Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
File:                     8-hh3LY0GJOsTmMm723kNEHmaUM.mft (raw, json)
Hash identifier:          WKjacrFpFJ97eqilL24HzZ7XlZKu0PJDalW+yJdmJ/g=
Subject key identifier:   E3:4C:F2:C9:06:06:DD:90:BE:89:6F:75:91:E8:86:0D:08:E9:38:CA
Authority key identifier: F3:E8:61:DC:B6:34:18:93:AC:4E:63:26:EF:6D:E4:34:41:E6:69:43
Certificate issuer:       /CN=f3e861dcb6341893ac4e6326ef6de43441e66943
Certificate serial:       01A03F72D43F09277E5F0CF88FEEA12AC41E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
Manifest number:          0384
Signing time:             Wed 26 Aug 2026 19:01:25 +0000
Manifest this update:     Wed 26 Aug 2026 19:01:25 +0000
Manifest next update:     Thu 27 Aug 2026 19:01:25 +0000
Files and hashes:         1: 8-hh3LY0GJOsTmMm723kNEHmaUM.crl (hash: vkas9+K6K3mBY05YIcRjAFhbqvmk13mcRobTxTukNiY=)
                          2: bk4lZusY2_Koxe78KPF98kBhHJ4.roa (hash: 1Foi9h5PHolKa1KqV3ZXYBv+pGOywWlibfdBplpePww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 19:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:72:d4:3f:09:27:7e:5f:0c:f8:8f:ee:a1:2a:c4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3e861dcb6341893ac4e6326ef6de43441e66943
        Validity
            Not Before: Aug 26 19:01:25 2026 GMT
            Not After : Aug 27 19:01:25 2026 GMT
        Subject: CN=e34cf2c90606dd90be896f7591e8860d08e938ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:26:b2:19:cb:35:2d:ad:d7:92:01:2c:3d:a6:
                    7a:d1:e6:74:aa:18:22:31:be:a7:34:68:65:d4:73:
                    0e:14:f0:9d:51:d0:fe:c1:88:15:8c:e4:4c:e9:f7:
                    07:a8:ea:28:ee:b1:fd:af:b2:69:48:e8:34:b9:95:
                    85:8d:f2:e9:d9:8b:d5:53:cf:c7:f8:bc:57:a5:54:
                    ba:a3:ce:1e:63:bf:ea:f3:05:f7:41:86:46:8f:f9:
                    f2:ab:0b:b5:ff:96:44:ed:05:8e:3f:07:7b:87:41:
                    12:e3:79:19:f6:74:70:37:a9:fa:a8:df:9d:98:ef:
                    d5:f4:bc:ea:97:2c:3e:02:74:46:cd:3e:e9:b2:a4:
                    de:7c:91:5f:81:98:86:02:51:c7:98:b7:aa:35:a4:
                    f0:91:8a:e7:2c:f8:5a:54:aa:3f:d2:4f:cb:9a:9f:
                    f0:0b:21:b1:00:51:ba:bf:63:2e:d1:57:30:ed:f8:
                    a4:66:36:6e:ad:5f:6c:20:9e:b4:ad:53:62:24:3f:
                    d6:c9:f3:36:34:5a:85:70:a3:84:e2:6c:54:9e:c0:
                    79:0c:58:d8:6b:cb:7c:ae:88:bf:79:45:3b:b8:7f:
                    b6:62:c9:66:4b:cc:14:81:1b:23:e2:4f:64:8c:11:
                    12:ca:75:e0:a9:1b:8f:84:48:df:b7:3d:1e:f2:38:
                    db:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4C:F2:C9:06:06:DD:90:BE:89:6F:75:91:E8:86:0D:08:E9:38:CA
            X509v3 Authority Key Identifier:
                keyid:F3:E8:61:DC:B6:34:18:93:AC:4E:63:26:EF:6D:E4:34:41:E6:69:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ce:96:26:32:d6:c2:8c:37:fd:a2:1d:9e:2e:5c:ee:dd:92:
         e8:d3:06:17:62:af:5d:64:a8:ec:7a:97:37:9d:d1:4c:f8:fe:
         c5:c6:e3:74:02:b3:ae:e5:fd:59:c5:35:72:4a:39:22:3b:c7:
         59:22:78:00:89:b5:a2:68:5f:7c:cb:81:c6:41:7a:84:27:8b:
         33:93:d1:4b:00:e9:15:e7:e4:6c:17:b1:98:35:97:07:cd:0d:
         7c:76:b9:17:1e:c1:33:65:91:ed:4d:54:c2:52:7b:34:b7:98:
         b5:82:ee:ad:86:6d:75:6e:0a:2e:c6:54:21:ed:96:53:ff:0a:
         e6:30:03:cb:c6:46:88:48:9d:19:01:16:5f:ce:9b:69:d7:76:
         b2:d0:26:28:f3:96:a2:e2:2b:54:a8:2c:5f:93:65:d3:a4:7c:
         de:3b:7a:65:3b:cf:ca:ec:56:73:05:65:78:f6:e6:e3:b0:2e:
         5e:f1:00:e6:68:3c:e5:c9:32:0f:3d:32:d1:50:f6:d2:c3:18:
         e4:42:06:94:d8:62:61:26:1f:f3:55:4b:e9:9e:41:21:71:c7:
         f9:65:b3:28:b0:c3:26:dc:37:a2:19:35:61:94:c8:35:b5:ff:
         39:ea:3e:69:84:c5:2c:a8:40:8f:e0:44:ea:49:26:a7:ea:61:
         9d:16:e8:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/ctQ/CSd+Xwz4j+6hKsQeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZTg2MWRjYjYzNDE4OTNhYzRlNjMyNmVmNmRlNDM0NDFl
NjY5NDMwHhcNMjYwODI2MTkwMTI1WhcNMjYwODI3MTkwMTI1WjAzMTEwLwYDVQQD
EyhlMzRjZjJjOTA2MDZkZDkwYmU4OTZmNzU5MWU4ODYwZDA4ZTkzOGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SayGcs1La3XkgEsPaZ60eZ0qhgi
Mb6nNGhl1HMOFPCdUdD+wYgVjORM6fcHqOoo7rH9r7JpSOg0uZWFjfLp2YvVU8/H
+LxXpVS6o84eY7/q8wX3QYZGj/nyqwu1/5ZE7QWOPwd7h0ES43kZ9nRwN6n6qN+d
mO/V9Lzqlyw+AnRGzT7psqTefJFfgZiGAlHHmLeqNaTwkYrnLPhaVKo/0k/Lmp/w
CyGxAFG6v2Mu0Vcw7fikZjZurV9sIJ60rVNiJD/WyfM2NFqFcKOE4mxUnsB5DFjY
a8t8roi/eUU7uH+2YslmS8wUgRsj4k9kjBESynXgqRuPhEjftz0e8jjbSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONM8skGBt2QvolvdZHohg0I6TjKMB8GA1UdIwQY
MBaAFPPoYdy2NBiTrE5jJu9t5DRB5mlDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOC1oaDNMWTBHSk9zVG1NbTcyM2tORUhtYVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mNzQ0NjMtNGI1Mi00ODgzLTg1Mjkt
MzRlYTAyMWQ5NzMzLzEvOC1oaDNMWTBHSk9zVG1NbTcyM2tORUhtYVVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mNzQ0NjMtNGI1Mi00ODgzLTg1MjktMzRlYTAyMWQ5NzMz
LzEvOC1oaDNMWTBHSk9zVG1NbTcyM2tORUhtYVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkc6WJjLW
wow3/aIdni5c7t2S6NMGF2KvXWSo7HqXN53RTPj+xcbjdAKzruX9WcU1cko5IjvH
WSJ4AIm1omhffMuBxkF6hCeLM5PRSwDpFefkbBexmDWXB80NfHa5Fx7BM2WR7U1U
wlJ7NLeYtYLurYZtdW4KLsZUIe2WU/8K5jADy8ZGiEidGQEWX86badd2stAmKPOW
ouIrVKgsX5Nl06R83jt6ZTvPyuxWcwVlePbm47AuXvEA5mg85ckyDz0y0VD20sMY
5EIGlNhiYSYf81VL6Z5BIXHH+WWzKLDDJtw3ohk1YZTINbX/Oeo+aYTFLKhAj+BE
6kkmp+phnRboAw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:37:02 2026 by rpki-client