Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
File:                     8DqRN3TbyeYF3BerI6BaFoA5jeU.mft (raw, json)
Hash identifier:          BZzbq7nZFalEnmfHV4+D2nFTgAGBav3fwIZFi+YhUgc=
Subject key identifier:   39:3C:DE:F5:BF:B4:CB:DA:52:1F:51:2F:C0:E6:26:36:AD:DB:BD:75
Authority key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
Certificate issuer:       /CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Certificate serial:       01A1279E390BABA1CC021E1297513B4DF708
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
Manifest number:          0E5C
Signing time:             Sat 10 Oct 2026 21:00:43 +0000
Manifest this update:     Sat 10 Oct 2026 21:00:43 +0000
Manifest next update:     Sun 11 Oct 2026 21:00:43 +0000
Files and hashes:         1: 8DqRN3TbyeYF3BerI6BaFoA5jeU.crl (hash: hgRiR2iRNGD2TaZXSEs74R8lpEf2ck9C1AN/S5Q036w=)
                          2: oDHRY2p4X6qIRWZRDGncYz0E4F0.roa (hash: DS/v77bYi2U6NujVd5gI6DZQbrS7LjtyuAFDzI6STCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:27:9e:39:0b:ab:a1:cc:02:1e:12:97:51:3b:4d:f7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03a913774dbc9e605dc17ab23a05a1680398de5
        Validity
            Not Before: Oct 10 21:00:43 2026 GMT
            Not After : Oct 11 21:00:43 2026 GMT
        Subject: CN=393cdef5bfb4cbda521f512fc0e62636addbbd75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:30:b1:cc:81:ce:6a:05:c7:11:e5:3b:0c:94:
                    ea:37:3e:ce:d0:59:0b:a7:58:02:be:f8:0d:30:85:
                    25:bf:c2:26:3e:ec:ba:4e:0c:80:9c:2a:d5:10:e1:
                    fe:3d:c8:33:fb:2e:d3:e6:6f:49:34:95:cb:c9:9f:
                    7d:4f:67:6e:10:e6:01:f2:0f:c8:e9:02:56:d2:87:
                    e0:9e:8c:30:57:7e:67:31:16:b0:8d:54:61:2d:44:
                    43:aa:58:58:f4:20:04:94:96:30:0d:7d:87:8a:cd:
                    8b:27:0b:a4:e8:25:a1:90:da:85:b0:46:ab:e9:6c:
                    07:46:e7:09:ce:a9:c6:87:94:7c:86:52:ac:82:84:
                    25:d3:f8:e5:43:40:c8:3c:8f:68:6a:4f:7a:de:6e:
                    0f:2b:ad:94:8c:00:2f:91:b8:5b:1c:4e:ad:3f:9d:
                    02:b1:7b:05:8d:bc:fc:ac:52:60:3c:61:92:4b:21:
                    4e:3d:b9:60:aa:49:da:ea:f9:dd:3e:cd:72:6d:b3:
                    2f:46:19:63:0b:f5:74:9e:00:23:26:26:ae:97:2b:
                    f4:a1:6b:08:28:76:4b:cf:e1:74:95:8f:a5:ab:40:
                    f5:c7:1e:71:5a:25:2d:af:15:52:c6:f6:f1:7a:80:
                    5e:26:c2:5f:08:e3:97:44:99:9a:3c:3a:07:03:54:
                    7a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3C:DE:F5:BF:B4:CB:DA:52:1F:51:2F:C0:E6:26:36:AD:DB:BD:75
            X509v3 Authority Key Identifier:
                keyid:F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e2:a2:0b:cf:3f:01:d0:78:46:24:48:9b:34:ed:2f:41:24:
         f2:f3:b5:1a:bc:4f:31:39:61:10:0c:0a:36:c1:83:64:a8:52:
         2d:d7:4d:21:a7:76:cf:7c:99:ee:db:67:d0:df:5e:71:ec:ef:
         1e:87:65:91:46:03:b2:95:4e:53:76:4b:80:66:7e:43:e1:12:
         ec:44:c7:4b:38:04:c1:9b:0b:dc:f1:ae:f9:b8:28:dc:a3:e4:
         23:b8:dd:49:1f:77:95:04:fe:3b:94:5d:18:9e:2c:80:e8:04:
         28:ba:70:d9:be:a5:36:2a:ff:df:ff:87:1b:c6:23:7d:78:4a:
         0b:98:90:e2:67:57:f5:f0:ae:0b:27:5d:e0:b9:42:ae:81:96:
         76:9d:5c:be:f7:b3:d0:fe:c3:a4:a0:f8:35:26:0d:63:a6:e4:
         9f:95:2c:aa:22:29:d0:e5:53:f2:0a:f5:5f:ba:ca:59:ec:53:
         0b:7e:8c:7a:ac:6d:8f:18:9f:24:50:6f:57:77:bc:43:f3:05:
         50:ab:e0:c1:50:78:04:35:f6:f6:bf:a3:f4:31:06:81:9c:ea:
         1b:bd:ab:ab:97:7b:91:c8:5c:54:77:7c:69:86:78:f6:00:6c:
         88:44:cf:96:34:89:39:ec:63:7d:a6:68:a3:b2:43:8a:9d:36:
         84:0a:95:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEnnjkLq6HMAh4Sl1E7TfcIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwM2E5MTM3NzRkYmM5ZTYwNWRjMTdhYjIzYTA1YTE2ODAz
OThkZTUwHhcNMjYxMDEwMjEwMDQzWhcNMjYxMDExMjEwMDQzWjAzMTEwLwYDVQQD
EygzOTNjZGVmNWJmYjRjYmRhNTIxZjUxMmZjMGU2MjYzNmFkZGJiZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDCxzIHOagXHEeU7DJTqNz7O0FkL
p1gCvvgNMIUlv8ImPuy6TgyAnCrVEOH+Pcgz+y7T5m9JNJXLyZ99T2duEOYB8g/I
6QJW0ofgnowwV35nMRawjVRhLURDqlhY9CAElJYwDX2His2LJwuk6CWhkNqFsEar
6WwHRucJzqnGh5R8hlKsgoQl0/jlQ0DIPI9oak963m4PK62UjAAvkbhbHE6tP50C
sXsFjbz8rFJgPGGSSyFOPblgqkna6vndPs1ybbMvRhljC/V0ngAjJiaulyv0oWsI
KHZLz+F0lY+lq0D1xx5xWiUtrxVSxvbxeoBeJsJfCOOXRJmaPDoHA1R6gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDk83vW/tMvaUh9RL8DmJjat2711MB8GA1UdIwQY
MBaAFPA6kTd028nmBdwXqyOgWhaAOY3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERxUk4zVGJ5ZVlGM0Jlckk2QmFGb0E1amVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mODI0MjYtN2ViMC00NzY1LThkZTkt
ZTAwNjMyNjllNDY5LzEvOERxUk4zVGJ5ZVlGM0Jlckk2QmFGb0E1amVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mODI0MjYtN2ViMC00NzY1LThkZTktZTAwNjMyNjllNDY5
LzEvOERxUk4zVGJ5ZVlGM0Jlckk2QmFGb0E1amVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuKiC88/
AdB4RiRImzTtL0Ek8vO1GrxPMTlhEAwKNsGDZKhSLddNIad2z3yZ7ttn0N9ecezv
HodlkUYDspVOU3ZLgGZ+Q+ES7ETHSzgEwZsL3PGu+bgo3KPkI7jdSR93lQT+O5Rd
GJ4sgOgEKLpw2b6lNir/3/+HG8YjfXhKC5iQ4mdX9fCuCydd4LlCroGWdp1cvvez
0P7DpKD4NSYNY6bkn5UsqiIp0OVT8gr1X7rKWexTC36MeqxtjxifJFBvV3e8Q/MF
UKvgwVB4BDX29r+j9DEGgZzqG72rq5d7kchcVHd8aYZ49gBsiETPljSJOexjfaZo
o7JDip02hAqV1g==
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:50:44 2026 by rpki-client