Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
File:                     isRzGj7jlC0ljQZjVwuJTo4akjM.mft (raw, json)
Hash identifier:          NzXsvN7PGQHRRjSpqalcNmjWJI0bVsM55eugfCNwSxE=
Subject key identifier:   D5:3F:85:66:71:8C:A4:B3:9D:40:98:EB:12:3A:5F:10:E3:F6:55:79
Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
Certificate issuer:       /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Certificate serial:       01A181503206765C0988D18CF505FA99FF53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
Manifest number:          0DF2
Signing time:             Wed 28 Oct 2026 07:01:18 +0000
Manifest this update:     Wed 28 Oct 2026 07:01:18 +0000
Manifest next update:     Thu 29 Oct 2026 07:01:18 +0000
Files and hashes:         1: isRzGj7jlC0ljQZjVwuJTo4akjM.crl (hash: HxR0cApOvMVHcPbWpBMODpDpS8vwS9Bu0L1L3F9Cnus=)
                          2: wBlQV8roNYOAgb5G0Nj_HH5ZUbY.roa (hash: KZkndcTrNEzitWfaZ4uzKEh3xzfx2DJf1eZMDvFa5Fg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:50:32:06:76:5c:09:88:d1:8c:f5:05:fa:99:ff:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
        Validity
            Not Before: Oct 28 07:01:18 2026 GMT
            Not After : Oct 29 07:01:18 2026 GMT
        Subject: CN=d53f8566718ca4b39d4098eb123a5f10e3f65579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9b:75:90:77:38:0e:af:fb:a4:4f:88:11:3c:
                    6c:47:55:3a:bc:4c:10:58:af:7d:0c:2b:67:f7:a0:
                    af:96:91:fe:51:55:0e:d8:1e:40:cc:c3:3a:0a:1c:
                    15:47:0f:4b:74:7b:76:9a:4d:e8:ce:7c:92:d5:db:
                    ad:53:6f:30:97:c6:25:ba:c2:85:72:11:3e:4b:02:
                    6d:75:c9:87:b8:60:26:f9:8b:e8:da:75:34:33:ef:
                    0c:6d:08:42:38:a7:b8:8f:4f:1a:58:56:ca:73:0c:
                    7a:33:26:03:1a:8c:1f:f5:13:7b:a0:c4:5c:e8:3b:
                    28:82:52:f3:3b:e0:b4:f5:3f:d9:45:c9:53:08:67:
                    e3:17:69:02:e3:e1:a2:f5:57:ca:93:d2:98:00:8e:
                    93:ef:50:9b:4c:d2:9f:49:f6:80:9b:ab:34:51:2d:
                    1a:8a:50:e7:49:0a:b1:f8:f8:ec:da:10:f1:8f:49:
                    63:a2:d2:c3:f8:a1:62:9d:49:fb:e2:a0:22:35:f7:
                    08:11:9a:ed:0e:b7:b0:a6:05:a7:8a:37:f3:81:f5:
                    88:34:8d:f0:e8:4b:a2:4f:75:38:d1:dd:8b:c5:e0:
                    24:61:5b:54:3e:22:9d:05:f7:45:71:45:04:38:2e:
                    b5:0e:7d:01:12:bb:b1:83:38:77:7c:80:53:b9:e4:
                    de:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3F:85:66:71:8C:A4:B3:9D:40:98:EB:12:3A:5F:10:E3:F6:55:79
            X509v3 Authority Key Identifier:
                keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:c7:48:90:e2:13:b2:a3:b8:02:df:4b:7a:46:ef:ba:2c:e2:
         e9:a1:cb:6f:23:ae:49:49:31:46:3e:26:b1:56:34:dc:5f:55:
         6d:03:ed:d0:7a:8c:9e:d5:d0:83:66:e8:71:33:af:95:6d:19:
         19:81:20:23:fc:e6:b8:d6:71:a2:74:62:e7:81:31:93:6c:1e:
         5b:70:87:0d:d7:1e:72:f9:85:79:6f:a0:c8:a6:5c:49:ca:11:
         cc:70:37:f5:73:1b:2d:9d:60:1d:67:3d:41:de:71:cb:e9:14:
         34:bf:f4:e0:42:5d:95:ff:b7:f1:71:a5:1b:b8:ce:82:b4:36:
         52:86:8b:a3:cb:3c:a3:be:43:69:c3:1e:5b:18:c0:2d:3c:28:
         57:27:78:56:92:16:a4:cd:d6:d6:cf:07:ef:11:66:80:a2:a7:
         5d:22:de:41:86:0e:a5:af:2d:49:34:8b:dd:19:26:ec:7b:c4:
         84:c3:d4:2e:c6:bd:10:bf:c0:a7:19:37:23:90:f3:09:ec:bd:
         6d:ed:96:35:10:5a:2f:a4:02:e2:46:1b:33:df:68:ab:ca:82:
         4c:a1:84:fa:63:ff:79:2a:c2:9c:9b:20:70:45:54:bb:a1:0b:
         8b:64:bd:07:f9:2c:70:7e:99:2c:72:79:be:41:c9:d7:39:97:
         17:8d:24:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:09:40 2026 by rpki-client