Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
File:                     8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json)
Hash identifier:          x6+wZK1tfKJEGs2ih8KftBwjXAfynlA2EyvYrY4Hlwo=
Subject key identifier:   35:80:60:EA:40:2B:03:CF:BC:BE:2B:40:1F:4A:83:D5:F0:52:FC:11
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Certificate issuer:       /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial:       01A0B5E4307642ADBD8C292232E5A6E77FEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
Manifest number:          1654
Signing time:             Fri 18 Sep 2026 19:00:25 +0000
Manifest this update:     Fri 18 Sep 2026 19:00:25 +0000
Manifest next update:     Sat 19 Sep 2026 19:00:25 +0000
Files and hashes:         1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: /dec1fX3IZ+AXWjRPt993Ym1l0m4pgI/fvg+VZD7nJg=)
                          2: Fj143MGHKktmJd-EbkW5Fscgq7Q.roa (hash: qVq1ZDi68rbqJdslxCJ44DoiVXJKtqjpcHKrD37I/Xk=)
                          3: HxHmMC4hn6LUcbe8FZyQ9Bp9E7I.roa (hash: Lh+MTs7zk3xzxtVQ8DETff3QLgsLbSUualTWlhIFivY=)
                          4: WHeuBr41SRHYb97wRA-9N6rZlYY.roa (hash: JKr5DtUCS/MHFFPv5d8SACsCIRv8QZPYpdOpKjP/pqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b5:e4:30:76:42:ad:bd:8c:29:22:32:e5:a6:e7:7f:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
        Validity
            Not Before: Sep 18 19:00:25 2026 GMT
            Not After : Sep 19 19:00:25 2026 GMT
        Subject: CN=358060ea402b03cfbcbe2b401f4a83d5f052fc11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:40:81:25:55:82:24:9d:2e:3f:ee:fc:9c:
                    18:8a:58:40:4e:0a:52:60:04:b2:45:c7:1e:5d:4a:
                    73:90:17:7c:b6:39:70:a7:d7:6d:89:b4:74:98:9c:
                    cb:39:db:ca:3f:3d:25:99:e6:94:7b:bb:eb:01:3e:
                    81:04:74:b3:db:a6:b4:76:dc:22:4d:59:c4:d1:41:
                    90:d7:2e:de:40:75:50:34:a1:42:89:a1:c7:c9:19:
                    08:f1:a8:3d:f7:f1:06:06:bb:6d:49:a6:be:9a:d9:
                    eb:50:6d:c5:d1:02:39:87:c2:fd:cd:90:70:3e:49:
                    ca:df:9b:a1:09:65:0c:b5:f8:3e:d4:07:e7:1f:b2:
                    25:3a:de:5d:4b:06:19:94:fe:22:d7:3e:34:55:31:
                    30:cc:1b:ae:23:f4:83:94:55:f6:cc:0c:22:a9:b0:
                    a1:d1:03:ce:f5:63:5d:6b:27:8d:9f:6e:27:c7:85:
                    9d:9d:fe:dd:7a:31:c1:ed:d6:df:66:78:90:e8:55:
                    11:c8:79:8a:2c:b9:95:b5:b2:64:1a:ca:bc:fd:af:
                    c3:a7:11:5c:1f:98:9f:f9:3a:71:5a:83:a1:c1:dc:
                    a1:c5:8e:df:37:13:39:4f:ed:59:83:24:b2:0a:f7:
                    fe:33:03:e8:17:fa:d4:4b:0a:b5:fe:57:2d:69:26:
                    ff:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:80:60:EA:40:2B:03:CF:BC:BE:2B:40:1F:4A:83:D5:F0:52:FC:11
            X509v3 Authority Key Identifier:
                keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:04:40:15:95:2d:b0:8d:7c:36:63:33:a1:3f:5b:d5:24:3b:
         ee:2e:c1:7e:a5:14:4d:35:6d:4a:51:e2:9a:0d:00:08:00:a3:
         b4:fe:e3:59:26:9f:c8:50:37:68:70:cf:87:91:7f:b0:ea:ad:
         34:f8:02:7d:2e:99:44:de:cd:e2:a9:46:58:33:a9:71:c4:b2:
         fd:62:46:59:09:15:51:c1:de:18:e0:66:1b:68:2f:51:e6:7b:
         b8:be:e1:a9:cd:a0:9e:40:cf:55:0d:5d:82:65:51:83:03:a0:
         09:b1:05:ca:65:71:1c:67:d1:4c:4f:78:74:c2:64:11:c2:76:
         ad:e4:8e:ef:5f:e7:a3:2e:05:9a:d0:c0:ee:20:75:c7:db:b6:
         19:f6:31:72:a4:dc:9a:8d:c7:f4:79:57:bb:c5:7f:ac:c9:97:
         9d:9d:9f:ad:9c:73:be:18:ff:49:55:5c:cd:13:7a:dc:7d:d2:
         b6:86:fa:0d:1e:dc:19:4b:27:d2:8f:18:1d:60:a4:15:2e:dc:
         ca:77:48:77:f3:11:7c:f6:cb:3b:54:63:0f:57:36:82:ce:53:
         83:35:72:f7:78:ee:66:06:e7:c6:d8:31:ef:4a:90:a8:df:46:
         7a:33:76:26:1c:34:83:78:3f:79:0e:c3:48:68:e7:b4:71:89:
         ad:a6:da:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:10:33 2026 by rpki-client