Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          HB2sspZSayYxm/wEHcxfMTEgQwuWNxrn9pXq7y0D5kg=
Subject key identifier:   C1:3C:83:3B:5E:A8:84:0C:2C:DE:31:50:C9:32:78:55:69:23:11:0C
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       01A1AA1520DA43377CE75F35806E780FE7CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          1B01
Signing time:             Thu 05 Nov 2026 05:01:13 +0000
Manifest this update:     Thu 05 Nov 2026 05:01:13 +0000
Manifest next update:     Fri 06 Nov 2026 05:01:13 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: /K+ArWvF2DQGnK2ZZO8sVPvhjn+PpMn634cw7l3pzE4=)
                          2: BKe8hXY0cgAAxewE2Mm54POT-xc.asa (hash: U+5d+Blgx+OK65BFkGC90iZKqkHz+P5w31SAHBDGPvw=)
                          3: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          4: JIW91ppQFrOACtjn3f9ZCp12wgg.asa (hash: C/yrhKJB+QdjcqMNi3etoGUrT4jwaUYzueXmwVYLCS8=)
                          5: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 05:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:aa:15:20:da:43:37:7c:e7:5f:35:80:6e:78:0f:e7:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Nov  5 05:01:13 2026 GMT
            Not After : Nov  6 05:01:13 2026 GMT
        Subject: CN=c13c833b5ea8840c2cde3150c93278556923110c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:47:a8:e7:0c:e8:15:db:4f:8e:74:08:b5:94:
                    c8:c3:e5:01:c6:f4:84:04:16:fc:b2:32:43:b1:66:
                    13:81:a2:95:35:45:ea:97:80:c1:48:ac:8f:d3:af:
                    88:97:16:c3:b0:30:57:87:24:81:57:d2:6d:83:f6:
                    47:2f:2b:87:44:7b:8c:cf:27:55:98:44:05:77:c9:
                    03:94:d3:d5:dd:8a:31:12:5a:93:47:62:f2:4a:12:
                    57:16:be:97:64:b5:d0:d3:f3:52:4b:68:a2:e8:bd:
                    3e:7c:65:11:0c:ba:27:07:5b:15:5a:e6:c6:a3:df:
                    6a:80:e1:ac:61:ff:45:35:4a:6b:93:d2:ca:80:74:
                    a3:6b:e0:47:d8:17:e3:02:0d:b0:7f:43:c6:63:be:
                    17:c2:de:b5:ee:cf:a4:3a:dd:59:b7:6c:56:6f:b3:
                    51:27:a0:9d:12:e4:6e:51:24:53:0a:16:f7:e8:9a:
                    0a:0f:7d:46:1c:1b:ed:ef:80:80:9d:a7:e1:88:f6:
                    2e:c6:29:07:bd:d5:8d:7c:a9:52:a4:49:94:6a:18:
                    c4:1d:f0:28:9c:fa:62:ec:cd:36:d2:8c:98:c3:e0:
                    aa:00:a6:e7:05:f8:b7:6a:62:96:33:47:d6:cd:f5:
                    1e:f3:0d:34:e0:f8:91:e0:d4:45:6b:fb:a0:4a:43:
                    c4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3C:83:3B:5E:A8:84:0C:2C:DE:31:50:C9:32:78:55:69:23:11:0C
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:20:78:8a:5d:35:8e:03:5c:e5:68:01:ec:1d:92:01:43:cf:
         ff:91:c6:c5:e0:d8:e4:01:84:00:9d:59:25:fa:ad:70:20:83:
         4f:1b:61:9c:f6:07:7b:66:d3:03:98:5d:6d:b5:c8:27:cd:1f:
         4d:cf:e3:66:1d:a1:18:b4:ec:39:42:da:9c:c8:0b:e2:0d:b2:
         dc:af:f0:88:ac:ad:eb:a1:05:4d:2a:d4:27:1b:a7:30:15:fb:
         5f:55:e0:20:2a:2a:78:c0:0c:cc:a7:c2:6a:d1:72:56:b2:e8:
         e7:ec:b1:42:d8:06:07:2a:f2:cf:c7:77:ad:28:55:80:09:04:
         6a:ad:82:ae:2c:65:51:2e:bd:94:7a:94:5c:66:1d:e7:79:50:
         f7:ed:e1:eb:41:fc:70:e1:11:76:4a:1a:10:43:a3:03:17:84:
         f1:25:49:71:3b:72:3e:83:08:96:15:8d:31:3c:17:e0:6c:34:
         7e:bc:24:b5:18:d2:0c:84:85:f8:89:9f:f8:97:34:dc:7b:60:
         37:6b:69:27:cc:3f:2d:34:fb:33:2a:27:45:6c:d7:07:3a:65:
         cc:37:22:48:a4:1f:70:37:a4:f6:6a:31:65:f0:f0:38:fe:15:
         98:49:ca:5f:4e:d9:ff:b9:01:a2:2e:07:54:5b:a6:b8:28:85:
         34:12:a4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:18:12 2026 by rpki-client