Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          jQGfneXE6mCKM3QSRpcSvG+z26PfU9lsVWf49l3B/xE=
Subject key identifier:   2F:F0:99:3B:C8:37:7B:A6:AB:C5:E9:94:93:F1:00:37:89:AF:82:8F
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       01A1377F09266F283B1307513F23C61BAB87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          1AC4
Signing time:             Tue 13 Oct 2026 23:00:34 +0000
Manifest this update:     Tue 13 Oct 2026 23:00:34 +0000
Manifest next update:     Wed 14 Oct 2026 23:00:34 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: utjOzqGXxAREib4ss92zTFyJ2CKCAyHTD4IE/SOBiCU=)
                          2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          3: JIW91ppQFrOACtjn3f9ZCp12wgg.asa (hash: C/yrhKJB+QdjcqMNi3etoGUrT4jwaUYzueXmwVYLCS8=)
                          4: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
                          5: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:37:7f:09:26:6f:28:3b:13:07:51:3f:23:c6:1b:ab:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Oct 13 23:00:34 2026 GMT
            Not After : Oct 14 23:00:34 2026 GMT
        Subject: CN=2ff0993bc8377ba6abc5e99493f1003789af828f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1d:36:c3:1e:14:96:0d:36:35:71:46:68:d9:
                    11:fc:21:f3:c1:4d:04:5b:2d:51:21:19:32:7b:58:
                    73:62:6c:f9:fe:8e:7c:5b:02:7c:fc:da:38:65:29:
                    b8:53:9d:ce:be:c2:80:ff:a0:83:31:0e:d9:ef:6f:
                    bf:d3:d9:c9:d3:98:29:05:0c:50:ca:77:fb:99:85:
                    af:ae:56:00:a3:1f:cc:c0:1d:3f:6f:b8:a8:59:6c:
                    de:7f:49:64:01:66:52:e5:d5:62:42:f0:84:71:2d:
                    33:46:b1:ed:50:88:e8:3a:ce:ff:0a:c8:f8:b5:69:
                    dc:1b:2d:3e:5e:47:dd:c3:33:15:59:3c:bb:f6:f4:
                    f0:0a:ba:c3:9a:df:96:3c:fe:df:a0:1b:76:f3:a1:
                    c1:5f:69:8f:c5:ac:6e:9b:72:13:b3:18:08:36:ac:
                    f1:36:aa:38:db:9c:1b:b9:34:3c:15:80:1c:61:8c:
                    3f:e2:98:a3:6b:f7:05:78:32:31:6d:19:38:a3:19:
                    1d:e6:f3:33:d2:a8:a5:4b:f2:d2:a3:8d:0a:5d:9c:
                    7c:65:e4:9c:f8:09:8f:ff:dc:2b:19:1c:b2:6b:d2:
                    3f:6e:b8:7d:cf:93:b8:4c:05:d5:e7:f6:32:85:5e:
                    e7:29:c8:8e:2f:3d:8b:b1:c6:3c:0e:78:79:40:4c:
                    84:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F0:99:3B:C8:37:7B:A6:AB:C5:E9:94:93:F1:00:37:89:AF:82:8F
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:5f:65:80:b0:3e:59:cd:fc:69:c0:cc:17:7e:4b:f0:3e:00:
         03:2f:3f:d9:b5:09:bd:58:bf:81:6c:90:89:2e:9f:e0:f4:42:
         7c:e1:0e:2e:82:d7:bc:a4:b4:85:66:3c:c4:a0:78:06:a7:53:
         7c:ca:93:ab:b0:b9:e4:4e:65:14:c6:e0:55:21:f4:85:33:ae:
         0c:2a:8f:c9:93:1a:73:fc:83:3f:72:e5:a4:c6:22:11:a0:bb:
         2e:3d:ed:7e:66:27:61:51:4e:06:0e:68:7c:93:45:28:fa:34:
         19:e0:1c:0f:3c:99:7a:af:54:25:a1:aa:03:ed:e3:83:f9:a7:
         c2:b6:97:c1:c8:14:34:0a:e7:8c:0d:09:e9:1e:e4:76:12:44:
         86:ba:dd:cf:68:84:5e:af:42:a6:bc:e6:89:aa:f6:05:00:3e:
         d5:d6:48:81:a1:87:eb:24:74:18:8c:f6:43:e1:f6:64:89:c0:
         d8:28:ef:b2:59:26:5b:20:45:2b:74:39:d9:f0:5e:e3:c4:80:
         05:4d:e8:42:66:a2:10:8c:40:b0:30:75:00:44:f7:6f:85:d0:
         27:d7:5f:8a:bd:38:2f:ac:c8:9d:97:78:5a:ee:09:dd:b6:4a:
         03:3c:c2:19:cb:d9:10:8c:2d:46:77:bf:f7:9a:b2:39:85:3e:
         67:c0:c0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:53:53 2026 by rpki-client