Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
File:                     8mag-YbyGUXIDYMVZ7ryliAQetw.mft (raw, json)
Hash identifier:          Bb1PYZbZajs1F5/hB6R93G4XIsUYOLKO5qz1fFr/0KI=
Subject key identifier:   30:C2:BB:BB:B5:72:40:54:C0:4C:09:18:40:F0:B2:47:7D:1D:2C:CB
Authority key identifier: F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC
Certificate issuer:       /CN=f266a0f986f21945c80d831567baf29620107adc
Certificate serial:       01A1377F26EC9FDA25F0F388C3078376F5C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
Manifest number:          1AA1
Signing time:             Tue 13 Oct 2026 23:00:42 +0000
Manifest this update:     Tue 13 Oct 2026 23:00:42 +0000
Manifest next update:     Wed 14 Oct 2026 23:00:42 +0000
Files and hashes:         1: 7voS5KTfzcjQzAkeR_UWZ6y4cpc.roa (hash: g3m4Cs0LnAb1ACKe4HSyReBYZHQrU1ca/nDV4+67Nvc=)
                          2: 8mag-YbyGUXIDYMVZ7ryliAQetw.crl (hash: nCOLNfYpe7v7E9GYaGDr9vp9m+aNcuqWTYtwfK/y7fs=)
                          3: 8r77MtNd6JHrFBBnLm_5J_BuAIQ.roa (hash: VZcgGbj6NNnM5Pi5ovNgKWOCK7R74IyyThYZ0XXcsZw=)
                          4: Tf6UQDYvPckU1C2Jn1veoujriQ4.roa (hash: VWiJc3Oh+BpFRYnKzjPdk+rjnYM47zy15kr7GUYXyXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:37:7f:26:ec:9f:da:25:f0:f3:88:c3:07:83:76:f5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f266a0f986f21945c80d831567baf29620107adc
        Validity
            Not Before: Oct 13 23:00:42 2026 GMT
            Not After : Oct 14 23:00:42 2026 GMT
        Subject: CN=30c2bbbbb5724054c04c091840f0b2477d1d2ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9f:d7:94:86:92:3e:ef:02:aa:48:c7:99:42:
                    01:e6:0e:35:f4:7d:f9:eb:5b:c1:00:b5:fb:bd:ce:
                    58:ac:61:18:2b:6f:c3:a0:06:91:ff:af:06:28:6b:
                    ef:fd:a7:17:99:98:17:b4:ae:4a:83:82:fe:4d:47:
                    a2:c3:70:a2:50:d9:15:c7:58:66:3f:e5:8c:fb:0b:
                    22:b3:13:4d:9c:ed:d8:5b:2f:5e:31:76:f6:09:6c:
                    d0:72:fc:24:01:69:85:ad:fe:dc:fc:86:18:dd:b2:
                    24:6b:57:2b:c6:3d:bc:8d:1a:04:3a:1f:42:96:85:
                    63:2f:33:8b:22:73:80:f4:db:74:07:32:37:2e:0c:
                    fa:68:52:d3:68:4f:6c:9b:7f:f2:56:6b:8a:ba:7e:
                    f0:8a:cd:95:e2:d9:88:7c:2e:6c:02:e1:d4:df:71:
                    e4:d7:00:f2:0f:d5:ed:81:7e:4a:ce:e3:5a:f4:a7:
                    46:cc:ba:07:99:8f:25:81:63:08:5f:9b:72:12:b9:
                    a2:71:4f:9b:93:b1:d2:fb:a0:1f:48:5a:6e:55:80:
                    b8:06:2f:b3:f9:eb:18:d9:17:44:12:af:b3:6d:68:
                    31:1a:4d:83:b7:75:33:0f:59:1e:66:e3:23:86:f5:
                    74:60:7d:7a:f0:e9:79:2d:7f:0d:df:0e:8a:76:57:
                    30:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C2:BB:BB:B5:72:40:54:C0:4C:09:18:40:F0:B2:47:7D:1D:2C:CB
            X509v3 Authority Key Identifier:
                keyid:F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:be:0b:6b:4d:e9:f5:a2:d9:6a:da:ac:e4:9c:4e:e9:c8:0c:
         d0:9c:e6:40:42:4f:f6:65:1f:e6:87:9a:c4:f9:6b:a6:75:3b:
         01:fb:5d:cb:2a:7d:b7:60:0f:dc:2f:b7:20:d5:9e:93:9c:d4:
         44:2d:18:11:69:2c:96:a8:9b:57:60:ce:7b:0d:bd:85:82:d1:
         a1:2d:3e:7b:d7:ac:47:f8:9b:cf:44:b8:61:62:92:1c:10:9e:
         cf:6c:1f:e1:f0:54:3b:4e:0b:04:f6:27:1e:5d:e7:9d:65:2c:
         3e:b9:71:ee:6e:1b:ac:4d:40:20:57:86:9f:99:54:e0:8e:6c:
         53:d0:3b:e7:d5:ec:dc:22:1e:fc:59:ff:3d:79:d8:de:73:61:
         95:53:9a:ec:be:99:5f:f9:31:0d:db:81:9b:68:84:2e:f7:df:
         e7:18:db:72:ea:d0:c5:73:fc:31:35:41:8e:6e:58:e9:cc:94:
         8e:e3:8d:7f:1a:6f:ec:fd:a8:f7:61:2d:f8:ec:42:87:7e:5e:
         69:c6:56:44:be:2b:2f:52:ef:e0:c6:59:ec:93:5d:d8:2f:41:
         6c:2e:98:b1:e6:1d:2b:e7:b7:6d:bd:f3:03:88:0c:0c:c2:e8:
         be:27:6b:c4:3d:82:c2:d1:54:d0:7c:35:6f:6d:df:42:fc:8e:
         be:59:ed:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE3fybsn9ol8POIwweDdvXJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjZhMGY5ODZmMjE5NDVjODBkODMxNTY3YmFmMjk2MjAx
MDdhZGMwHhcNMjYxMDEzMjMwMDQyWhcNMjYxMDE0MjMwMDQyWjAzMTEwLwYDVQQD
EygzMGMyYmJiYmI1NzI0MDU0YzA0YzA5MTg0MGYwYjI0NzdkMWQyY2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15/XlIaSPu8CqkjHmUIB5g419H35
61vBALX7vc5YrGEYK2/DoAaR/68GKGvv/acXmZgXtK5Kg4L+TUeiw3CiUNkVx1hm
P+WM+wsisxNNnO3YWy9eMXb2CWzQcvwkAWmFrf7c/IYY3bIka1crxj28jRoEOh9C
loVjLzOLInOA9Nt0BzI3Lgz6aFLTaE9sm3/yVmuKun7wis2V4tmIfC5sAuHU33Hk
1wDyD9XtgX5KzuNa9KdGzLoHmY8lgWMIX5tyErmicU+bk7HS+6AfSFpuVYC4Bi+z
+esY2RdEEq+zbWgxGk2Dt3UzD1keZuMjhvV0YH168Ol5LX8N3w6KdlcwnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDCu7u1ckBUwEwJGEDwskd9HSzLMB8GA1UdIwQY
MBaAFPJmoPmG8hlFyA2DFWe68pYgEHrcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1hZy1ZYnlHVVhJRFlNVlo3cnlsaUFRZXR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81ODczYzQtYjVlNS00OTdlLTkyNDIt
ZmUwYjIyMjZjZmIzLzEvOG1hZy1ZYnlHVVhJRFlNVlo3cnlsaUFRZXR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS81ODczYzQtYjVlNS00OTdlLTkyNDItZmUwYjIyMjZjZmIz
LzEvOG1hZy1ZYnlHVVhJRFlNVlo3cnlsaUFRZXR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeb4La03p
9aLZatqs5JxO6cgM0JzmQEJP9mUf5oeaxPlrpnU7Aftdyyp9t2AP3C+3INWek5zU
RC0YEWkslqibV2DOew29hYLRoS0+e9esR/ibz0S4YWKSHBCez2wf4fBUO04LBPYn
Hl3nnWUsPrlx7m4brE1AIFeGn5lU4I5sU9A759Xs3CIe/Fn/PXnY3nNhlVOa7L6Z
X/kxDduBm2iELvff5xjbcurQxXP8MTVBjm5Y6cyUjuONfxpv7P2o92Et+OxCh35e
acZWRL4rL1Lv4MZZ7JNd2C9BbC6YseYdK+e3bb3zA4gMDMLovidrxD2CwtFU0Hw1
b23fQvyOvlntlw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 10:04:19 2026 by rpki-client