sDWjoNaeZaE.mft (raw, json)
Hash identifier:          F+vHtoqzdwHmSKs9O8ETmiIB0VXzzgGF8Ek6wVEuhbA=
Subject key identifier:   0F:C3:56:EB:0E:02:B1:74:C7:A2:93:DD:39:1A:55:B0:4A:5B:4B:92
Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
Certificate issuer:       /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Certificate serial:       01A14A2B13D3E957751E27B1F08230BCE6DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
Manifest number:          0BAD
Signing time:             Sat 17 Oct 2026 14:01:39 +0000
Manifest this update:     Sat 17 Oct 2026 14:01:39 +0000
Manifest next update:     Sun 18 Oct 2026 14:01:39 +0000
Files and hashes:         1: 8x7XsfY7UapRap_8sDWjoNaeZaE.crl (hash: k8ol9jDGtACM7Eeeg4CRET1+ec2hy2GzhQJsEpPaqEs=)
                          2: GueQ_mhDztm052O4uyOCzydd4Hs.roa (hash: epijumWayC3hiz/5d4RYWJuCrfwASsOYBSEL2afKyYw=)
                          3: LnJF2aD-QXKwpEm_SmQC9mOkxDQ.roa (hash: Pb/xRiuCx9q0KwFGi99PEmlzF0Owu6wPxhv4o/s2A64=)
                          4: TQVndCb0s6YbFLg-Ck3Joxzpvnk.roa (hash: ALeZt1J1EgV6UsgwxbSFKJyWQMJa1LqFVoBIsMSrHbY=)
                          5: UEtK2s9ZvqqGCPFs3MJ1YFHeSL0.roa (hash: xgK5dHExfmkfjOi2PqzjV2F80ioIPm+SIscsQO2bVck=)
                          6: o8bBYWpde5zB25G3op0chPWF1KA.roa (hash: 0RPyFNyYu7Qe34unEDC/iTRz2G6+VT+jFUVRlVn3fYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4a:2b:13:d3:e9:57:75:1e:27:b1:f0:82:30:bc:e6:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
        Validity
            Not Before: Oct 17 14:01:39 2026 GMT
            Not After : Oct 18 14:01:39 2026 GMT
        Subject: CN=0fc356eb0e02b174c7a293dd391a55b04a5b4b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fe:64:c0:ea:4c:7f:6d:ef:d0:85:90:0b:c4:
                    cd:9e:9b:2e:f2:32:62:a9:73:18:95:66:cc:32:a8:
                    0f:7f:b9:0e:9e:74:a1:9e:0a:c9:c6:79:ca:47:d3:
                    ce:e8:9c:a6:50:f1:f2:f3:07:66:2b:7f:ee:59:09:
                    27:6d:28:14:b8:fd:88:5c:42:78:96:d5:7c:44:a0:
                    47:47:08:32:4a:bd:52:1f:99:f5:7d:d3:23:19:19:
                    39:05:3d:2a:3f:1a:8d:e5:a8:fa:49:2b:13:61:45:
                    61:51:87:2d:62:a9:c3:a5:ae:7f:2b:34:72:ba:9b:
                    4c:4b:14:6b:e6:e3:c4:31:97:cc:a2:92:d2:17:e0:
                    77:89:18:39:54:52:98:14:19:ab:f9:15:ef:61:b4:
                    80:18:b9:85:08:01:c1:c4:1a:a2:a2:8c:d7:ce:58:
                    a3:d4:34:67:d5:22:ab:fa:64:58:f9:c2:2d:82:4e:
                    6d:1a:d6:83:24:33:72:2d:94:a3:43:94:51:ad:13:
                    5e:1f:62:71:2b:b2:4b:19:e3:79:de:e2:cf:e7:f7:
                    4d:03:b9:c7:fb:26:f4:19:96:11:53:c5:f9:a3:3d:
                    ca:95:5b:66:a2:37:eb:26:eb:3b:a8:8e:67:a9:5d:
                    41:1d:af:a1:50:d6:d7:82:9a:22:af:c2:2c:e6:b2:
                    fe:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C3:56:EB:0E:02:B1:74:C7:A2:93:DD:39:1A:55:B0:4A:5B:4B:92
            X509v3 Authority Key Identifier:
                keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:25:d3:99:3b:7c:40:75:63:b7:c8:6c:22:94:e1:5c:45:a4:
         b7:4f:f4:ea:41:d7:82:30:30:d9:01:8e:36:a5:a2:ee:c8:5d:
         b5:72:06:3e:69:56:81:f9:99:d6:41:63:08:e0:77:06:31:a0:
         20:c3:05:ae:26:2d:8a:cd:80:53:3d:c2:c4:8e:0b:a0:4a:90:
         07:9c:e5:9e:50:ed:70:ce:df:26:91:48:46:87:80:f0:b6:e5:
         2e:d5:ee:3b:a9:e3:bb:76:7f:37:63:0f:96:3f:ad:0f:9f:26:
         8f:af:97:38:e8:91:83:6e:39:b4:42:a6:78:06:42:6d:10:14:
         15:c2:3e:05:db:2e:ec:75:c9:5b:c1:2b:d1:8b:8e:73:34:7e:
         aa:47:f3:8b:44:2a:7f:90:d6:a0:cd:60:2e:0a:64:06:5d:48:
         77:03:95:37:44:0d:a9:0e:5c:a3:a6:2d:84:f8:fa:d7:46:ca:
         7d:70:b8:50:2d:c1:b9:15:a7:3e:ef:dc:a0:47:5f:e8:13:57:
         62:df:af:92:cc:80:af:c4:65:33:6a:8b:f8:ea:5e:5f:3b:99:
         c6:02:d6:6c:4b:20:19:ea:d9:38:8b:e7:aa:76:22:83:40:3a:
         1f:19:e2:4c:8f:25:b8:84:e9:c3:c9:c9:18:31:36:39:3a:2f:
         14:eb:15:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 20:52:22 2026 by rpki-client