Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.mft
File:                     zo8eLNbLKBUKXInl-bCIeBE0zq8.mft (raw, json)
Hash identifier:          FoGKCaT9557HS2hT5sup35EkaYTrO4DDaOFAfm52bLk=
Subject key identifier:   80:8B:7C:AE:58:8A:9E:F7:34:91:A1:44:26:4D:BA:AE:3E:F9:94:C5
Authority key identifier: CE:8F:1E:2C:D6:CB:28:15:0A:5C:89:E5:F9:B0:88:78:11:34:CE:AF
Certificate issuer:       /CN=ce8f1e2cd6cb28150a5c89e5f9b088781134ceaf
Certificate serial:       01A0F97CEB31F130B2C68337CD384817E898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zo8eLNbLKBUKXInl-bCIeBE0zq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.mft
Manifest number:          78
Signing time:             Thu 01 Oct 2026 22:01:48 +0000
Manifest this update:     Thu 01 Oct 2026 22:01:48 +0000
Manifest next update:     Fri 02 Oct 2026 22:01:48 +0000
Files and hashes:         1: Y3VzoJn-G6AotjVH8MvzLWEsGmc.roa (hash: NAemI75QGyX3xuubQFlHIzoJ5u9jYBV1F2kxkjMJ1Pk=)
                          2: zo8eLNbLKBUKXInl-bCIeBE0zq8.crl (hash: oypSIg2ABltGfi0/PuB8/ByUIRz6Pc0+OCp0CqsAFG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zo8eLNbLKBUKXInl-bCIeBE0zq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 16:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f9:7c:eb:31:f1:30:b2:c6:83:37:cd:38:48:17:e8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce8f1e2cd6cb28150a5c89e5f9b088781134ceaf
        Validity
            Not Before: Oct  1 22:01:48 2026 GMT
            Not After : Oct  2 22:01:48 2026 GMT
        Subject: CN=808b7cae588a9ef73491a144264dbaae3ef994c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:5b:44:b6:a6:51:d8:1a:43:86:50:6f:68:
                    0b:b2:18:ae:40:62:6a:0b:17:46:d3:2b:8b:03:f5:
                    a5:66:99:26:e6:b8:1a:b4:ea:a8:02:68:16:d9:41:
                    e0:bc:c7:f0:82:e7:36:ee:4d:95:7a:35:70:cd:0a:
                    23:82:82:66:a2:96:02:43:a5:45:d3:14:89:13:56:
                    10:bb:89:11:01:9f:8d:f8:8c:a0:e8:1e:98:36:16:
                    ad:fc:12:59:89:dc:a2:59:22:4c:f9:f2:23:1d:77:
                    40:39:33:93:67:03:c3:5e:55:73:37:8a:d7:1e:1f:
                    04:04:48:13:2a:4e:ee:9e:2f:35:82:9f:8e:f5:80:
                    34:12:2a:5d:19:37:f9:49:f7:35:f8:76:ee:b3:af:
                    c4:4e:1e:a8:3e:4f:a5:fb:dd:ab:5b:6f:a1:b0:19:
                    1d:e0:cb:dc:53:a0:91:bd:86:1e:69:5d:8d:68:79:
                    3b:55:56:f7:5b:20:f8:5c:db:e1:66:84:9a:06:bd:
                    e4:92:8b:d6:cf:86:2b:bd:95:0b:12:28:4b:1a:4c:
                    ab:6b:11:f5:f0:32:c2:23:df:f7:9e:5f:a7:bc:51:
                    10:b7:84:53:9f:28:99:10:a3:db:ae:1e:21:99:53:
                    02:93:19:02:c8:c3:99:88:03:c1:fb:c3:9c:cc:9f:
                    8c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8B:7C:AE:58:8A:9E:F7:34:91:A1:44:26:4D:BA:AE:3E:F9:94:C5
            X509v3 Authority Key Identifier:
                keyid:CE:8F:1E:2C:D6:CB:28:15:0A:5C:89:E5:F9:B0:88:78:11:34:CE:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo8eLNbLKBUKXInl-bCIeBE0zq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:14:2c:24:87:c2:89:6d:a6:c8:dc:82:24:74:d9:41:1f:0f:
         6c:8c:a9:79:9d:5a:66:04:e9:f3:d6:bc:a0:5f:fa:46:1a:ee:
         94:d6:07:d9:24:93:57:66:64:86:6a:a2:0b:fe:f8:6b:27:21:
         23:d4:46:c3:84:ae:c7:3f:29:ac:93:6c:fe:6e:4d:d4:16:d9:
         a1:17:22:f1:fc:cb:f8:35:48:8e:01:e2:d6:f8:9c:1b:96:df:
         23:de:71:2c:b5:82:a2:4e:db:59:fc:df:bf:16:0c:20:0d:2a:
         ef:ef:22:d1:64:b2:e9:07:1c:0f:05:23:41:89:dd:a7:de:90:
         a1:d8:be:aa:36:5e:d8:3f:15:f0:d6:0f:0f:96:6b:80:19:bf:
         dc:e2:df:76:ab:c0:36:28:37:07:8e:0f:52:fc:4e:ab:48:c0:
         e8:5c:4d:9a:2d:c3:6c:1e:89:3d:62:2c:05:d1:c3:6e:22:8c:
         38:f3:3b:1d:a0:f0:aa:11:5c:5e:9d:5f:08:68:45:0c:bc:c4:
         69:7f:fd:bb:30:4a:c6:bf:4b:91:52:01:3a:15:83:e0:73:4c:
         b0:e0:c2:ac:b4:6f:7e:3d:9e:36:ed:db:8b:86:fb:b0:40:e3:
         2f:fb:9d:d4:fc:e1:6e:d4:4e:45:cb:26:76:da:a3:80:19:39:
         79:ca:04:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 02:55:15 2026 by rpki-client