Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
File:                     8BGVyAze5CsGiNuOk6aLRZuFjm4.mft (raw, json)
Hash identifier:          fBSjL2lBKP6rmjzR5rkjFlph0A6pNBqmOfmf+XRDiSU=
Subject key identifier:   1E:A0:57:48:BE:6E:B1:93:6F:22:12:0F:97:62:C2:A5:C9:3D:AD:97
Authority key identifier: F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
Certificate issuer:       /CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Certificate serial:       01A106C9E82138D06A05A2E5A2EF60640CC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
Manifest number:          0872
Signing time:             Sun 04 Oct 2026 12:00:57 +0000
Manifest this update:     Sun 04 Oct 2026 12:00:57 +0000
Manifest next update:     Mon 05 Oct 2026 12:00:57 +0000
Files and hashes:         1: 8BGVyAze5CsGiNuOk6aLRZuFjm4.crl (hash: Lc8h8ivej8ZPOoD7XQlaaENLR2v4ZnvWeAteiuttOhk=)
                          2: Ai9LL1nBu21OkTYlkY_Pp3wMYA0.asa (hash: CLua6BXr1setbPhQlltRXBVmyAQ//kTTQ391+KxY/Yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:c9:e8:21:38:d0:6a:05:a2:e5:a2:ef:60:64:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f01195c80cdee42b0688db8e93a68b459b858e6e
        Validity
            Not Before: Oct  4 12:00:57 2026 GMT
            Not After : Oct  5 12:00:57 2026 GMT
        Subject: CN=1ea05748be6eb1936f22120f9762c2a5c93dad97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d8:11:be:6e:fa:23:28:0f:71:47:29:90:ab:
                    fd:1e:af:f6:c4:8a:d7:9a:f6:9f:d0:a9:04:10:70:
                    cb:30:b6:58:45:6b:35:3d:b3:56:1e:ca:7d:e2:2d:
                    cf:b2:35:d5:5d:a5:ed:08:87:75:28:be:ab:f5:f8:
                    44:83:56:37:fa:71:8d:19:7c:b5:9f:7d:91:68:a4:
                    05:b6:37:cc:9c:79:65:11:46:14:6a:a3:74:73:81:
                    43:1f:cf:b4:b1:e1:28:54:c5:42:72:66:b0:7e:15:
                    31:22:1c:bd:84:0f:19:25:91:10:c7:33:cb:45:a5:
                    e5:42:57:b2:78:b6:55:88:2a:64:59:5a:9b:30:31:
                    19:53:f2:ea:51:d5:96:92:7e:05:9d:82:bf:13:15:
                    b4:ca:97:03:1e:22:24:1f:13:75:71:c1:34:4a:35:
                    46:4c:aa:02:bb:92:2d:48:1f:ed:24:6b:56:f9:fc:
                    07:24:bd:e3:4c:6e:6f:a3:69:f9:dc:f4:32:f3:b7:
                    94:71:2d:07:15:87:46:7c:d8:b7:69:57:a3:e4:f2:
                    47:ef:36:cd:af:b5:a5:17:fe:bd:0b:58:bf:3b:94:
                    ea:a6:39:ee:3c:39:28:04:ec:93:79:dc:56:9c:b1:
                    b0:44:2c:94:cb:95:2d:7c:d4:2d:06:74:9f:34:59:
                    fd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A0:57:48:BE:6E:B1:93:6F:22:12:0F:97:62:C2:A5:C9:3D:AD:97
            X509v3 Authority Key Identifier:
                keyid:F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e8:d4:e9:c4:1e:50:85:dc:94:bc:e8:e5:8c:2b:b9:d5:12:
         66:90:d2:50:02:7d:5b:f4:dd:01:9e:72:66:b8:df:fe:b7:a3:
         d1:78:37:f5:d7:80:1a:26:1b:d3:75:cb:50:d0:d0:14:44:d5:
         90:ba:04:31:85:1b:a3:a0:b1:db:ce:0f:e9:1f:cd:34:1a:3c:
         bd:37:ae:49:4b:fd:12:58:57:a7:05:3f:f6:01:2b:10:a4:e2:
         04:b9:21:84:d0:6e:36:98:a1:16:ab:fd:e2:06:3e:1a:22:14:
         fb:28:6a:e3:fd:96:e2:a9:21:ae:27:62:13:3e:39:a7:62:f1:
         f1:38:39:e8:ef:33:3c:94:0b:ef:65:56:6a:0d:b4:09:9f:6a:
         6d:80:52:22:e6:65:d7:e1:ef:73:7d:2c:33:42:1d:05:4d:71:
         6f:f3:32:ec:96:07:97:1b:da:f5:6d:ab:ed:78:2a:1a:a6:b8:
         f0:74:23:6f:2f:c2:68:0e:4e:a4:ad:e8:17:e2:ad:57:5d:9c:
         2c:63:44:33:0e:43:bf:eb:44:a3:65:35:70:c9:29:ce:22:48:
         1c:09:df:39:69:fd:9e:78:ed:b1:2a:30:d6:05:1c:57:1f:7a:
         02:e4:ed:92:bf:f8:0b:01:a5:4d:9a:0e:c0:c2:af:86:c7:48:
         48:9a:0d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:40:55 2026 by rpki-client