Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
File:                     8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft (raw, json)
Hash identifier:          Z9rRvWJZxfWe208eR5V7uKutNevMCW/YWBL3vPDfgWY=
Subject key identifier:   C4:7D:04:37:8A:28:12:A3:67:7D:51:C5:2D:7B:D2:79:7A:4C:F8:1C
Authority key identifier: F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
Certificate issuer:       /CN=f0a95b78b0576501278efd7e020269ba1f06d386
Certificate serial:       01A143848F0EDFD856D9269544276080781C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
Manifest number:          107D
Signing time:             Fri 16 Oct 2026 07:02:03 +0000
Manifest this update:     Fri 16 Oct 2026 07:02:03 +0000
Manifest next update:     Sat 17 Oct 2026 07:02:03 +0000
Files and hashes:         1: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl (hash: 2FmZkCtVCxJynVaRN/lZ/p1TU0vGs34SOJNyxt9QVd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 07:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:43:84:8f:0e:df:d8:56:d9:26:95:44:27:60:80:78:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0a95b78b0576501278efd7e020269ba1f06d386
        Validity
            Not Before: Oct 16 07:02:03 2026 GMT
            Not After : Oct 17 07:02:03 2026 GMT
        Subject: CN=c47d04378a2812a3677d51c52d7bd2797a4cf81c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:71:82:ae:34:ea:3d:1c:65:b9:de:e0:2e:56:
                    4a:f5:4b:33:f5:b1:40:a3:e7:a4:f5:66:26:23:21:
                    40:73:89:22:c1:67:2c:3d:ff:b4:a4:18:33:f3:15:
                    d3:91:fa:60:ca:21:d7:5f:1a:f1:72:68:48:b7:16:
                    10:18:af:4c:f5:1a:9a:7b:32:00:6a:06:62:62:fa:
                    6d:bc:c0:6c:c6:b5:cb:f3:8a:b1:db:9b:5c:14:7e:
                    9b:7b:3f:19:bb:ab:8a:de:d3:49:91:91:b2:5f:d1:
                    8b:8d:3c:4f:6c:b6:a9:7d:18:ad:d1:a1:53:99:ac:
                    24:c1:73:c9:7c:bd:26:e1:e2:ae:66:3f:60:fc:84:
                    68:0a:c3:04:5c:4e:50:b3:e8:53:1f:56:11:93:e3:
                    88:6a:eb:7e:59:dc:88:37:c5:3f:0a:3d:3c:60:8a:
                    9e:cb:13:7b:56:98:40:7c:f5:16:66:20:94:3f:61:
                    ad:1b:26:b9:e4:ad:70:10:d4:96:ed:6b:a2:27:fb:
                    40:c8:9b:86:7c:e2:ab:e6:55:80:82:20:9f:44:f8:
                    82:d4:da:87:47:37:99:18:fd:ba:31:61:a7:2e:70:
                    b5:0e:f8:90:ce:5c:2a:99:50:7e:c2:e4:7a:6f:c8:
                    3d:b8:2f:ff:9a:b2:6f:92:b6:48:b7:32:a9:5f:d2:
                    fb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7D:04:37:8A:28:12:A3:67:7D:51:C5:2D:7B:D2:79:7A:4C:F8:1C
            X509v3 Authority Key Identifier:
                keyid:F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:05:00:45:49:57:30:e9:3d:4f:c2:5a:ef:94:38:72:71:46:
         aa:61:bd:1e:95:57:26:04:d2:50:be:95:85:76:1d:28:a0:e7:
         d3:c1:30:c1:64:d4:9b:e8:9b:ed:e1:e6:ed:af:1d:8f:67:77:
         44:6e:6e:49:cf:35:55:56:49:c8:4e:69:1f:1a:39:ee:89:ba:
         b7:d4:eb:04:ce:e3:22:da:2b:8f:dc:08:fb:47:e4:60:52:8f:
         0f:cf:37:e4:02:fa:34:49:9e:a3:a4:9a:e9:78:77:30:0b:80:
         d1:bc:67:4d:5d:e4:9c:cc:d6:61:06:dc:70:e2:fa:ab:ce:58:
         f8:3d:c6:f4:1a:cc:4d:83:21:7e:44:0a:72:bb:31:52:cb:8f:
         96:04:76:6c:ee:0e:98:59:23:9d:8b:69:60:d2:a5:ac:8f:65:
         dd:50:68:1b:43:75:c6:60:7a:ea:b5:a8:11:f8:d9:9a:67:93:
         68:b3:dd:8b:ce:e9:c6:67:52:e7:e7:4e:6a:e3:f9:3f:67:db:
         6b:14:21:29:a1:c6:d2:5d:a8:f9:d3:d0:f2:80:32:bf:5f:9a:
         d2:6b:4d:84:da:a8:ea:7a:0a:78:61:52:03:e4:fd:31:89:9d:
         38:99:98:9c:47:ca:06:d4:c6:3c:60:a2:97:a9:e7:b5:6d:ed:
         bd:bf:0e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 18:25:22 2026 by rpki-client