Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
File:                     Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json)
Hash identifier:          iUaDOrd1PpLjzEqp/dlzWEprkzh0gpF31BuGa31zJVg=
Subject key identifier:   3A:47:34:AA:E6:5D:BA:05:54:8E:29:E4:55:F1:6C:04:D6:79:C8:31
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Certificate issuer:       /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial:       01A08D8D5E4E8CC6A4AAF5D28E644C72EE73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
Manifest number:          0F8E
Signing time:             Thu 10 Sep 2026 23:00:47 +0000
Manifest this update:     Thu 10 Sep 2026 23:00:47 +0000
Manifest next update:     Fri 11 Sep 2026 23:00:47 +0000
Files and hashes:         1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: xDkeDPEDVTuUXT/t81UYDks19w/chBVTqpkC7qR4vJU=)
                          2: b6SrHt5Rox7Gz0mFIlCgOGxY0-c.roa (hash: HGRxKRl+EVaZgrGClx+TSy5HdfcfRc78fy6SCMHEA/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:8d:5e:4e:8c:c6:a4:aa:f5:d2:8e:64:4c:72:ee:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
        Validity
            Not Before: Sep 10 23:00:47 2026 GMT
            Not After : Sep 11 23:00:47 2026 GMT
        Subject: CN=3a4734aae65dba05548e29e455f16c04d679c831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b7:a2:12:4a:43:8e:0a:61:19:f9:c5:4d:2b:
                    a8:b9:53:9e:cc:93:da:ad:3a:f8:b9:f4:71:76:fb:
                    0c:8b:34:84:22:28:b8:61:96:cf:2f:b9:01:2f:1f:
                    96:e8:9f:4a:1d:f8:54:89:27:1d:58:0d:38:1e:e4:
                    36:8c:6e:87:ab:1b:62:8b:98:88:87:35:4b:4d:b2:
                    95:f5:67:02:6c:5e:73:6d:a9:72:a3:79:5f:f9:71:
                    7e:bd:f7:f4:bc:51:2e:96:0a:db:b6:0a:ce:56:8e:
                    8c:60:03:48:60:6c:a9:0e:b0:1a:02:c3:11:45:e4:
                    ff:0a:7d:ca:2b:b1:34:6a:ae:1d:4a:85:3c:9a:df:
                    0e:73:a2:14:90:bd:cc:9d:fc:a7:5a:d2:32:10:de:
                    25:71:76:d1:54:42:f5:06:f3:c9:7a:8b:bc:16:97:
                    ee:be:8b:1e:c5:99:fe:84:b0:63:4a:15:e4:ef:c5:
                    0d:0e:e7:09:85:a9:35:e3:bb:fe:6b:35:07:ae:dd:
                    7f:ff:33:e5:90:7f:8f:b3:bf:81:dd:c1:4e:8f:2e:
                    be:63:8b:a7:c7:19:b1:f2:12:a1:39:02:13:c5:d1:
                    64:2a:5e:5f:81:5b:86:19:ce:83:ff:bd:d5:ef:3e:
                    27:4d:97:1e:10:61:2c:f6:dc:e0:2c:cb:ff:53:ab:
                    93:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:47:34:AA:E6:5D:BA:05:54:8E:29:E4:55:F1:6C:04:D6:79:C8:31
            X509v3 Authority Key Identifier:
                keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:ba:ab:d8:a9:fb:20:92:8c:91:a8:e1:fc:17:ea:f0:c3:8b:
         c1:4f:14:0a:6a:ff:3e:da:2b:5f:a4:dd:6d:91:3f:81:86:4a:
         8a:11:20:ec:d3:d4:a3:3f:6d:68:41:dd:bb:3d:79:f4:74:eb:
         e6:d6:c4:c4:4f:37:13:90:95:c9:5d:5e:e5:28:42:15:54:f6:
         64:3a:13:ab:de:b4:95:33:60:dd:1b:f4:70:43:e0:c5:64:4e:
         ea:da:38:f2:a8:82:97:cb:16:2e:6c:d4:fb:e6:55:01:59:22:
         38:2f:2d:77:0b:99:01:36:5b:80:da:7f:73:e2:24:65:b3:fb:
         5a:de:bc:c2:ef:59:12:df:f1:17:13:fe:af:1c:b4:3e:80:86:
         db:c8:43:30:82:d0:f1:c2:96:24:c1:f7:ef:22:3f:83:16:86:
         ec:0f:6b:25:01:e0:97:32:6a:9a:00:50:a5:4d:6a:04:12:a6:
         f3:ae:27:76:1a:e3:61:e5:a0:3c:fc:18:32:c1:a4:20:6d:07:
         16:04:be:a3:17:38:9f:3a:97:32:92:13:89:bd:91:c5:1c:a0:
         33:4a:10:b6:f6:46:c3:6f:a1:ce:e3:cc:d5:a1:83:cf:1d:eb:
         23:a6:98:64:08:5a:c3:8c:f5:a6:8b:81:0d:46:d8:22:5a:ed:
         d0:7f:41:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:31:28 2026 by rpki-client