Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
File:                     8VzG8-5-0llTHW0Izp4JNztxYGI.mft (raw, json)
Hash identifier:          LvgQWiXeqAkwkBFgH3wLpiRTKZpp4ULlLQ2GtRdo0f8=
Subject key identifier:   94:7C:E8:88:8B:99:A0:7E:B1:32:15:CB:22:DC:A5:5E:60:4C:BE:0B
Authority key identifier: F1:5C:C6:F3:EE:7E:D2:59:53:1D:6D:08:CE:9E:09:37:3B:71:60:62
Certificate issuer:       /CN=f15cc6f3ee7ed259531d6d08ce9e09373b716062
Certificate serial:       01A13E5CECB65EFE68D14418A4FE36B0DA88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
Manifest number:          0841
Signing time:             Thu 15 Oct 2026 07:00:39 +0000
Manifest this update:     Thu 15 Oct 2026 07:00:39 +0000
Manifest next update:     Fri 16 Oct 2026 07:00:39 +0000
Files and hashes:         1: 8VzG8-5-0llTHW0Izp4JNztxYGI.crl (hash: Ph5AXpgZYjEmnIVxRAPihTrKBGAcIU15fEplDtKE5IE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 07:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:5c:ec:b6:5e:fe:68:d1:44:18:a4:fe:36:b0:da:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15cc6f3ee7ed259531d6d08ce9e09373b716062
        Validity
            Not Before: Oct 15 07:00:39 2026 GMT
            Not After : Oct 16 07:00:39 2026 GMT
        Subject: CN=947ce8888b99a07eb13215cb22dca55e604cbe0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8e:f1:be:b2:79:fd:80:e6:26:fa:c8:cf:51:
                    39:70:0b:67:93:a9:51:63:84:2e:e4:11:42:b2:67:
                    2f:c7:33:3d:e8:72:63:e4:d6:51:83:2a:63:1d:2d:
                    a3:71:50:27:04:96:a5:0c:49:db:57:2d:5e:29:8a:
                    e7:8a:6d:b6:f0:93:51:ca:62:67:9f:4f:48:03:4b:
                    92:b5:2c:a1:f0:b5:81:70:59:87:c6:14:5c:30:37:
                    59:92:19:a7:f5:dd:24:63:86:ee:64:9a:39:de:63:
                    18:7e:72:3a:55:c2:f3:b5:8b:88:45:aa:ad:c0:7e:
                    c9:2b:a9:6f:be:94:c5:80:b2:64:72:34:63:e3:2a:
                    44:20:2a:90:6e:d6:bf:8f:cb:3b:d3:64:3f:87:24:
                    66:21:26:4c:83:f7:0a:84:cf:44:2f:3d:37:aa:c1:
                    de:70:0a:1b:c5:d6:c9:f7:50:d5:50:40:0a:21:bf:
                    16:59:34:c5:d7:2d:40:e4:50:27:24:ff:4b:57:28:
                    46:ef:a9:1b:1f:ce:1f:2c:85:0b:ec:14:95:3f:76:
                    f7:17:4e:ff:02:a9:9a:99:f9:33:3d:3e:15:14:4f:
                    9f:af:db:fe:95:4b:50:11:4a:e0:fe:34:f4:54:93:
                    b9:4b:29:54:a0:6d:dd:ca:77:dd:b8:60:29:a5:74:
                    0e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7C:E8:88:8B:99:A0:7E:B1:32:15:CB:22:DC:A5:5E:60:4C:BE:0B
            X509v3 Authority Key Identifier:
                keyid:F1:5C:C6:F3:EE:7E:D2:59:53:1D:6D:08:CE:9E:09:37:3B:71:60:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c6:13:dd:69:82:09:49:51:e8:dc:c6:96:cb:c6:a7:0a:69:
         55:5e:ad:bf:c9:89:e6:45:2f:51:31:f0:cf:8e:25:6e:59:d7:
         ed:fd:af:3c:93:2a:2f:51:b8:45:61:c5:d8:38:46:b3:11:af:
         96:f5:64:78:3d:46:52:72:49:7f:9e:34:7a:c6:5b:6f:2f:4a:
         f7:2e:d0:d0:3a:46:af:f2:14:15:25:d1:b3:78:ac:94:bc:4d:
         e0:68:0f:a5:ba:b7:f5:ab:af:59:b3:28:81:b4:c4:d8:68:96:
         9e:80:89:84:59:17:c7:90:37:d9:79:15:cf:6d:a4:ad:bb:5c:
         3b:0f:2d:63:9e:a5:01:83:16:18:f4:db:58:1e:63:0e:a5:ba:
         7d:55:e9:1c:97:4f:7c:ef:d2:d4:e1:2a:9f:11:cc:b2:7b:b0:
         2e:cd:c6:6f:c7:9a:af:25:90:d3:da:6d:c8:3e:26:c8:ac:5c:
         bf:88:e3:bd:a4:ff:e1:b0:d1:c1:53:54:f3:a4:8f:26:95:dd:
         be:86:73:ba:f2:0f:75:73:ef:39:f4:ac:b1:26:e2:b4:ea:15:
         b4:5e:eb:2b:b7:74:b5:ce:c1:29:ad:4d:d6:ed:86:30:92:86:
         63:68:0a:4f:40:dd:f8:6b:21:3e:ba:05:cf:30:b0:e6:7d:8e:
         41:b3:16:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:22:16 2026 by rpki-client