Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          2Y+EulKqNU58e/LxB4cnN/xoZPDno+tP2Ve33O825jk=
Subject key identifier:   D9:61:01:EF:44:7E:BD:1E:3E:A7:D5:05:09:59:2B:4E:D2:A4:24:CC
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       01A1BEE52C906FAF00543799EBD52C88BFB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          1B0C
Signing time:             Mon 09 Nov 2026 06:00:52 +0000
Manifest this update:     Mon 09 Nov 2026 06:00:52 +0000
Manifest next update:     Tue 10 Nov 2026 06:00:52 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: Xb621UbrsufIUCa+ASutDJTvxcQxn0w+IDg/PwuAc4c=)
                          2: BKe8hXY0cgAAxewE2Mm54POT-xc.asa (hash: U+5d+Blgx+OK65BFkGC90iZKqkHz+P5w31SAHBDGPvw=)
                          3: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          4: JIW91ppQFrOACtjn3f9ZCp12wgg.asa (hash: C/yrhKJB+QdjcqMNi3etoGUrT4jwaUYzueXmwVYLCS8=)
                          5: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
                          6: wLczrU7td0HrS3atEZQ8nyJ2d6I.roa (hash: 8QcBEnYdExUuHoivfoWFKof5ZQw5mkFiEuUs2hlbHug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 02:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:be:e5:2c:90:6f:af:00:54:37:99:eb:d5:2c:88:bf:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Nov  9 06:00:52 2026 GMT
            Not After : Nov 10 06:00:52 2026 GMT
        Subject: CN=d96101ef447ebd1e3ea7d50509592b4ed2a424cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:36:fa:5d:d3:a3:83:bd:ea:96:34:5a:4a:
                    30:d1:9c:80:64:0b:97:d1:73:5e:32:94:9a:4b:7a:
                    c1:24:62:e7:ce:13:c4:fd:98:ec:b5:87:5f:29:79:
                    11:78:78:e1:7c:bb:37:aa:86:79:53:3d:6e:b2:6e:
                    94:e5:49:d9:c5:77:6c:f9:39:42:51:f9:4c:8f:d8:
                    22:d3:16:e3:7a:77:37:61:d8:99:d8:a5:ca:f8:a1:
                    c1:a2:79:1e:08:60:50:88:c9:6f:d9:54:2b:a5:21:
                    63:2e:72:c5:cb:d5:ef:6d:aa:51:89:e2:b2:49:7d:
                    6f:da:29:39:01:93:b5:19:bc:62:cf:2e:a1:61:90:
                    be:3d:77:30:74:2e:0a:59:76:21:92:cc:a0:c1:28:
                    a4:6f:f7:61:b6:8e:f0:b0:2d:85:bc:9d:0a:bb:33:
                    4b:23:14:39:be:25:85:a9:51:c2:07:34:4e:d0:77:
                    dd:38:21:81:dc:c0:86:f2:34:21:e9:f8:2a:2f:25:
                    73:3c:ec:68:5a:fb:79:c2:a1:ae:e2:d7:96:5f:cd:
                    72:ff:85:84:57:1b:c8:32:26:50:a3:6c:62:9c:39:
                    37:af:3c:9c:bc:fa:fd:59:99:99:7a:4d:42:7a:a8:
                    eb:a6:6f:9f:72:20:d0:0d:ff:d1:c3:db:98:43:7e:
                    ee:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:61:01:EF:44:7E:BD:1E:3E:A7:D5:05:09:59:2B:4E:D2:A4:24:CC
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f4:f1:13:9f:98:fd:4c:f3:30:df:5c:8b:23:01:7f:54:8b:
         d5:be:38:5b:69:31:6c:6f:78:6c:fc:e4:fa:eb:d8:13:67:87:
         f9:76:6e:de:70:fe:99:96:10:60:4d:ae:0f:1e:75:e6:da:cb:
         ad:bc:01:de:ee:0c:dd:90:16:1d:a2:a5:a2:3b:cd:8a:1d:2e:
         7c:b9:31:14:b5:83:2d:97:ed:86:7b:30:6b:21:65:e1:f3:c5:
         40:2a:0d:0f:f9:9f:b6:cb:35:7a:c4:58:42:97:67:c2:2e:b4:
         d6:d3:22:d0:de:73:7a:6a:94:69:1b:f7:4a:c0:17:a8:49:b1:
         d4:6f:d6:7d:6d:b7:67:f1:c9:d9:ac:50:4e:98:00:8d:bc:e2:
         66:60:ff:1f:75:0f:5e:11:2b:d4:f9:e5:2a:dc:f6:59:a2:41:
         31:6c:c5:f2:fb:fa:37:89:96:33:3b:3e:34:ba:f3:85:56:d0:
         d8:b4:a3:da:20:93:57:d4:dd:6d:35:27:28:ed:c6:d8:1d:7b:
         b9:0c:be:ae:2b:7c:54:55:d6:cf:2e:51:76:20:eb:04:40:bd:
         4a:41:3e:cb:f5:87:ae:6c:bb:78:e6:2e:d4:e7:e6:db:a6:b0:
         f2:d0:97:06:73:aa:5f:00:a6:ba:b3:34:ec:8d:07:1d:f4:79:
         a1:c9:39:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 08:53:13 2026 by rpki-client