Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
File:                     8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft (raw, json)
Hash identifier:          w/LWyMgUq6AmpKXSF17aPeRZDu2scffEOtSBGJHNe+8=
Subject key identifier:   B0:95:72:45:47:64:A5:CB:88:E1:06:BD:48:76:82:C4:9D:92:0F:DB
Authority key identifier: F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80
Certificate issuer:       /CN=f03774a276214b86e0a5b4fa7721bdb0e322e080
Certificate serial:       01A13E25D122D88F726F2AA67FC884E5BE2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
Manifest number:          0F84
Signing time:             Thu 15 Oct 2026 06:00:28 +0000
Manifest this update:     Thu 15 Oct 2026 06:00:28 +0000
Manifest next update:     Fri 16 Oct 2026 06:00:28 +0000
Files and hashes:         1: 8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl (hash: J37XnHrmMcqwLHqBG3Lm5Nm4kT5foy6FfqRq06I4KH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:25:d1:22:d8:8f:72:6f:2a:a6:7f:c8:84:e5:be:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03774a276214b86e0a5b4fa7721bdb0e322e080
        Validity
            Not Before: Oct 15 06:00:28 2026 GMT
            Not After : Oct 16 06:00:28 2026 GMT
        Subject: CN=b09572454764a5cb88e106bd487682c49d920fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e0:16:37:ce:f1:b9:f3:fd:e9:38:35:41:c3:
                    30:63:be:71:2c:16:7d:13:7d:03:09:4d:51:fd:d7:
                    48:15:60:ff:9f:08:63:da:8d:50:4a:0e:05:b4:7a:
                    b5:3d:fe:a8:b2:b3:eb:ae:a0:dc:8d:c4:fb:85:92:
                    41:d6:af:c4:c6:45:ab:a0:7a:d6:d0:8f:3b:66:01:
                    3e:06:eb:e2:ca:17:dc:c7:25:53:39:78:3f:4b:6b:
                    81:ad:1d:c2:4f:99:46:c0:df:bd:bd:72:60:bb:f3:
                    ee:68:b2:96:57:57:7c:dd:4b:d7:64:35:93:0d:24:
                    94:71:bc:02:ed:3b:7a:26:15:34:e5:a4:2f:bb:6f:
                    a5:36:aa:6d:a4:52:bc:2e:86:31:c6:22:b9:7e:6c:
                    ee:6c:1c:51:c1:49:ae:7e:aa:b6:44:42:98:24:e7:
                    e5:31:c3:9d:f5:e1:63:20:28:92:9d:e1:3b:25:9e:
                    56:b6:44:33:b5:16:d8:a8:60:85:14:28:02:db:4d:
                    9d:14:87:36:21:bf:6d:91:03:33:af:9f:d2:cb:4b:
                    fe:05:18:0d:48:32:dd:fb:7f:cc:c7:b1:49:40:48:
                    d6:b4:6e:21:13:35:00:be:2d:c4:cd:8b:c6:bc:8d:
                    d0:4a:74:91:21:59:db:26:5c:ec:9d:e3:c7:92:e1:
                    cc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:95:72:45:47:64:A5:CB:88:E1:06:BD:48:76:82:C4:9D:92:0F:DB
            X509v3 Authority Key Identifier:
                keyid:F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:93:41:f7:79:0a:51:1d:4d:a2:60:60:4d:cf:fe:7c:07:47:
         17:9c:3e:32:f1:e1:49:3b:12:25:2c:2a:55:b2:23:81:9f:94:
         33:fc:2b:a5:72:25:3b:6d:31:b6:7e:89:4a:c1:a7:cb:a8:12:
         2a:97:79:48:67:69:4b:1a:83:8a:ae:59:5a:22:f7:09:a5:10:
         d0:be:84:a9:75:a7:39:6d:10:2f:af:73:fa:85:66:64:e6:9f:
         b7:ab:32:25:45:2e:d0:18:01:ca:eb:75:9c:5d:a3:ae:5a:a4:
         78:f2:29:a4:05:5a:a4:62:80:1d:d1:27:9a:26:00:9d:db:f6:
         1f:66:7a:da:4b:23:30:59:ba:6e:ec:5e:f9:9f:45:75:19:8e:
         ee:4a:8f:99:2e:c3:68:f3:79:09:28:79:bb:db:83:f7:99:cf:
         ee:3c:77:5f:4d:fc:79:00:92:42:76:b7:9c:51:07:4a:d1:a8:
         81:2b:fa:5b:b9:2c:27:d7:8d:3c:8d:1c:2a:6f:97:7a:ca:7d:
         26:20:78:3b:b2:5f:43:fe:5b:40:13:75:e2:da:50:fb:0e:f8:
         eb:8e:ad:fa:f9:f8:b1:67:a4:59:9c:fa:37:8d:e2:47:ad:85:
         aa:7f:cd:4a:95:d3:66:21:89:68:64:7d:9e:b4:72:4f:66:32:
         ef:49:a4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:37 2026 by rpki-client