Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
File:                     R8x-nha98tTmHHXufgADPnZvmJc.mft (raw, json)
Hash identifier:          BvtfjvGIn/lO5K9irBNz7caLIt33EsjAZgEVepbum7A=
Subject key identifier:   69:60:FB:E2:12:FC:D4:E9:8B:43:D0:1E:52:BA:2A:50:45:A9:58:B6
Authority key identifier: 47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97
Certificate issuer:       /CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897
Certificate serial:       01A180AB3C2A107BC9DFDF0CCC7A2CC1B52D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
Manifest number:          1AC4
Signing time:             Wed 28 Oct 2026 04:01:07 +0000
Manifest this update:     Wed 28 Oct 2026 04:01:07 +0000
Manifest next update:     Thu 29 Oct 2026 04:01:07 +0000
Files and hashes:         1: R8x-nha98tTmHHXufgADPnZvmJc.crl (hash: YOWfnDuIpbXTVDCwyz+AVk3J0UBX5WNdEI+bxiniYfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:ab:3c:2a:10:7b:c9:df:df:0c:cc:7a:2c:c1:b5:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897
        Validity
            Not Before: Oct 28 04:01:07 2026 GMT
            Not After : Oct 29 04:01:07 2026 GMT
        Subject: CN=6960fbe212fcd4e98b43d01e52ba2a5045a958b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:47:db:7d:46:ea:33:33:b9:58:43:c3:1c:a4:
                    dc:39:bf:1c:76:b6:1e:69:f5:19:d4:ea:00:51:ce:
                    c4:cb:2b:df:9b:7e:46:07:2f:02:71:45:e2:39:a0:
                    30:bb:aa:c4:d2:d6:e1:22:8b:40:4c:62:f8:ec:7e:
                    b5:b5:de:44:5b:b8:d5:70:1f:04:95:20:17:71:9d:
                    95:1b:a8:30:1d:5f:ef:79:c5:3a:4f:35:5d:9e:11:
                    cf:c3:54:25:a7:3b:9b:e3:81:05:6c:df:69:99:c1:
                    a5:a4:92:9e:61:7f:44:f0:d5:fe:80:50:97:d2:f2:
                    56:8b:9d:55:41:81:70:31:72:9a:1d:2f:11:44:07:
                    fb:93:80:e8:dc:7a:1c:a1:45:ff:30:fd:9a:83:92:
                    6c:b0:57:25:49:c1:6c:90:30:f5:47:ed:9c:de:c7:
                    11:43:ca:7b:19:a5:60:6d:56:01:44:1a:9a:42:b8:
                    22:a1:24:cc:57:5f:2b:7a:cd:c9:4e:18:cd:67:32:
                    27:d7:53:4b:f6:fa:f5:6d:8c:84:c2:3a:9b:e6:c9:
                    cf:6c:a3:bb:f2:01:9e:cb:10:5f:07:98:04:3f:0f:
                    10:45:ec:11:24:46:f7:dd:cf:1a:3b:00:ba:d8:72:
                    3b:66:64:5f:90:45:08:db:80:8d:01:88:06:4f:da:
                    1e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:60:FB:E2:12:FC:D4:E9:8B:43:D0:1E:52:BA:2A:50:45:A9:58:B6
            X509v3 Authority Key Identifier:
                keyid:47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:e6:c1:23:1f:29:a8:5e:8c:e6:bf:95:02:d9:b4:37:a2:a2:
         37:77:ee:05:93:9b:f0:0a:a2:70:d5:57:73:27:65:50:6c:b7:
         46:bc:e5:00:d5:05:9b:de:a2:dd:5b:f2:4b:ca:76:f5:e2:9d:
         83:f0:53:f2:72:29:65:ec:21:52:c9:18:e2:15:6a:7a:09:00:
         53:97:36:0d:9f:9d:e1:a3:24:0a:e5:73:0c:25:f0:74:ec:8d:
         61:91:5d:40:be:73:28:d6:df:0f:61:06:e1:4d:ce:eb:79:db:
         21:e2:20:7e:05:a1:12:24:4b:e9:05:40:b6:28:06:09:95:31:
         47:b8:27:60:4e:f1:6c:4c:a5:46:eb:b8:80:46:ae:cb:d8:17:
         d7:c2:5a:82:e9:2f:d9:cb:f1:81:07:95:e5:f1:94:fb:ac:ff:
         08:a7:8e:c8:f6:c3:34:2f:70:1e:3c:97:73:73:4b:86:34:a0:
         3a:14:5d:2d:38:74:88:0e:63:cd:bb:a3:bc:6d:33:60:5b:c3:
         0e:d5:c3:27:2a:22:3a:3c:ee:11:f6:f5:ba:10:1f:56:0d:0c:
         dd:1e:7f:5a:3a:8a:f3:4d:15:98:1d:bd:34:29:ec:f9:72:3b:
         60:e3:d0:a9:d1:b0:cc:c8:b5:67:86:57:7b:3d:2f:08:93:4c:
         96:c8:22:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:11 2026 by rpki-client