Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File:                     8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier:          WpEhYxe3I8FoOGB4RFsAlNPWBrQCdzfxIgeBKlVquOU=
Subject key identifier:   3A:BE:FF:D4:A4:21:51:2E:9A:AB:EA:53:29:89:34:E6:23:3D:9C:85
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer:       /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial:       01A13DEEF9F54B9E7F6CAAF343F22BF3CA6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number:          14B8
Signing time:             Thu 15 Oct 2026 05:00:34 +0000
Manifest this update:     Thu 15 Oct 2026 05:00:34 +0000
Manifest next update:     Fri 16 Oct 2026 05:00:34 +0000
Files and hashes:         1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: PSyp/np2qVw6EKKZewAcyU0tGILpWScLCJKCFwpBfVw=)
                          2: po4crTaA95m-lSpTh_du9PtU6gY.roa (hash: SJ7n/VopAoAzW1zSv/V6X7AVtWxebx5P9AXUE5osTUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:ee:f9:f5:4b:9e:7f:6c:aa:f3:43:f2:2b:f3:ca:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
        Validity
            Not Before: Oct 15 05:00:34 2026 GMT
            Not After : Oct 16 05:00:34 2026 GMT
        Subject: CN=3abeffd4a421512e9aabea53298934e6233d9c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:28:26:96:cd:b5:4a:4a:00:3e:41:2e:ff:
                    35:34:7a:9d:27:73:19:d0:64:8d:3f:7a:93:6b:85:
                    63:bd:0b:30:9b:15:e8:ba:fe:a6:14:87:7f:24:3b:
                    55:f6:1e:df:d3:2e:bd:73:89:6a:a8:7b:ea:0f:72:
                    d8:31:58:f3:ba:99:92:60:5d:ad:18:ca:c7:31:af:
                    3a:59:af:72:ef:cf:68:a8:52:cf:b2:b8:39:f4:ac:
                    49:2f:d2:19:f5:7c:8d:40:dc:ae:a4:88:e8:02:82:
                    af:fd:c6:1a:c7:a1:4e:ef:6b:a4:d4:02:7a:0c:7a:
                    a2:05:fc:eb:20:0b:ad:49:5c:43:e3:4b:f5:9e:47:
                    98:28:70:a2:18:9f:c0:4f:e0:a8:bf:4d:a2:c3:0e:
                    59:93:62:c6:aa:3b:0a:85:d9:1a:0f:c3:38:83:4d:
                    81:15:03:66:7a:4e:ba:9f:f7:a6:4a:36:e6:fa:0f:
                    b8:ed:97:cc:00:d3:ce:f3:66:95:2f:36:9d:c3:59:
                    28:0a:c0:68:80:45:d6:6a:09:06:0e:00:3e:62:5d:
                    fb:81:b5:bf:7a:40:a5:2d:c7:d6:42:70:31:a4:6b:
                    e0:8f:0b:03:6d:79:9f:73:55:e6:72:70:71:e2:02:
                    2e:cd:d1:be:1d:c1:2a:4d:80:a7:c8:7b:f3:57:77:
                    11:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BE:FF:D4:A4:21:51:2E:9A:AB:EA:53:29:89:34:E6:23:3D:9C:85
            X509v3 Authority Key Identifier:
                keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:fc:3c:74:03:15:7f:24:d1:9a:2d:39:f7:1b:c9:15:a2:38:
         16:35:7f:b8:a7:19:fc:17:0c:85:ab:b9:27:59:39:9d:ee:5b:
         9f:1b:19:f7:e8:6d:30:a6:bc:14:d4:a9:9f:4a:2e:60:d3:9f:
         82:08:e7:51:e2:ce:43:59:40:bb:7d:05:41:a4:f4:04:9a:f1:
         f6:e8:14:bd:05:cf:5c:e6:fe:0a:9c:8f:d0:98:88:5d:ae:ab:
         52:b3:66:0b:92:b0:36:a1:42:42:27:0c:58:e8:b1:2b:af:8f:
         8a:d9:05:db:c0:0e:13:bc:61:4b:ab:03:be:f2:21:56:fc:d2:
         ea:f4:1f:4d:3e:c7:04:42:db:8c:4d:f3:ae:23:ac:99:b1:c1:
         e0:2c:dc:f0:44:8c:4f:4b:5b:b4:0d:47:e4:34:d9:c1:7d:35:
         7b:0e:2a:4c:a0:cc:1e:43:89:a0:71:b5:9f:26:ec:4c:bb:f7:
         9f:a5:92:99:16:e7:8e:82:ad:17:9b:ed:0c:27:48:db:0b:b3:
         c6:eb:3c:4d:5b:93:72:eb:23:9d:ce:d8:21:1c:da:4e:58:7c:
         d8:b4:29:68:25:0e:e1:f8:25:b7:55:ed:7c:22:fd:7a:27:2a:
         ba:af:a1:73:69:2a:f0:c0:44:85:88:ca:c0:9a:05:2b:76:0d:
         b4:0d:44:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:36 2026 by rpki-client