Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
File:                     8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json)
Hash identifier:          WKOmIFLdslgi+hbCYn0DwfjP4/ACbiOWxR+rqHQu9jk=
Subject key identifier:   9A:81:A6:DF:A2:BD:20:BF:F3:8F:67:E6:80:0D:E7:BD:66:DA:BC:14
Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
Certificate issuer:       /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Certificate serial:       01A002143DF7F27C0034CA3EAAA9A55B97B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
Manifest number:          13F1
Signing time:             Fri 14 Aug 2026 21:01:16 +0000
Manifest this update:     Fri 14 Aug 2026 21:01:16 +0000
Manifest next update:     Sat 15 Aug 2026 21:01:16 +0000
Files and hashes:         1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: b+MM+aX3GPXyUaPp+dxtvIvfRsnTc6xcaQJ1U54M5+Q=)
                          2: l6iMzA5rUEZhAgCUEOvnKTqShV0.roa (hash: gAUd2yvULPzYOcnL9Q+REp9EtdgiHuOMJuUR7tJ6Oq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:14:3d:f7:f2:7c:00:34:ca:3e:aa:a9:a5:5b:97:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
        Validity
            Not Before: Aug 14 21:01:16 2026 GMT
            Not After : Aug 15 21:01:16 2026 GMT
        Subject: CN=9a81a6dfa2bd20bff38f67e6800de7bd66dabc14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ef:d6:f4:42:fd:26:65:01:bc:c3:17:a5:5b:
                    23:bc:ed:89:c8:ec:bb:d9:32:89:51:00:bb:eb:aa:
                    2c:e7:97:35:3c:44:4d:ad:3c:4f:2a:84:f2:b9:a9:
                    97:0d:e9:a6:cc:b7:fa:4b:8a:c4:cf:3e:f6:d8:e3:
                    45:7b:94:17:26:e0:15:04:4d:59:bc:30:b0:08:15:
                    60:9e:c2:65:9b:0f:52:28:cb:27:8a:d2:c6:73:06:
                    6d:ec:2f:5c:b0:5e:3f:52:f2:f6:29:e2:64:57:7d:
                    81:07:8b:12:09:d4:a9:18:7d:80:88:11:0a:34:46:
                    a1:e3:ba:5b:6b:2b:98:0f:b2:19:6d:c4:ec:d0:65:
                    e7:51:dc:35:cb:a6:e9:de:67:24:d9:29:26:f8:da:
                    25:b1:ad:f1:fb:5b:c1:13:10:f3:43:86:ba:1b:ba:
                    34:65:4c:29:ec:c9:31:55:59:b5:96:2a:94:b9:59:
                    8b:96:6d:3e:ca:e0:4a:17:6a:a8:05:38:99:7e:f2:
                    e0:69:a8:64:5d:73:27:22:82:eb:76:b6:09:24:22:
                    14:da:1b:8c:f3:96:ce:a5:8c:e1:a5:ab:63:26:09:
                    77:56:a1:1d:1f:8a:26:71:50:ba:82:09:77:e2:70:
                    f3:56:1b:09:42:9b:73:0e:13:c4:71:20:3a:19:42:
                    96:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:81:A6:DF:A2:BD:20:BF:F3:8F:67:E6:80:0D:E7:BD:66:DA:BC:14
            X509v3 Authority Key Identifier:
                keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:1e:f4:20:b1:82:75:87:41:2a:35:6e:c5:c5:d0:0d:01:1a:
         38:b5:57:4d:4c:e7:16:8c:8f:1d:41:1f:63:a1:75:87:1f:f5:
         e4:33:f5:36:71:4d:19:3c:26:2a:cb:84:c8:77:2a:10:94:99:
         bc:db:bc:89:a1:c7:f7:a5:b0:b3:0a:90:be:d7:2f:8f:ba:d2:
         02:b0:78:52:69:b5:b1:a2:49:5c:93:91:98:ed:c0:6c:53:79:
         25:6f:ac:70:7a:38:b8:67:7b:67:f5:1f:f1:c1:f7:13:c1:92:
         90:59:2a:b6:81:09:3e:61:3a:f4:d6:4b:93:10:70:f8:29:76:
         93:d7:fa:b3:d5:b6:33:b6:7b:4c:f3:94:9e:77:3a:bb:54:ca:
         34:0b:47:c1:a7:36:7e:dc:b3:2b:fd:55:0e:1b:f8:5a:6f:e2:
         19:5e:61:59:8b:5d:b1:7b:e9:9c:95:da:2b:7f:b4:17:58:70:
         d7:00:8d:fa:af:17:87:50:7a:e9:af:ef:e9:69:fa:8d:4b:14:
         3a:77:d7:91:64:4f:28:c1:ec:51:66:11:13:74:e3:ce:db:d5:
         7b:63:20:1f:47:f5:ea:53:f6:ac:6c:d3:ef:09:d5:e6:07:5c:
         eb:50:84:c9:a1:30:a7:c3:32:71:73:32:49:89:6a:10:fa:b5:
         38:bf:5a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:52 2026 by rpki-client