Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File:                     8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier:          0V6FWr5CsdhhSFOxVO30k0K9QbL6QMQXfx+7ARLzjNs=
Subject key identifier:   2B:96:F1:8B:58:74:A9:A6:BD:1E:90:32:A7:84:53:67:1F:6B:48:6B
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer:       /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial:       01A001DD362331FAE3CAFFB76E8F1BBF55E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number:          10F8
Signing time:             Fri 14 Aug 2026 20:01:09 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:09 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:09 +0000
Files and hashes:         1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: 8i+WtbsFG6g0LSVEaYipUrxoLA83ofBYmMBEmhC9W5c=)
                          2: cnrJlx8I7NXdM3vCOpIC2LhJ_Y8.roa (hash: PEnciQKvDww0pGR7AqTRA4YTGpE9TeNFX/n52nV6jQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:36:23:31:fa:e3:ca:ff:b7:6e:8f:1b:bf:55:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
        Validity
            Not Before: Aug 14 20:01:09 2026 GMT
            Not After : Aug 15 20:01:09 2026 GMT
        Subject: CN=2b96f18b5874a9a6bd1e9032a78453671f6b486b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cc:62:2f:3c:56:94:07:26:00:86:3d:c3:4b:
                    5b:48:d1:1a:92:0f:e3:6f:8c:f1:7f:75:fc:ea:ec:
                    03:8d:e4:b9:ea:32:08:e5:0c:23:48:87:47:1b:da:
                    a2:e9:c0:ac:70:44:12:95:0e:5f:26:40:0a:9d:25:
                    50:96:7b:fe:1b:4a:f2:16:ae:01:22:9c:33:11:e8:
                    d8:ba:44:84:77:69:17:36:28:d0:17:13:9b:0c:0c:
                    18:8f:c5:ee:79:dd:e9:13:c1:f3:4f:93:39:5a:dd:
                    61:41:42:34:23:e8:38:59:2b:29:08:12:06:76:1e:
                    e2:ca:1f:c0:d4:bd:91:9a:69:80:b5:c3:63:0c:75:
                    54:a1:25:bb:c6:42:7a:68:d9:88:1f:bb:bd:48:53:
                    e1:f2:ea:cc:43:6c:54:c1:11:b3:06:69:20:03:9f:
                    d2:37:fc:70:09:0b:48:8c:53:3d:aa:6b:f5:70:89:
                    db:9e:0a:6d:66:b6:b7:fa:8b:2b:01:be:64:02:18:
                    e6:15:ef:6c:9a:6f:27:5b:3b:23:72:63:8c:28:15:
                    c0:81:5a:71:59:6d:40:a4:ca:b0:f3:c4:f7:cc:68:
                    f6:c3:7b:37:ad:f4:8a:86:e0:2b:e8:f4:64:68:48:
                    f4:50:a2:0d:6f:49:cf:55:01:c6:53:61:a0:cb:bd:
                    72:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:96:F1:8B:58:74:A9:A6:BD:1E:90:32:A7:84:53:67:1F:6B:48:6B
            X509v3 Authority Key Identifier:
                keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b4:7c:7f:03:c7:58:ee:ac:d5:36:3b:2b:b1:e0:21:21:32:
         5c:d4:b9:77:12:d4:56:bd:64:89:de:cd:f8:b9:6b:68:73:d9:
         f3:bf:b6:d5:f2:c9:fc:dc:87:0b:72:11:5d:42:78:c1:8c:43:
         a3:e9:67:18:8b:88:db:92:5e:6d:9f:56:8c:0d:2c:15:56:f9:
         91:ef:73:3c:9f:57:90:e3:c8:53:ea:86:dd:0e:36:88:03:33:
         3f:36:36:96:19:5b:7e:60:b8:3d:7d:ba:ec:4d:60:04:00:98:
         f3:21:0d:c4:e4:7c:f8:41:f1:e2:e8:98:6b:cf:b4:41:7f:73:
         9a:29:b1:9f:3c:8c:a1:7d:f2:ac:75:1d:37:2c:e4:30:f7:92:
         1f:b8:2f:34:0a:35:9a:a3:3e:d6:12:ec:07:20:b0:d6:3f:24:
         f6:03:f8:d2:c0:17:9e:fc:cc:29:64:75:a0:95:0a:7f:4e:22:
         53:ca:c2:da:4e:ad:28:e0:b5:b0:5d:cc:dc:a8:60:07:2f:3a:
         a5:0e:8d:20:21:54:79:f0:34:b7:a7:f9:48:cf:5f:95:7f:52:
         16:61:15:e7:06:89:89:ed:6f:6b:e3:d8:19:9d:6c:ff:26:cd:
         28:56:5b:e3:6f:f2:cd:97:56:23:3a:e6:74:00:33:cd:73:8c:
         06:4e:9f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:45 2026 by rpki-client