Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          ImlnAwpFklAwPkFlupVhmoWJVUWL17+owNBh3A3W9WQ=
Subject key identifier:   A3:C2:07:BC:EC:E3:8C:47:1C:38:EA:8F:59:5B:8B:93:5F:AB:1F:BE
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       01A0BFC37185579CBF13C88CD7C109B96357
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          1A86
Signing time:             Sun 20 Sep 2026 17:00:51 +0000
Manifest this update:     Sun 20 Sep 2026 17:00:51 +0000
Manifest next update:     Mon 21 Sep 2026 17:00:51 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: yA5ph5EDWGVsgAOSji/nQkS3VhYgRA2nuxjisfTwnf8=)
                          2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          3: JIW91ppQFrOACtjn3f9ZCp12wgg.asa (hash: C/yrhKJB+QdjcqMNi3etoGUrT4jwaUYzueXmwVYLCS8=)
                          4: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
                          5: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:c3:71:85:57:9c:bf:13:c8:8c:d7:c1:09:b9:63:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Sep 20 17:00:51 2026 GMT
            Not After : Sep 21 17:00:51 2026 GMT
        Subject: CN=a3c207bcece38c471c38ea8f595b8b935fab1fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:17:0e:82:10:84:03:3f:8a:94:f3:e2:8c:7c:
                    d4:7e:56:f7:30:7a:c8:bf:db:a6:c0:6c:d4:07:e1:
                    6b:14:b2:45:e7:6a:c6:e1:3d:d2:eb:a8:63:f7:81:
                    41:60:76:12:93:38:16:ed:4c:95:81:9c:54:b4:4a:
                    00:23:18:75:b5:7a:95:5c:eb:87:a5:ed:e8:89:82:
                    9e:57:be:5a:34:9f:49:55:f0:02:4d:49:63:6f:ea:
                    30:e5:57:ab:7a:4c:40:dc:f1:bb:ab:8d:85:c8:60:
                    17:3c:54:f5:f8:b1:9a:c2:cf:4c:21:5c:71:93:97:
                    b8:6e:d7:88:09:4d:78:3f:3e:b9:a0:d7:ab:25:46:
                    f8:5b:ce:80:0d:f9:ee:15:6b:87:43:63:33:1e:8f:
                    fe:a6:9a:5c:a3:56:57:d1:e4:a2:89:bf:83:6a:b8:
                    b9:f6:52:5a:03:7b:ad:2e:6a:e0:02:c1:ea:28:21:
                    94:f6:60:9a:1a:02:b1:e5:11:7e:f0:a7:a8:66:07:
                    f8:64:23:f9:2c:6f:9b:61:d6:98:d5:04:8e:da:e5:
                    bd:bd:87:75:cb:80:d4:f4:e1:76:06:7b:39:5d:de:
                    70:37:bd:08:6d:e2:aa:18:83:3f:4c:0a:b4:51:fe:
                    ba:26:2d:87:80:67:95:14:0a:61:da:00:53:6d:43:
                    36:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C2:07:BC:EC:E3:8C:47:1C:38:EA:8F:59:5B:8B:93:5F:AB:1F:BE
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:dd:61:86:cc:ee:04:69:ee:d0:06:bc:8e:6f:32:8a:90:79:
         87:5e:f5:b1:4c:7e:e1:93:c9:20:26:35:68:43:b8:0d:f6:a5:
         e5:82:21:5f:fb:3d:25:3e:48:2e:58:d5:09:1d:b4:2e:79:9b:
         8b:ce:a8:31:2d:1f:e7:bc:ff:de:db:f7:cd:6b:2c:11:b9:3c:
         74:19:b4:46:d8:89:b1:da:2d:56:85:9d:38:b0:ba:cd:17:6e:
         f9:6c:7a:c7:cc:0a:b7:ed:50:4a:99:d7:b7:20:87:63:eb:46:
         82:43:68:d3:29:59:84:f9:e5:b1:52:e3:fe:a8:a9:d9:0e:79:
         1d:61:d2:fa:15:ad:fd:83:50:52:2f:58:32:ef:1e:d6:c0:dd:
         0f:ff:71:ab:e0:da:52:57:07:9d:67:54:48:c6:45:1d:45:c9:
         39:55:9f:12:c8:78:18:ea:2e:80:0c:c6:35:5f:6b:87:8a:01:
         96:91:b4:0a:c4:cf:f5:31:e4:96:f6:68:fa:4a:2b:8c:a8:20:
         0c:2e:e1:47:de:89:35:82:26:08:09:61:68:ac:38:82:4e:b6:
         f9:86:31:51:af:e6:ac:2f:55:b8:eb:a7:3e:1d:b3:8f:35:55:
         38:3a:cb:ac:cf:27:c5:2a:fc:3d:a3:26:32:37:07:93:50:a5:
         e0:5a:a3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:07:45 2026 by rpki-client