Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
File:                     8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json)
Hash identifier:          PMf0w7CIJNt+aE/wc/iCiLclDucJl39knb2asJk/aRA=
Subject key identifier:   AD:D0:78:BC:E2:09:E6:F1:FB:70:EE:73:01:39:51:17:C4:14:F8:3E
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Certificate issuer:       /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial:       01A14082D284501988D375208720893B85AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
Manifest number:          1BCD
Signing time:             Thu 15 Oct 2026 17:01:17 +0000
Manifest this update:     Thu 15 Oct 2026 17:01:17 +0000
Manifest next update:     Fri 16 Oct 2026 17:01:17 +0000
Files and hashes:         1: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: xicYhwdftxTxdFYJZpshdy18b1978cZg1ng2TBhu6Ek=)
                          2: BY90jgROFhJJZ1NbH4-tElkR_GE.roa (hash: Y5QIyQBYfCYfbH1jDCElmPITA4Jk6lEfynUlV4MgKn0=)
                          3: FjdVngLDionqDh_18cFGQYsmeKM.roa (hash: Tr+Fqc+oiTydduMLlPL1oc/kxHz+RUGFOArR1+9AQpM=)
                          4: jOKUVjy0c9vId2Sgar1ALyHha2U.roa (hash: LYaq4K0uwHA/ENOgkf4QZP3JMqPWmSKEI1664spJ028=)
                          5: q38Vrr1-lrXh4gRVryv7KRjcsHU.roa (hash: GS4WkhgAvCrSjsSDa1MVGmMSwhXFRTBu+xrlewUGZtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:82:d2:84:50:19:88:d3:75:20:87:20:89:3b:85:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
        Validity
            Not Before: Oct 15 17:01:17 2026 GMT
            Not After : Oct 16 17:01:17 2026 GMT
        Subject: CN=add078bce209e6f1fb70ee7301395117c414f83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:00:fc:1e:08:e3:10:f1:9a:ff:62:8b:60:39:
                    b9:6c:88:68:b3:4c:c0:d6:82:eb:4f:37:87:93:a8:
                    7a:dc:50:6f:2b:03:b4:fd:e0:50:16:ec:16:a2:2e:
                    a3:ed:8c:c9:61:ed:a4:56:8b:d2:25:4f:1c:32:48:
                    d1:1f:1f:93:5c:27:db:4c:34:8b:7a:ea:58:20:4d:
                    e0:ab:d4:80:15:08:be:56:19:c7:4f:f5:01:34:a6:
                    cf:9f:32:07:d8:14:c1:42:c9:2a:42:a0:03:86:3f:
                    83:d0:22:e7:bd:b6:7e:55:57:1a:f5:ba:08:9f:da:
                    5f:22:c7:3b:5b:c4:25:fc:64:2b:09:44:78:50:23:
                    1f:9e:78:1b:c5:ec:19:7a:bf:84:24:f1:06:d0:31:
                    37:6a:93:08:6a:f4:9f:f5:66:70:11:9f:a9:3d:51:
                    a3:0a:04:d2:fb:5b:fe:f6:41:06:10:28:06:c0:22:
                    07:0f:4a:55:10:79:5e:5d:9d:06:e6:3c:80:3c:05:
                    80:6c:71:47:c8:d5:83:f0:ec:3d:ba:b8:06:c6:3f:
                    be:14:92:41:b5:c4:01:49:46:a7:43:f9:46:17:d2:
                    d1:8a:8c:40:94:16:a7:e9:77:a9:7b:05:c1:24:65:
                    96:85:05:97:ff:31:36:3d:b9:66:11:cc:ce:a0:0f:
                    66:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D0:78:BC:E2:09:E6:F1:FB:70:EE:73:01:39:51:17:C4:14:F8:3E
            X509v3 Authority Key Identifier:
                keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:2c:c7:89:e6:6c:5d:2a:31:3a:d5:49:ed:fe:b0:1b:3c:75:
         19:a7:e7:5b:75:f2:b1:a6:d2:a3:db:50:be:dd:74:6b:53:96:
         49:b0:89:5b:1a:f6:0e:03:34:e0:7d:08:4d:86:7b:a2:8e:55:
         18:19:68:46:90:48:59:87:16:f3:8b:6b:2b:dc:ca:57:de:94:
         41:ba:a9:c0:df:4d:46:2a:eb:26:c9:01:5a:11:ff:88:be:bc:
         ae:d0:5f:fe:7c:34:e9:90:05:df:bd:91:9e:67:78:0c:f9:c3:
         2b:bf:4a:53:af:86:29:9f:9b:5c:81:b4:22:de:77:43:4d:c3:
         81:f7:55:db:b2:30:01:2a:56:9a:01:3d:2b:de:b6:49:70:e1:
         8d:75:c3:5e:ec:57:57:21:c5:bb:6d:17:0f:87:cb:75:08:0b:
         ec:f4:30:e1:a4:54:b9:a8:29:98:f1:18:e9:a2:15:d3:7f:27:
         c4:ab:2e:7f:4f:21:9f:00:3c:55:76:6c:09:86:a7:3c:0d:12:
         a9:22:70:dc:18:41:80:cd:85:cd:90:01:99:e7:d9:47:64:e2:
         40:2b:72:0c:78:10:15:ee:85:0c:ab:1e:84:b2:93:45:73:42:
         f1:54:fa:61:22:45:6f:af:1b:f8:99:56:01:6b:e1:23:c7:78:
         d0:e7:08:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 02:58:57 2026 by rpki-client