Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.mft
File:                     8nlONzkr4v_oF5XX0WHwMwVqBs8.mft (raw, json)
Hash identifier:          NlWuJBdPrDyk1gZmH42CZBcrMhph5MpwGrrTGC4QhNE=
Subject key identifier:   63:EA:01:37:6E:52:66:66:94:D9:C9:BA:D4:A6:25:FB:43:2A:4F:D8
Authority key identifier: F2:79:4E:37:39:2B:E2:FF:E8:17:95:D7:D1:61:F0:33:05:6A:06:CF
Certificate issuer:       /CN=f2794e37392be2ffe81795d7d161f033056a06cf
Certificate serial:       01A06E027CC22EE92756858557ECFB297D59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8nlONzkr4v_oF5XX0WHwMwVqBs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.mft
Manifest number:          9D
Signing time:             Fri 04 Sep 2026 20:00:51 +0000
Manifest this update:     Fri 04 Sep 2026 20:00:51 +0000
Manifest next update:     Sat 05 Sep 2026 20:00:51 +0000
Files and hashes:         1: 8nlONzkr4v_oF5XX0WHwMwVqBs8.crl (hash: plpDu3to9g4KEM3x96QKGJv10xa56kZZ7cxZnCzTKFc=)
                          2: g1hZM_gA4VG6GdoQudkyKC9Iy5o.roa (hash: jJPVFAYeWIaOyslOEJqm1eIOt5Tzn5vmJYRqVTS9b6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8nlONzkr4v_oF5XX0WHwMwVqBs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:02:7c:c2:2e:e9:27:56:85:85:57:ec:fb:29:7d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2794e37392be2ffe81795d7d161f033056a06cf
        Validity
            Not Before: Sep  4 20:00:51 2026 GMT
            Not After : Sep  5 20:00:51 2026 GMT
        Subject: CN=63ea01376e52666694d9c9bad4a625fb432a4fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:44:47:fd:10:19:3f:0f:24:2f:89:fd:b2:9a:
                    d5:4e:c8:ca:56:69:4e:84:ed:63:0d:8d:b4:74:3e:
                    11:4f:db:1f:c4:64:7e:4d:3c:c6:30:bf:51:20:19:
                    71:8b:a0:1f:59:30:af:46:44:61:28:0c:ab:d4:f8:
                    41:84:5b:9a:55:f4:b7:ca:78:85:56:02:21:c1:d6:
                    16:98:f5:c2:b1:46:9a:a2:3e:f2:90:8e:18:35:90:
                    79:9b:fc:f4:b2:8b:91:ba:30:b0:ed:a7:29:ff:60:
                    ad:9d:1a:93:d3:a8:3f:e9:97:d7:fd:34:2d:ab:8d:
                    72:d6:7b:12:c0:7a:6c:98:c7:48:23:87:15:0e:62:
                    d8:8c:e6:00:f2:94:c1:ef:6c:3e:66:05:03:02:70:
                    a8:5a:2c:c8:68:b2:24:8a:8d:29:f5:0d:a8:1d:c5:
                    28:9a:19:69:8a:f4:72:1f:f7:06:ba:c1:32:dd:c4:
                    b1:d9:20:9e:29:a5:53:df:cc:6f:e0:3e:a8:50:2a:
                    fd:04:00:fa:ae:2c:7c:b9:5b:77:22:f6:07:94:c6:
                    a1:47:3d:08:0a:9c:cf:10:95:d0:2f:3e:a2:8f:12:
                    41:8d:cd:84:fc:05:94:5c:a3:db:dc:c4:bd:b8:f7:
                    09:16:90:c6:7b:0c:28:6e:3a:64:bc:5a:0a:88:b9:
                    b3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EA:01:37:6E:52:66:66:94:D9:C9:BA:D4:A6:25:FB:43:2A:4F:D8
            X509v3 Authority Key Identifier:
                keyid:F2:79:4E:37:39:2B:E2:FF:E8:17:95:D7:D1:61:F0:33:05:6A:06:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nlONzkr4v_oF5XX0WHwMwVqBs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:2a:60:67:66:d1:77:c3:80:13:db:96:c3:8c:87:cd:f9:e2:
         90:49:01:9e:03:e0:92:2b:4b:1a:fa:dc:5a:36:a5:7e:11:a4:
         3c:a4:bf:ae:cc:24:d6:ed:90:e3:1b:50:0a:1a:7a:f3:50:e2:
         9d:42:f5:05:47:f1:ea:2f:2f:71:23:d2:8f:21:1f:53:05:42:
         2c:15:cc:2f:af:d2:7f:d2:99:e6:bc:51:7d:db:88:45:aa:5b:
         06:d1:81:ec:c0:cd:69:23:9c:e4:33:08:0e:54:c5:b7:39:3f:
         b4:82:e0:4e:7a:6e:df:50:b3:39:bd:cd:d2:00:fc:37:82:ae:
         80:62:b6:c9:d7:da:5c:fe:23:61:c6:2f:fd:e9:cc:76:41:d0:
         4b:f5:1b:4a:88:8e:c1:9f:bc:aa:d6:8b:e1:55:a6:bb:1a:3c:
         e9:1d:e3:34:a1:83:ab:3f:57:50:7f:b1:9f:ab:d8:c8:e4:dd:
         b0:ae:00:9d:ca:62:df:cb:29:3a:24:3d:c7:69:02:99:63:0e:
         68:08:8a:ab:3c:05:58:94:a7:d2:62:cd:fb:a7:33:5f:ea:f1:
         40:2c:6c:18:76:6b:af:57:20:2a:a5:ab:eb:83:50:2b:5d:1c:
         24:96:45:52:19:4d:a9:ee:2c:f9:9c:cb:9b:44:31:66:c9:41:
         e0:9a:c9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:37:04 2026 by rpki-client