Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
File:                     CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft (raw, json)
Hash identifier:          qkBd+4R+7lKnFEfVch+Sywfdjq+p1KTbYjmiQlpNpxw=
Subject key identifier:   F8:F9:C5:61:5F:16:BB:E3:24:27:A4:3B:79:29:21:95:90:27:39:93
Authority key identifier: 08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
Certificate issuer:       /CN=08818cbb0f9d1e573773d791138a0122f28bec56
Certificate serial:       01A13D4A1FCD767F25714918EEDE49D0FBFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
Manifest number:          1A42
Signing time:             Thu 15 Oct 2026 02:00:30 +0000
Manifest this update:     Thu 15 Oct 2026 02:00:30 +0000
Manifest next update:     Fri 16 Oct 2026 02:00:30 +0000
Files and hashes:         1: CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl (hash: 5uK4DhCkwnG0y5xVF3MMgbqAgpwG6qZaJEZ5/yO0WGs=)
                          2: _89DnbijBQeF2cskoVpDTtK_5Rg.roa (hash: euBzCkVm4A9E+7P7b5QQPhEnEA1gc5PwXhqwL4l+p88=)
                          3: cuCsDpWQfSwNKoTxDF01haLSsl4.roa (hash: IAbjDvtvpTV67MkNRYgVgrsjV6vVbtlcGTDqIknDuaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:4a:1f:cd:76:7f:25:71:49:18:ee:de:49:d0:fb:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08818cbb0f9d1e573773d791138a0122f28bec56
        Validity
            Not Before: Oct 15 02:00:30 2026 GMT
            Not After : Oct 16 02:00:30 2026 GMT
        Subject: CN=f8f9c5615f16bbe32427a43b7929219590273993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:76:00:96:43:07:5f:e6:8d:ce:b7:a7:63:d5:
                    8b:61:ee:1c:3d:7c:de:6d:47:cc:d8:7b:2c:c5:cf:
                    4d:9e:93:d1:db:ac:22:11:ae:a8:dd:40:40:78:07:
                    e8:b0:eb:df:ab:72:9a:9b:06:02:12:f8:bc:25:89:
                    55:e8:b8:0a:35:3b:ae:81:ba:02:b4:fd:b2:18:e8:
                    21:a8:fc:27:cd:67:0d:da:e6:ad:61:0c:21:41:6d:
                    a4:97:c7:c2:2e:02:b4:a7:38:7b:21:df:18:4e:89:
                    17:a5:e6:c9:db:0c:58:87:66:0a:f4:5d:4e:bd:f2:
                    f9:d0:6a:a2:b7:26:89:dc:11:c0:91:9f:7d:95:db:
                    23:70:7c:7b:ac:c8:ab:f2:22:0d:a8:5b:72:c3:40:
                    7c:89:17:9f:d6:5b:bc:a2:3b:36:dd:54:20:20:4c:
                    31:32:c5:8d:8e:57:2e:0a:f8:cc:0b:ef:63:83:c2:
                    d9:f4:1e:fe:13:5f:33:3a:71:f0:f8:c5:ca:fb:8a:
                    2e:b4:10:1c:c9:a4:13:65:26:90:6f:ea:ea:48:a5:
                    f5:6d:e8:37:a6:f4:20:65:41:30:3e:99:7c:33:a2:
                    66:e7:7e:ab:19:f5:54:0b:56:b6:e9:d0:24:63:ff:
                    75:4a:77:cf:0f:a9:c6:5d:ac:84:51:57:cc:fc:97:
                    7e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F9:C5:61:5F:16:BB:E3:24:27:A4:3B:79:29:21:95:90:27:39:93
            X509v3 Authority Key Identifier:
                keyid:08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:4d:e5:d7:e0:ff:92:45:3d:c5:95:83:ed:1b:74:b9:5d:dd:
         f8:ff:be:b5:ea:0a:91:95:31:94:62:f5:f4:10:9b:de:cb:a1:
         5d:78:c0:c4:e2:5e:3c:de:9f:f7:1e:7c:b9:ab:e1:e9:2d:3b:
         02:22:f0:67:fa:ee:ac:8a:55:d9:7d:16:77:f0:e0:78:35:fe:
         d1:17:c0:64:48:b9:87:91:c8:bd:0f:57:9e:26:6b:7e:86:68:
         25:9e:6a:ed:1b:51:74:cc:08:81:16:48:b5:7e:65:4d:45:48:
         25:4e:25:b1:c2:58:9e:e4:2d:8a:53:56:32:84:2f:dd:a7:1a:
         97:91:05:81:16:0e:f1:c9:50:fe:46:55:83:de:fc:a3:81:1d:
         c1:c3:74:09:ee:e5:13:28:46:b7:71:1f:d4:be:87:46:75:1a:
         62:29:a1:84:0b:73:35:f1:1b:0a:2e:40:d2:82:de:3a:74:68:
         69:0f:40:11:f5:51:fb:8c:c7:23:fd:2f:c4:3f:7e:53:d5:d9:
         3b:e9:e0:ee:d5:15:7b:d4:20:8b:81:9a:18:fb:49:bb:17:21:
         a4:bf:91:4d:8e:3a:d2:72:1d:4b:34:42:1f:43:55:ce:17:81:
         9a:26:1f:1a:b9:3f:0b:3b:93:76:da:16:f1:6f:c4:48:85:4d:
         d4:7b:4d:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9Sh/Ndn8lcUkY7t5J0Pv+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODE4Y2JiMGY5ZDFlNTczNzczZDc5MTEzOGEwMTIyZjI4
YmVjNTYwHhcNMjYxMDE1MDIwMDMwWhcNMjYxMDE2MDIwMDMwWjAzMTEwLwYDVQQD
EyhmOGY5YzU2MTVmMTZiYmUzMjQyN2E0M2I3OTI5MjE5NTkwMjczOTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nYAlkMHX+aNzrenY9WLYe4cPXze
bUfM2Hssxc9NnpPR26wiEa6o3UBAeAfosOvfq3KamwYCEvi8JYlV6LgKNTuugboC
tP2yGOghqPwnzWcN2uatYQwhQW2kl8fCLgK0pzh7Id8YTokXpebJ2wxYh2YK9F1O
vfL50GqityaJ3BHAkZ99ldsjcHx7rMir8iINqFtyw0B8iRef1lu8ojs23VQgIEwx
MsWNjlcuCvjMC+9jg8LZ9B7+E18zOnHw+MXK+4outBAcyaQTZSaQb+rqSKX1beg3
pvQgZUEwPpl8M6Jm536rGfVUC1a26dAkY/91SnfPD6nGXayEUVfM/Jd+SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPj5xWFfFrvjJCekO3kpIZWQJzmTMB8GA1UdIwQY
MBaAFAiBjLsPnR5XN3PXkROKASLyi+xWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lHTXV3LWRIbGMzYzllUkU0b0JJdktMN0ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yZTA1MzYtNGNhMi00YWZlLTgzZDYt
MzM2ZTg3NGYzZDg3LzEvQ0lHTXV3LWRIbGMzYzllUkU0b0JJdktMN0ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8yZTA1MzYtNGNhMi00YWZlLTgzZDYtMzM2ZTg3NGYzZDg3
LzEvQ0lHTXV3LWRIbGMzYzllUkU0b0JJdktMN0ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANE3l1+D/
kkU9xZWD7Rt0uV3d+P++teoKkZUxlGL19BCb3suhXXjAxOJePN6f9x58uavh6S07
AiLwZ/rurIpV2X0Wd/DgeDX+0RfAZEi5h5HIvQ9XniZrfoZoJZ5q7RtRdMwIgRZI
tX5lTUVIJU4lscJYnuQtilNWMoQv3acal5EFgRYO8clQ/kZVg978o4EdwcN0Ce7l
EyhGt3Ef1L6HRnUaYimhhAtzNfEbCi5A0oLeOnRoaQ9AEfVR+4zHI/0vxD9+U9XZ
O+ng7tUVe9Qgi4GaGPtJuxchpL+RTY460nIdSzRCH0NVzheBmiYfGrk/CzuTdtoW
8W/ESIVN1HtNSw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:23 2026 by rpki-client