Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
File:                     8DmVMU18LHBTsc_z4T-WUCquq88.mft (raw, json)
Hash identifier:          aX3gW4VlICjO+JPea/e84H2RXDz9/DZ7AwxvV3KgUR4=
Subject key identifier:   80:0F:11:F6:6A:DD:34:2F:A0:EE:D3:CA:F1:2F:C1:3A:35:00:3E:52
Authority key identifier: F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
Certificate issuer:       /CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Certificate serial:       01A17815E72206DE85041B98FB4109A688C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
Manifest number:          013C
Signing time:             Mon 26 Oct 2026 12:01:03 +0000
Manifest this update:     Mon 26 Oct 2026 12:01:03 +0000
Manifest next update:     Tue 27 Oct 2026 12:01:03 +0000
Files and hashes:         1: 7Y-WGHeIKmavhhwyUtVSTv4dV74.roa (hash: 6aCml1iAjI5Ul10/DV9KNxyhcQNoCoHzIBHaF4XKERk=)
                          2: 8DmVMU18LHBTsc_z4T-WUCquq88.crl (hash: SeDozovg5StOMEuh5K2MPz/e9OZW7Qn692eYu33G3Lk=)
                          3: 8VBWQ2XfCMC5lByDcRYfdGeXThw.roa (hash: HzqPO66uE1+HiOwrkh0W6gUEqECAgV0PXkfjdzoF6Fc=)
                          4: ADSFjd7CdbzaI3rWM5WXzSr78b8.roa (hash: dpJ1bSM5jDKoR+wXRYlGh5z+uNOn0fdbBQpUFJegB00=)
                          5: DOhltBe7Jjwt-Zang59aCLv9pyk.roa (hash: r1rLZd7khJrDRQV2tg8gcIC9iFKyZ3MlcWZBnZyazys=)
                          6: GKNBUzbX6fk_ZGvEdYf3qJ03AqY.roa (hash: Yk5Z2ApUIFrV+C536vj94AjIDEb8pim9xmLcinHBJbs=)
                          7: Py5-SfzgdBopcKEbr1S0y6HLpi0.roa (hash: UfuqXVAeefVJVDWI/7a6Zdo2dE/lpe7wMglvajxwHoY=)
                          8: RHorQ2xcAb-F7Xna9K5af7FEmzs.roa (hash: S44AKUCf5f+EQxBGcjX+XoCjjJ0ey5c7k0eoY9Ekr5g=)
                          9: UgtMS63_CIHp4yrDJgi3ZLPBmnI.roa (hash: WN89G26tYkg2OtwRMyqMK1Q84ryZ7bW/B8p2iEKccX8=)
                          10: a1QWWFZ6s4DRdUSOTU03JY_v_Rs.roa (hash: Cmtap6+ZacRGEaEZSRlUzvkfeKN7ipRh2grGmp1mnfA=)
                          11: lKpsaMhWZ0fV61kPqKZYx1tVCjY.roa (hash: 3krPNydBrnfH95dkgxU42zpY/EBgzcVqcHPdZ1SpwQs=)
                          12: qEMDrkRlxLB5UG0Z6mCAhLBikio.roa (hash: mHPLMjrq5nmaQwjZOJcQiDtgEZxLquTnwJyzydmKSCE=)
                          13: wwpquAWTUuFb0E9CJs-YBNeMQ7E.roa (hash: 2XANtZptrutEVaXB3duL9dMIg7D+kzakEupuwq2jEe4=)
                          14: x3AkqqWCM_jT5RY8dyci5qYm37o.roa (hash: 6wh4k7uKUw5+QRgS1jkmB585ZTOG6T4LIDLdP+mMWWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:15:e7:22:06:de:85:04:1b:98:fb:41:09:a6:88:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
        Validity
            Not Before: Oct 26 12:01:03 2026 GMT
            Not After : Oct 27 12:01:03 2026 GMT
        Subject: CN=800f11f66add342fa0eed3caf12fc13a35003e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:38:d4:be:ec:aa:d9:c1:5d:31:ac:b1:b6:e8:
                    28:1f:f3:be:28:8a:4e:68:97:03:5f:c3:61:10:56:
                    d9:9b:7f:94:7c:7a:79:b0:c7:2f:d7:a1:98:57:1e:
                    c8:be:0c:b2:0c:f2:fa:41:c2:59:08:a2:19:1f:cb:
                    0a:16:81:79:67:16:b2:7f:57:fe:7e:23:8b:9c:db:
                    9e:ad:a9:7a:18:9d:9d:27:77:35:75:e3:6a:d4:b0:
                    37:f5:44:82:70:de:e1:38:0b:fc:99:dd:40:3c:2e:
                    a8:d1:6e:c4:9d:18:9d:7d:06:a9:ec:d1:37:02:0f:
                    33:4a:73:11:a8:b0:8b:95:d3:5b:d6:d8:96:c0:43:
                    80:5a:bb:7e:c5:25:22:12:1d:e6:84:74:5e:2b:aa:
                    fb:52:a1:c8:20:a3:d9:c1:7c:83:7b:5e:20:6f:a6:
                    26:a1:35:12:de:92:85:6f:16:d8:4b:3d:65:b6:45:
                    49:9e:42:1a:41:63:05:b6:54:0d:72:f2:ec:f4:ce:
                    63:ca:4c:83:a6:7e:36:9e:c8:60:9e:13:a1:fe:6c:
                    64:f9:de:55:56:47:96:75:3d:40:da:c4:45:65:a7:
                    4a:05:11:e1:c7:a8:f7:d7:88:42:20:8b:c9:30:71:
                    33:0a:c0:43:65:c8:ff:0a:5a:f3:a8:ea:03:e4:7e:
                    c5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0F:11:F6:6A:DD:34:2F:A0:EE:D3:CA:F1:2F:C1:3A:35:00:3E:52
            X509v3 Authority Key Identifier:
                keyid:F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:c3:32:63:04:78:35:96:f5:7f:18:1f:b0:88:07:8d:eb:c7:
         db:f1:d6:03:41:a6:77:9e:c2:f6:14:e7:5a:79:a0:d5:a1:ae:
         bb:48:78:0a:55:2d:03:76:09:0a:59:0d:e5:88:c4:54:d8:b0:
         10:9e:74:58:43:a9:ab:53:41:51:8a:3f:51:e8:68:a8:b6:8f:
         d6:e4:ee:72:08:f0:9c:42:7d:dd:26:7d:87:7a:15:d1:e3:87:
         7a:4c:f5:b8:94:c2:20:2b:a1:ec:7c:82:4f:c3:12:61:b8:c4:
         5a:c0:d4:4a:cb:fd:17:04:e2:3c:17:cd:26:b1:8e:76:39:45:
         9c:b7:39:91:7e:9e:32:d7:f7:f7:87:39:21:1a:0e:90:42:39:
         e4:68:44:94:8e:86:96:c2:84:f2:68:d5:35:6d:58:33:8c:54:
         47:4e:59:21:7b:a6:88:81:6c:e3:24:f3:48:8c:9c:a6:19:92:
         b3:b0:ee:d5:13:77:0c:7e:53:42:c2:1c:f3:36:65:8b:7f:57:
         07:32:a0:16:aa:58:de:f2:19:21:85:09:3c:7e:31:61:80:72:
         8b:fa:8f:ad:4d:a0:88:93:74:1d:de:a1:28:c3:2d:d5:08:00:
         06:c8:51:29:14:01:83:c9:56:96:a5:51:a3:9c:bf:76:5d:70:
         26:b7:f8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:55:28 2026 by rpki-client