Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File:                     8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier:          q3E0u5lC//LTLdMjZ08FGumyET/sh6tzFxWQxnjhs4c=
Subject key identifier:   64:5E:1F:FA:6F:6B:8F:C8:EA:C3:E0:D7:93:AD:45:EE:6C:F8:7B:D6
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer:       /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial:       01A13E5CEF6D10E852640D51B283C5D06AD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number:          1AA4
Signing time:             Thu 15 Oct 2026 07:00:40 +0000
Manifest this update:     Thu 15 Oct 2026 07:00:40 +0000
Manifest next update:     Fri 16 Oct 2026 07:00:40 +0000
Files and hashes:         1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: Mw13E3UKVeJavsq4/EHrF5srF1Y25qN2mVnGPLJSfMM=)
                          2: gItw0vdqzg90tFpmlTqKM5Onxow.roa (hash: EIklKyUdyJ9hgAFeB37ndmxzyfrlZyuSiNL83eIkim4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 07:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:5c:ef:6d:10:e8:52:64:0d:51:b2:83:c5:d0:6a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
        Validity
            Not Before: Oct 15 07:00:40 2026 GMT
            Not After : Oct 16 07:00:40 2026 GMT
        Subject: CN=645e1ffa6f6b8fc8eac3e0d793ad45ee6cf87bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3d:d4:6c:33:b6:f8:8f:55:75:99:9b:85:d5:
                    2d:2d:54:2b:90:4c:43:24:23:df:d0:ae:6c:10:e6:
                    8a:9f:46:8c:82:ec:4a:c9:ce:65:4d:08:8e:a9:4d:
                    d3:07:3a:4b:55:5a:de:54:bb:21:f7:7b:e3:c5:b7:
                    2b:e2:25:de:06:09:36:66:ff:34:ce:46:bf:7e:02:
                    d5:d4:7c:8b:10:d9:32:74:a3:e6:20:2d:af:a5:0a:
                    a9:3c:ea:d3:b1:2c:32:02:c7:4c:e6:b9:5a:50:4f:
                    45:2f:ed:16:3f:f1:77:c4:50:ae:58:b8:49:72:35:
                    da:d9:ce:0a:f8:b6:f4:6d:03:38:10:e0:f7:42:b0:
                    cb:35:60:21:8d:f7:0e:48:12:36:50:21:22:a0:a3:
                    00:2d:66:92:fd:9e:f9:48:e3:44:92:6e:c6:bd:79:
                    7e:06:63:e9:a4:47:81:ca:e6:ca:31:f2:1f:84:c5:
                    77:43:d7:6a:06:04:fa:79:b5:d2:cf:5f:c0:10:d0:
                    83:39:43:db:6e:87:32:f1:f1:0a:04:2e:22:4a:e6:
                    e2:85:64:23:eb:53:3f:b2:43:13:dd:e0:ff:e6:5a:
                    7d:19:3d:6f:eb:54:e8:02:4c:18:e3:32:48:2a:cb:
                    87:de:6d:12:fe:93:76:d6:d9:3e:6f:86:ff:2e:6d:
                    37:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5E:1F:FA:6F:6B:8F:C8:EA:C3:E0:D7:93:AD:45:EE:6C:F8:7B:D6
            X509v3 Authority Key Identifier:
                keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:9f:f2:a7:70:dc:23:b2:06:23:31:6a:5d:96:70:d1:87:5f:
         12:49:55:65:d6:c9:78:58:20:02:2a:92:34:08:48:2e:09:57:
         e7:7d:b3:e8:18:f4:63:f6:30:95:b9:33:c0:42:68:d8:d2:76:
         fe:bd:e7:34:1f:02:ef:51:d1:d6:8f:b9:75:8b:23:de:f9:3c:
         43:c1:ed:7b:4a:41:cd:02:4f:23:17:4a:4d:81:41:78:3f:90:
         1e:21:a7:51:e1:94:ec:ed:c1:2b:dc:1d:f2:61:d1:39:ef:dc:
         af:3b:c1:c8:f7:96:5c:51:bd:b7:da:9b:fe:85:d9:9a:bd:72:
         42:75:df:f9:32:96:d5:6f:33:6e:25:04:d7:57:e5:2b:18:99:
         90:6c:30:e7:6c:af:5a:39:e0:8b:c7:46:ef:fc:32:93:7d:54:
         9f:a6:95:7c:ef:60:6a:7b:99:7c:9f:4f:c0:4a:d9:92:f3:1a:
         12:72:de:0c:02:bf:7b:a7:72:5f:88:ff:16:14:f0:1d:6c:65:
         1c:7b:6b:93:0f:29:7f:81:6c:69:7e:bf:b3:53:8d:5c:47:3f:
         73:f2:f4:0e:e6:8b:e3:ea:4c:94:7d:69:cd:5f:8b:e0:24:ff:
         57:32:cb:64:19:6d:91:45:7a:cc:96:05:5f:4b:67:1a:0d:07:
         bd:36:4c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:07 2026 by rpki-client