Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          mZ2yXCheMnQtFBUc2kWkyCMwfQD1i0LXWv0Gzj8IAuI=
Subject key identifier:   CC:88:37:27:A5:B7:EC:71:6A:4D:68:3B:23:C9:59:53:1E:B1:82:67
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       01A12BE8BFF3F96DA7E68322068BDC9C1B18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          1ABE
Signing time:             Sun 11 Oct 2026 17:00:35 +0000
Manifest this update:     Sun 11 Oct 2026 17:00:35 +0000
Manifest next update:     Mon 12 Oct 2026 17:00:35 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: 4xImNDHgM+iF46b80yInUDGgVF7QYIzjpN4+yYRqies=)
                          2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          3: JIW91ppQFrOACtjn3f9ZCp12wgg.asa (hash: C/yrhKJB+QdjcqMNi3etoGUrT4jwaUYzueXmwVYLCS8=)
                          4: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
                          5: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 17:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:e8:bf:f3:f9:6d:a7:e6:83:22:06:8b:dc:9c:1b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Oct 11 17:00:35 2026 GMT
            Not After : Oct 12 17:00:35 2026 GMT
        Subject: CN=cc883727a5b7ec716a4d683b23c959531eb18267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:78:cd:d7:7c:82:dc:ff:a1:d8:42:d5:72:
                    cb:a7:3c:26:53:4a:55:de:95:72:f1:3c:1f:fb:91:
                    32:6c:f1:fb:9f:57:97:12:57:f3:0b:01:96:5a:e3:
                    79:54:51:30:9c:c9:c7:88:88:be:1a:53:d3:17:54:
                    30:42:9d:de:00:dd:a1:c8:ae:af:d1:c6:d7:79:39:
                    99:9a:22:5a:21:e8:a4:c2:99:bd:24:b2:24:40:94:
                    d2:42:1a:bb:6a:fc:8c:08:d8:bc:15:f0:e9:e6:2c:
                    aa:af:08:a5:88:ad:23:ed:d5:e8:69:60:22:85:63:
                    9e:4c:bd:c2:c5:a0:e6:f0:0d:63:d8:3d:b6:91:15:
                    c6:ee:ca:96:1e:22:8b:aa:76:4d:17:8f:bb:61:3f:
                    0e:bd:3e:14:bc:9a:e1:cf:90:52:24:46:ed:21:be:
                    08:5b:6d:32:bf:5b:99:b2:9f:47:fa:79:76:50:fd:
                    e2:70:05:80:19:56:3a:67:f1:ca:bd:ad:1a:90:ff:
                    36:d9:7b:7d:d4:77:fc:d3:d7:5f:90:21:3f:1f:2d:
                    dd:30:f8:33:48:3d:a0:be:68:3d:df:f4:da:39:59:
                    ce:56:9e:de:6e:58:80:db:c6:a3:b9:62:63:f7:65:
                    bc:e2:2c:42:96:07:c0:fe:b0:25:97:0f:0b:e0:56:
                    23:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:88:37:27:A5:B7:EC:71:6A:4D:68:3B:23:C9:59:53:1E:B1:82:67
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b4:31:90:58:63:30:b5:38:84:62:c6:78:f4:b5:e6:2a:40:
         18:2a:1f:34:1c:5a:1f:0b:4f:3d:20:26:72:3f:c6:31:1a:44:
         24:f4:07:9b:3b:60:04:06:53:7e:07:20:3a:4d:8f:dc:ff:40:
         b7:74:0a:3e:15:d8:85:12:68:02:09:92:d6:a7:fe:ed:fd:57:
         1d:85:80:78:a4:4c:ff:84:62:a9:ba:4a:60:00:81:3a:fc:74:
         da:bf:5d:79:27:bd:ee:48:40:33:d8:a8:88:09:d4:bc:10:83:
         bf:a8:8a:21:c5:d3:3a:17:79:7e:96:05:9f:0b:2d:14:e2:64:
         4f:4d:e7:31:4a:34:14:c0:eb:0b:04:52:82:f7:94:d2:5f:f9:
         92:58:c2:3a:d2:96:11:df:f0:a6:03:f7:0f:d7:b9:11:cc:98:
         f6:c0:ed:69:7b:70:35:ef:da:c8:2f:44:5c:c2:81:5b:b3:ea:
         dd:46:26:4d:ff:d0:dc:40:51:25:ed:46:c8:f6:47:02:5d:43:
         5f:9c:91:b0:5e:75:d7:4d:7b:04:65:36:11:fb:99:00:09:51:
         66:20:7b:a0:61:52:ba:b0:52:7c:23:e3:f5:28:f1:98:da:c1:
         d3:52:a2:8b:61:2c:a6:de:a8:2a:2b:a4:17:90:b4:51:10:37:
         d8:ea:48:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEr6L/z+W2n5oMiBovcnBsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzMzZTQzZWY1NjUyN2ExNjlkNmFjNmQ3ZTYyYzYzZDE5
NzMwNTEwHhcNMjYxMDExMTcwMDM1WhcNMjYxMDEyMTcwMDM1WjAzMTEwLwYDVQQD
EyhjYzg4MzcyN2E1YjdlYzcxNmE0ZDY4M2IyM2M5NTk1MzFlYjE4MjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyN4zdd8gtz/odhC1XLLpzwmU0pV
3pVy8Twf+5EybPH7n1eXElfzCwGWWuN5VFEwnMnHiIi+GlPTF1QwQp3eAN2hyK6v
0cbXeTmZmiJaIeikwpm9JLIkQJTSQhq7avyMCNi8FfDp5iyqrwiliK0j7dXoaWAi
hWOeTL3CxaDm8A1j2D22kRXG7sqWHiKLqnZNF4+7YT8OvT4UvJrhz5BSJEbtIb4I
W20yv1uZsp9H+nl2UP3icAWAGVY6Z/HKva0akP822Xt91Hf809dfkCE/Hy3dMPgz
SD2gvmg93/TaOVnOVp7ebliA28ajuWJj92W84ixClgfA/rAllw8L4FYjNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyINyelt+xxak1oOyPJWVMesYJnMB8GA1UdIwQY
MBaAFAPDPkPvVlJ6Fp1qxtfmLGPRlzBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUt
YTNhM2ViODc5ZjJiLzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUtYTNhM2ViODc5ZjJi
LzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7QxkFhj
MLU4hGLGePS15ipAGCofNBxaHwtPPSAmcj/GMRpEJPQHmztgBAZTfgcgOk2P3P9A
t3QKPhXYhRJoAgmS1qf+7f1XHYWAeKRM/4RiqbpKYACBOvx02r9deSe97khAM9io
iAnUvBCDv6iKIcXTOhd5fpYFnwstFOJkT03nMUo0FMDrCwRSgveU0l/5kljCOtKW
Ed/wpgP3D9e5EcyY9sDtaXtwNe/ayC9EXMKBW7Pq3UYmTf/Q3EBRJe1GyPZHAl1D
X5yRsF511017BGU2EfuZAAlRZiB7oGFSurBSfCPj9SjxmNrB01Kii2Espt6oKiuk
F5C0URA32OpIaw==
-----END CERTIFICATE-----
Generated at Mon Oct 12 03:25:41 2026 by rpki-client