Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          rmZdJoRNSl15nhBxMfdmExL3PSxmAJMWot7Lk1OJD88=
Subject key identifier:   9D:23:FF:E7:25:7D:2B:1E:FE:75:89:47:AB:D4:78:17:B1:94:ED:34
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       01A1DDCBAE67AB4FE26E2204168A6EA90148
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          1B1C
Signing time:             Sun 15 Nov 2026 06:01:15 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:15 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:15 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: E+WPCEOHutJGA3wnajUgB5XmLoquk4+cTUpppm/a8DA=)
                          2: BKe8hXY0cgAAxewE2Mm54POT-xc.asa (hash: U+5d+Blgx+OK65BFkGC90iZKqkHz+P5w31SAHBDGPvw=)
                          3: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          4: JIW91ppQFrOACtjn3f9ZCp12wgg.asa (hash: C/yrhKJB+QdjcqMNi3etoGUrT4jwaUYzueXmwVYLCS8=)
                          5: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
                          6: wLczrU7td0HrS3atEZQ8nyJ2d6I.roa (hash: 8QcBEnYdExUuHoivfoWFKof5ZQw5mkFiEuUs2hlbHug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cb:ae:67:ab:4f:e2:6e:22:04:16:8a:6e:a9:01:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Nov 15 06:01:15 2026 GMT
            Not After : Nov 16 06:01:15 2026 GMT
        Subject: CN=9d23ffe7257d2b1efe758947abd47817b194ed34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:02:14:97:d2:4e:52:9b:73:36:36:c3:89:37:
                    8f:32:b4:dc:56:ba:65:0d:2f:a9:78:d8:4c:54:ab:
                    0c:f5:b1:5a:f9:1d:99:e0:d8:41:1a:94:9b:ff:18:
                    70:e6:d5:bc:63:c6:8a:46:26:58:f0:db:17:b5:18:
                    16:43:09:55:b4:8a:85:a0:a6:9d:75:e3:44:32:eb:
                    64:a2:7f:16:86:ad:f6:d7:cc:f4:0d:ee:9b:4a:75:
                    a5:2f:50:f0:d3:8b:4a:79:82:f8:5f:d0:dd:6d:11:
                    43:ee:6e:c4:f1:a7:48:e6:14:9c:fa:1d:35:33:4f:
                    a5:85:40:bb:89:e3:71:56:3c:b9:4d:69:fc:71:ec:
                    68:f4:dc:55:c1:91:19:0f:2e:bb:43:86:96:b4:55:
                    5e:29:a1:81:0b:16:fb:e8:d6:1d:fc:f5:59:34:16:
                    b4:39:74:dd:10:3b:d7:fa:78:72:67:12:f1:cb:34:
                    33:05:7b:27:42:3c:f6:4f:3e:cb:95:ba:da:f8:73:
                    e8:39:63:f8:ef:8e:1b:33:25:75:88:f1:d7:27:13:
                    c5:dc:fa:92:0f:3c:17:30:71:66:2a:e5:cd:79:1c:
                    5c:8c:23:5a:4d:dd:f6:44:d6:58:3c:12:75:56:07:
                    6a:cb:50:64:5b:0b:61:09:c2:21:e0:e9:52:70:76:
                    9c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:23:FF:E7:25:7D:2B:1E:FE:75:89:47:AB:D4:78:17:B1:94:ED:34
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d2:d2:a7:e7:f1:57:f0:4c:bc:ef:18:4f:10:12:ec:36:25:
         93:b6:ee:f5:2e:74:1e:1c:99:05:47:46:e2:e2:fe:78:2e:56:
         b9:14:46:82:39:7d:8e:a3:7d:c6:65:69:6a:49:26:76:22:32:
         d0:6c:b2:b2:f4:66:be:96:9c:ac:6a:cc:70:eb:c5:c3:5e:f7:
         b4:c0:41:75:7a:26:46:46:85:75:a1:1f:d2:27:ab:16:e6:3f:
         fd:55:a8:03:e7:6b:d8:4d:89:7c:d5:db:5c:8d:23:f4:6a:a7:
         d2:0a:12:07:84:70:94:31:e3:51:9c:5b:43:c0:0b:3b:53:53:
         3c:f4:6e:7c:2e:c7:6c:2d:4b:40:3b:91:23:40:1d:e7:45:2a:
         c8:f5:e7:b8:6b:b1:d1:a7:3b:40:3b:2a:84:92:39:61:37:3c:
         c2:4d:4e:c6:d6:c5:c6:36:0c:08:24:fd:55:5f:f2:21:3d:54:
         c0:90:d1:34:f2:29:9b:bf:17:1f:15:30:18:25:3a:ee:57:40:
         3e:1e:82:64:1c:45:c2:83:7c:b2:08:8a:c0:75:ff:78:b3:d1:
         77:14:f3:c3:a3:06:86:67:2f:95:1a:c1:20:4c:f5:12:f4:a3:
         e7:58:52:70:73:a9:7b:58:c6:bd:26:58:24:e7:08:d0:cf:fb:
         2f:0d:e9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:08:38 2026 by rpki-client