Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
File:                     8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft (raw, json)
Hash identifier:          MHGZGI85RViG3QJ4gXPEi8xCiX1xF+mOLkMc7Kh933w=
Subject key identifier:   51:7B:71:9A:1D:21:77:41:F4:68:C9:73:C6:A8:8F:B4:9F:3A:8B:59
Authority key identifier: F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
Certificate issuer:       /CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
Certificate serial:       01A154408185BE719E22C72CD3CCBEBD0BD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
Manifest number:          0720
Signing time:             Mon 19 Oct 2026 13:01:15 +0000
Manifest this update:     Mon 19 Oct 2026 13:01:15 +0000
Manifest next update:     Tue 20 Oct 2026 13:01:15 +0000
Files and hashes:         1: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl (hash: txMPb/3rxtz4eTkOD/J5KXcsKSntbj18MRsxdFNZLoQ=)
                          2: EkaMEHFXzVXgvijJ-hXSC2h-u7I.roa (hash: JZppuXOA54xhCxrPeBXaCqhSYeNgkIyj6hJkt7FdiSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 13:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:54:40:81:85:be:71:9e:22:c7:2c:d3:cc:be:bd:0b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
        Validity
            Not Before: Oct 19 13:01:15 2026 GMT
            Not After : Oct 20 13:01:15 2026 GMT
        Subject: CN=517b719a1d217741f468c973c6a88fb49f3a8b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:24:e5:d2:52:4e:b4:71:a1:8b:0e:54:66:c6:
                    10:bc:2c:9d:a8:2d:86:19:94:d8:a7:c7:1d:6c:9d:
                    f6:93:e7:a3:d2:ad:d1:40:ff:d3:8e:0c:79:ae:15:
                    85:68:93:38:ef:11:93:b3:c6:db:e4:6f:3e:53:0b:
                    9f:c3:b9:ad:a7:75:56:05:20:d2:7e:5a:09:62:08:
                    fa:dd:1b:29:e8:a4:fb:0f:3a:78:5d:0f:18:a3:55:
                    1d:12:37:42:0e:9f:5e:f3:4b:ee:0a:44:1e:73:bc:
                    c5:74:1c:17:f4:75:b4:cf:3e:4b:31:e1:da:8e:8a:
                    12:48:cc:3d:44:e5:b3:6e:6b:43:f4:68:f1:08:9a:
                    3f:d5:83:cc:3f:09:14:f9:41:9b:a8:2e:ec:98:ea:
                    b6:d0:09:83:80:cb:df:f0:54:bf:6b:ef:ec:d2:6f:
                    b3:b7:8d:6b:d3:5e:2c:6b:e0:7f:25:70:91:c0:bb:
                    03:ae:1d:0c:c3:62:33:05:b3:d7:e2:5a:72:9e:67:
                    70:b9:34:13:34:60:88:71:de:ca:d0:e1:25:67:d5:
                    86:09:3a:c7:67:73:93:6b:4f:b6:a7:b6:aa:b9:92:
                    3d:82:0c:40:38:93:52:e0:3b:fb:3b:5c:40:9d:97:
                    67:95:56:ea:b6:6d:6f:d3:37:63:07:55:5e:fd:d5:
                    3b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7B:71:9A:1D:21:77:41:F4:68:C9:73:C6:A8:8F:B4:9F:3A:8B:59
            X509v3 Authority Key Identifier:
                keyid:F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:0b:83:40:0a:5a:b3:e4:bf:91:50:55:07:18:eb:a5:e3:2b:
         2c:64:92:aa:e2:a7:49:c2:23:d9:02:fa:5a:ff:75:a8:2f:e5:
         5f:78:3d:32:ac:31:33:1e:df:64:da:cb:72:84:39:bd:60:26:
         76:4f:ca:15:03:d3:43:5f:4a:f3:ac:8a:45:c4:f6:02:3f:cf:
         1d:e9:fd:52:0e:2e:19:e9:6e:ee:16:d1:e0:7f:62:13:09:63:
         b2:26:f8:2d:ee:93:e0:74:d2:71:11:f6:14:41:d7:f4:82:59:
         10:42:e1:7a:7a:af:73:fc:04:0c:a4:86:01:a7:b7:39:19:30:
         42:a8:04:50:f0:46:71:64:b8:e7:76:2d:1e:4a:6c:7f:80:ed:
         8a:ad:a0:2f:0a:a2:7b:08:25:50:6a:7b:f5:a7:bb:3c:7c:d3:
         e9:f7:9b:82:90:d0:ad:b8:0e:88:b9:62:7d:48:3d:9c:f5:06:
         ae:60:d8:de:9c:c9:24:58:fb:b4:1c:0d:40:83:5b:86:41:60:
         a9:89:f3:e5:3b:43:e4:f0:c5:52:a3:6f:3d:15:af:1f:01:13:
         9f:2a:d4:a5:98:29:33:8a:f8:86:d7:be:03:86:8d:75:ec:38:
         82:1d:3c:54:25:52:e3:f8:58:7e:d1:28:86:16:53:8e:35:a1:
         50:d0:0a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:55:37 2026 by rpki-client