Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
File:                     8GGl-jflzRAVCFJj7AKeGv95ONc.mft (raw, json)
Hash identifier:          3+uH6US9wxvZUk0qT1BXkEz1osiU6nTn5mF9zRAND7Y=
Subject key identifier:   6A:79:94:22:4F:72:DA:60:15:FF:16:C4:0A:8D:DF:29:60:BE:90:A5
Authority key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
Certificate issuer:       /CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Certificate serial:       01A13E2628B8D1FB3F248F31F04944C4F371
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
Manifest number:          0A3C
Signing time:             Thu 15 Oct 2026 06:00:50 +0000
Manifest this update:     Thu 15 Oct 2026 06:00:50 +0000
Manifest next update:     Fri 16 Oct 2026 06:00:50 +0000
Files and hashes:         1: 8GGl-jflzRAVCFJj7AKeGv95ONc.crl (hash: Za92t+4MMBe6TOcK4T0gE/KbLN6ibCNfVqSOaMoudLU=)
                          2: y_SCanDgj_MM1S_IDo64t6KWr_s.roa (hash: c0z1Y3wg26X0Siv87LHdyGq71I3TjKiIOT/D8Eaa0Ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:28:b8:d1:fb:3f:24:8f:31:f0:49:44:c4:f3:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
        Validity
            Not Before: Oct 15 06:00:50 2026 GMT
            Not After : Oct 16 06:00:50 2026 GMT
        Subject: CN=6a7994224f72da6015ff16c40a8ddf2960be90a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:97:0a:b9:a9:2d:a6:a4:5d:ff:51:de:0b:38:
                    c7:37:25:17:3f:39:35:18:66:a9:3d:be:1b:54:2d:
                    2b:d3:4d:d8:21:52:da:7d:c5:23:61:6f:33:f2:d1:
                    d5:d3:81:e2:ff:3e:08:cf:a9:33:2a:8c:3f:6f:52:
                    2d:ac:fa:03:64:7d:45:2e:e2:66:b0:bb:04:18:8b:
                    94:35:bc:ca:d3:21:04:91:41:57:34:07:90:d7:bd:
                    81:c7:20:7a:b8:c2:7d:c1:88:f9:d5:7d:9f:ca:e6:
                    0e:68:91:7e:b7:85:a2:23:f9:cd:af:de:9a:54:5c:
                    7a:91:94:80:3b:39:05:91:c5:db:6f:d6:f4:0a:b8:
                    a3:2f:ae:99:f4:10:2b:d9:e0:a7:0b:3d:c3:1a:29:
                    39:54:fb:5d:08:2a:ac:b7:b2:af:8a:1a:5c:e5:bd:
                    24:ee:1c:5b:2c:f1:e7:b3:68:40:6d:69:85:56:eb:
                    7d:a9:5a:b4:75:27:04:40:72:52:51:fa:b9:06:3a:
                    7d:d5:0a:b4:b4:87:cf:27:d9:72:4c:39:81:19:22:
                    e1:2a:8c:7e:cb:f5:df:37:d0:f2:5f:36:d5:46:6e:
                    0d:fe:5e:aa:d0:3d:57:f1:84:d3:29:5a:3e:a1:b9:
                    dc:e1:eb:de:08:60:50:24:94:ea:d6:d8:03:fb:fe:
                    6e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:79:94:22:4F:72:DA:60:15:FF:16:C4:0A:8D:DF:29:60:BE:90:A5
            X509v3 Authority Key Identifier:
                keyid:F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3b:b4:2c:49:f2:b3:61:b4:62:26:a3:5c:ee:c9:57:aa:87:
         4d:5a:0e:52:f7:52:c5:95:44:8e:70:b7:79:f8:0d:29:b2:b5:
         75:83:54:f0:b6:37:0b:ce:4e:31:3b:a8:8d:60:b9:0b:6f:d7:
         3e:a8:08:0e:05:71:5b:f0:f8:77:a2:d2:a6:47:3c:92:e7:91:
         97:4b:ed:cf:40:8e:81:ec:fc:d8:f3:17:fa:35:75:43:e9:25:
         e1:51:e3:08:9d:77:90:77:ba:fa:d4:a9:e9:92:2c:42:02:ef:
         98:ee:98:31:aa:bf:56:b6:b5:50:b5:61:ae:3f:97:b2:03:4d:
         71:cb:5b:44:58:27:ca:da:8d:70:78:f0:22:67:a0:5c:6c:11:
         18:08:f3:52:b8:40:71:5b:29:cf:ba:6b:93:46:7b:89:f3:5c:
         0d:d6:91:9d:98:65:72:4b:58:68:7a:86:ac:27:18:02:19:ca:
         6c:c5:04:0f:2b:15:f3:2f:2e:4c:a6:cb:f8:bf:de:d2:12:b5:
         ac:10:7d:9c:1c:68:f8:c1:7d:75:2a:cf:5c:76:ba:d7:10:b1:
         13:a7:55:9d:c3:f8:4d:e6:e8:df:e8:ec:4e:e3:b0:a9:f0:53:
         2c:c0:f2:68:2a:a9:dc:7e:25:2a:ff:14:d1:db:77:24:bc:75:
         9a:84:a4:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+Jii40fs/JI8x8ElExPNxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNjFhNWZhMzdlNWNkMTAxNTA4NTI2M2VjMDI5ZTFhZmY3
OTM4ZDcwHhcNMjYxMDE1MDYwMDUwWhcNMjYxMDE2MDYwMDUwWjAzMTEwLwYDVQQD
Eyg2YTc5OTQyMjRmNzJkYTYwMTVmZjE2YzQwYThkZGYyOTYwYmU5MGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZcKuaktpqRd/1HeCzjHNyUXPzk1
GGapPb4bVC0r003YIVLafcUjYW8z8tHV04Hi/z4Iz6kzKow/b1ItrPoDZH1FLuJm
sLsEGIuUNbzK0yEEkUFXNAeQ172BxyB6uMJ9wYj51X2fyuYOaJF+t4WiI/nNr96a
VFx6kZSAOzkFkcXbb9b0CrijL66Z9BAr2eCnCz3DGik5VPtdCCqst7Kvihpc5b0k
7hxbLPHns2hAbWmFVut9qVq0dScEQHJSUfq5Bjp91Qq0tIfPJ9lyTDmBGSLhKox+
y/XfN9DyXzbVRm4N/l6q0D1X8YTTKVo+obnc4eveCGBQJJTq1tgD+/5u2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGp5lCJPctpgFf8WxAqN3ylgvpClMB8GA1UdIwQY
MBaAFPBhpfo35c0QFQhSY+wCnhr/eTjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEdHbC1qZmx6UkFWQ0ZKajdBS2VHdjk1T05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jNzkwOTUtOGMyYi00MmEzLTk0NmYt
MThiMTI4YzhiNDg2LzEvOEdHbC1qZmx6UkFWQ0ZKajdBS2VHdjk1T05jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9jNzkwOTUtOGMyYi00MmEzLTk0NmYtMThiMTI4YzhiNDg2
LzEvOEdHbC1qZmx6UkFWQ0ZKajdBS2VHdjk1T05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzu0LEny
s2G0YiajXO7JV6qHTVoOUvdSxZVEjnC3efgNKbK1dYNU8LY3C85OMTuojWC5C2/X
PqgIDgVxW/D4d6LSpkc8kueRl0vtz0COgez82PMX+jV1Q+kl4VHjCJ13kHe6+tSp
6ZIsQgLvmO6YMaq/Vra1ULVhrj+XsgNNcctbRFgnytqNcHjwImegXGwRGAjzUrhA
cVspz7prk0Z7ifNcDdaRnZhlcktYaHqGrCcYAhnKbMUEDysV8y8uTKbL+L/e0hK1
rBB9nBxo+MF9dSrPXHa61xCxE6dVncP4Tebo3+jsTuOwqfBTLMDyaCqp3H4lKv8U
0dt3JLx1moSkSQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:35:58 2026 by rpki-client