Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
File:                     8XShpC1Ap_uCpsCM6XZRy2ar83A.mft (raw, json)
Hash identifier:          9Ym7BCzfIrju2RDVhE8fre/U7qGtkCQXP9cvL4z3wqQ=
Subject key identifier:   49:AD:B1:F4:18:2A:91:16:B0:E7:C1:55:3A:53:C5:70:90:85:A9:EF
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Certificate issuer:       /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial:       01A15440561CD9E42CE772D545A65C8586F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
Manifest number:          0EB0
Signing time:             Mon 19 Oct 2026 13:01:04 +0000
Manifest this update:     Mon 19 Oct 2026 13:01:04 +0000
Manifest next update:     Tue 20 Oct 2026 13:01:04 +0000
Files and hashes:         1: 8XShpC1Ap_uCpsCM6XZRy2ar83A.crl (hash: j2s1jqKibVGRtj6HxFErHJJFyr5MltEWK1FA4KcLRu8=)
                          2: uBozqFCRP6q6-fMqqEdxvia5s2w.roa (hash: 7my1TEAY49gz3OCc/3WBB7kXgHGx+R9z5VTiKjlGzfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 13:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:54:40:56:1c:d9:e4:2c:e7:72:d5:45:a6:5c:85:86:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
        Validity
            Not Before: Oct 19 13:01:04 2026 GMT
            Not After : Oct 20 13:01:04 2026 GMT
        Subject: CN=49adb1f4182a9116b0e7c1553a53c5709085a9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9b:7b:32:58:25:b2:30:84:e8:28:ec:a1:82:
                    88:ea:ea:6e:39:56:c8:23:23:f2:06:3a:89:46:4a:
                    b4:c1:0e:bb:40:e2:92:28:20:b7:14:f0:1f:bf:9f:
                    51:0f:49:42:e5:44:0f:00:b1:32:9a:4b:73:8e:19:
                    01:c8:8e:f4:45:7c:a3:85:1e:37:59:29:73:05:14:
                    f2:d4:67:fe:83:2b:0d:af:b0:57:54:10:b5:f4:98:
                    1d:53:81:af:ef:41:43:21:d7:ee:25:af:46:cb:e8:
                    9f:c0:4a:30:58:aa:e4:2e:8c:dd:30:10:b3:6b:0a:
                    5d:42:22:7e:1f:c3:2e:5e:bf:07:b5:0f:7b:5e:33:
                    83:fc:fc:18:70:2a:50:5d:13:8a:eb:6d:d5:2b:10:
                    4a:ce:db:e6:3c:2d:32:1d:9a:e6:5c:52:d0:9a:44:
                    2a:ca:73:15:73:ed:e8:16:75:73:5e:c5:55:38:f7:
                    7f:f4:52:91:60:96:20:e9:5c:d9:b3:a9:73:68:a7:
                    cb:57:99:06:09:6a:23:d9:0e:6a:55:2c:9f:79:39:
                    67:b4:12:b3:f8:f1:e2:bd:6f:e7:3e:40:86:39:ad:
                    bc:8c:50:a1:62:9c:75:59:90:48:31:5c:05:8f:3d:
                    ea:66:a4:af:26:d5:5f:38:83:68:88:7c:af:c5:65:
                    0e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AD:B1:F4:18:2A:91:16:B0:E7:C1:55:3A:53:C5:70:90:85:A9:EF
            X509v3 Authority Key Identifier:
                keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:85:35:12:ea:64:d2:f3:ba:1a:54:ab:5f:58:77:d0:10:f5:
         17:14:f0:6e:be:60:fd:37:f5:4e:45:ec:8a:46:8c:38:75:1b:
         a7:23:d7:2b:3e:5a:98:ea:26:d9:07:1f:ab:ab:8e:bb:e6:94:
         ed:16:67:6d:83:63:f5:3b:2b:6a:fd:e9:c8:b4:af:f0:83:1f:
         a6:8c:21:fb:09:44:86:6f:d1:e9:37:eb:58:77:9e:00:0c:85:
         ac:1d:9f:c1:90:4e:27:51:1d:df:f4:c7:6c:4e:74:6e:8c:b8:
         d8:91:8b:c4:56:02:c3:d1:91:c0:8c:e1:3c:97:b3:e0:56:b5:
         8d:44:41:3c:b8:c4:9b:b1:44:e8:07:30:31:84:66:85:a1:49:
         fd:ff:95:78:99:3c:53:d0:db:4d:b9:2d:15:b8:14:68:6b:7f:
         2d:14:28:f2:8f:01:bf:b9:83:b9:38:db:38:78:e5:76:87:e4:
         4f:5f:6e:e0:51:91:fb:d0:8c:1b:ed:39:f0:54:9d:1d:5d:f0:
         b8:3e:c5:bf:07:45:49:ac:68:87:9f:d2:60:75:f2:0a:cd:f7:
         19:77:a7:e9:bb:8e:db:8d:ec:e2:22:e2:ef:3a:6a:29:b2:0e:
         7a:ac:1c:86:2e:ee:75:7d:c7:7d:bf:44:30:cb:e3:d8:cc:c9:
         4d:02:56:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFUQFYc2eQs53LVRaZchYb0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNzRhMWE0MmQ0MGE3ZmI4MmE2YzA4Y2U5NzY1MWNiNjZh
YmYzNzAwHhcNMjYxMDE5MTMwMTA0WhcNMjYxMDIwMTMwMTA0WjAzMTEwLwYDVQQD
Eyg0OWFkYjFmNDE4MmE5MTE2YjBlN2MxNTUzYTUzYzU3MDkwODVhOWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZt7MlglsjCE6CjsoYKI6upuOVbI
IyPyBjqJRkq0wQ67QOKSKCC3FPAfv59RD0lC5UQPALEymktzjhkByI70RXyjhR43
WSlzBRTy1Gf+gysNr7BXVBC19JgdU4Gv70FDIdfuJa9Gy+ifwEowWKrkLozdMBCz
awpdQiJ+H8MuXr8HtQ97XjOD/PwYcCpQXROK623VKxBKztvmPC0yHZrmXFLQmkQq
ynMVc+3oFnVzXsVVOPd/9FKRYJYg6VzZs6lzaKfLV5kGCWoj2Q5qVSyfeTlntBKz
+PHivW/nPkCGOa28jFChYpx1WZBIMVwFjz3qZqSvJtVfOINoiHyvxWUOHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmtsfQYKpEWsOfBVTpTxXCQhanvMB8GA1UdIwQY
MBaAFPF0oaQtQKf7gqbAjOl2Uctmq/NwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFhTaHBDMUFwX3VDcHNDTTZYWlJ5MmFyODNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lZTljODEtNmQ2Ny00ZTMzLWJkMWYt
MTM0OGVjOTdiOTAyLzEvOFhTaHBDMUFwX3VDcHNDTTZYWlJ5MmFyODNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9lZTljODEtNmQ2Ny00ZTMzLWJkMWYtMTM0OGVjOTdiOTAy
LzEvOFhTaHBDMUFwX3VDcHNDTTZYWlJ5MmFyODNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYU1Eupk
0vO6GlSrX1h30BD1FxTwbr5g/Tf1TkXsikaMOHUbpyPXKz5amOom2Qcfq6uOu+aU
7RZnbYNj9Tsrav3pyLSv8IMfpowh+wlEhm/R6TfrWHeeAAyFrB2fwZBOJ1Ed3/TH
bE50boy42JGLxFYCw9GRwIzhPJez4Fa1jURBPLjEm7FE6AcwMYRmhaFJ/f+VeJk8
U9DbTbktFbgUaGt/LRQo8o8Bv7mDuTjbOHjldofkT19u4FGR+9CMG+058FSdHV3w
uD7FvwdFSaxoh5/SYHXyCs33GXen6buO243s4iLi7zpqKbIOeqwchi7udX3Hfb9E
MMvj2MzJTQJWCA==
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:48:33 2026 by rpki-client