Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
File:                     8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json)
Hash identifier:          1MoaUYHuwRUSwZOI7SJqjOzyXKZi9K73YwNdz2zTvNU=
Subject key identifier:   41:1C:35:BF:94:38:D9:44:DE:C7:DE:DB:CF:80:EE:A6:B2:D2:F4:21
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Certificate issuer:       /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial:       01A13E5D25B4D9C29850539FA4CFCF123DD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
Manifest number:          08FC
Signing time:             Thu 15 Oct 2026 07:00:54 +0000
Manifest this update:     Thu 15 Oct 2026 07:00:54 +0000
Manifest next update:     Fri 16 Oct 2026 07:00:54 +0000
Files and hashes:         1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: rqvW9NB7Iz+ETcLSEGuopMFyG0USd9Y887LzqPpqRE8=)
                          2: e40GPVZTDeirYIdOqaP1aapsCXg.asa (hash: h+tl9RH2sA+blXZerCx7ZNM5+m8vY3pFl3hXGBoDo4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:5d:25:b4:d9:c2:98:50:53:9f:a4:cf:cf:12:3d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
        Validity
            Not Before: Oct 15 07:00:54 2026 GMT
            Not After : Oct 16 07:00:54 2026 GMT
        Subject: CN=411c35bf9438d944dec7dedbcf80eea6b2d2f421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bf:63:f1:e8:86:83:b5:24:41:df:cb:f9:84:
                    f2:83:7b:21:3b:f5:86:f1:47:ea:e0:3b:76:45:89:
                    b8:d4:09:ca:7f:33:8c:db:90:03:50:2c:4e:9a:e1:
                    bd:72:5e:76:d1:2e:de:b2:b8:e4:72:6b:31:95:d9:
                    79:7d:f6:f6:aa:1d:6b:2c:59:6d:7a:c8:b3:67:c6:
                    f6:e2:31:89:0b:8d:f0:ab:16:42:45:0d:44:e6:07:
                    3b:6a:f0:a6:db:e4:04:32:11:18:48:b6:05:98:72:
                    b5:0a:fa:ab:2e:3f:1a:2d:a9:0f:94:2b:8e:79:62:
                    59:34:41:ad:39:eb:66:ef:d7:38:77:15:ba:10:23:
                    42:0c:38:1b:78:52:da:ad:24:ae:08:c7:2f:b8:d8:
                    fe:34:44:f8:1c:be:dd:3c:0c:b6:51:0e:f8:1b:c3:
                    1c:5f:0a:bb:27:f6:cf:0b:1d:a8:75:19:0c:96:11:
                    78:49:87:d6:06:7e:11:1e:93:ef:fd:b9:47:18:b2:
                    c0:89:c7:96:71:79:2e:57:4e:a0:74:c1:6e:8d:16:
                    e9:92:98:b1:3b:24:99:6e:d4:1d:b3:f5:cf:db:73:
                    d2:a5:6b:f3:81:1a:b1:ec:a6:5d:ae:35:bc:8d:18:
                    ed:3a:56:13:7a:1f:c6:9b:d4:76:69:93:5d:fd:d8:
                    ee:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1C:35:BF:94:38:D9:44:DE:C7:DE:DB:CF:80:EE:A6:B2:D2:F4:21
            X509v3 Authority Key Identifier:
                keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:53:c2:d9:4f:f4:ba:0a:10:d3:7d:fd:9c:71:95:a4:b8:37:
         94:c9:e1:1b:76:ff:d9:d5:81:bf:c8:28:67:7e:a3:e3:f8:cb:
         a0:44:96:90:98:6c:db:48:d7:5d:c3:c5:d2:6d:7f:5d:05:a0:
         6e:1d:42:c8:51:48:be:c1:d8:1a:98:08:b1:e4:3f:4c:4a:50:
         42:be:58:be:61:f9:27:95:ac:b3:09:a7:c4:fc:69:aa:fb:e1:
         ef:0b:ba:6f:4d:27:e3:54:d0:3a:19:1e:2c:a9:95:2f:00:5b:
         4c:b8:66:dd:d4:67:b6:50:48:92:45:27:c0:b7:14:cf:50:9e:
         a8:cc:73:2b:9a:ac:8c:2c:2a:10:e5:96:f3:22:06:67:d7:16:
         6e:d3:ce:e4:90:b6:b7:a1:75:57:03:c8:e4:e2:17:cc:c1:65:
         1a:f6:05:2a:56:ee:f6:50:a1:01:49:84:38:f7:31:f4:fc:15:
         97:ef:e3:68:2e:26:96:0d:e9:63:fe:a9:23:22:54:b4:60:84:
         8a:c6:d9:bf:e2:18:32:27:27:ea:93:b8:70:8f:fe:74:9e:d4:
         e9:ea:39:dc:3b:a2:a2:87:e9:eb:83:d8:4f:af:ab:19:0d:e6:
         ca:60:28:77:f2:81:74:4d:70:92:b3:63:d2:e9:b5:ac:4d:ff:
         3a:ff:2e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:42 2026 by rpki-client