Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
File:                     8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json)
Hash identifier:          gdAjWH9Fjf6BBzYjFF5urhs42otUBDudy7+93Krurg0=
Subject key identifier:   C7:9A:68:5C:97:12:55:AB:BB:90:69:81:E8:15:11:C8:1C:F2:30:D0
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Certificate issuer:       /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial:       01A115CF20FEA1AF4968D47D78CBB848517B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
Manifest number:          14B8
Signing time:             Wed 07 Oct 2026 10:00:58 +0000
Manifest this update:     Wed 07 Oct 2026 10:00:58 +0000
Manifest next update:     Thu 08 Oct 2026 10:00:58 +0000
Files and hashes:         1: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: KErIZpr4XZNpQen7TkYXAL5ZCY78QKKP08SAkqMWOq8=)
                          2: 8Go9HdfslzEYYhsG162QyXxlPrg.roa (hash: Z3SgqSpV46u7mlUHzliku+RypQp4wBZXxjHASyqRXL8=)
                          3: 8Nrd_fmZeNL0BSH4rv9CXgqM66c.asa (hash: K5I1pf6HiAifVMzN9jkKOGVybg6UiRdsC7/R2MM8fPE=)
                          4: H39SCmBhfIAL4P80AMbv9vc00_8.roa (hash: cOtYtuq75jARRK/4tVOM91mG7sEB0LZ3Ph2khyzi9O8=)
                          5: HVUz-pGSDFLTZZg2T2E4peiELEU.roa (hash: wezVJrmcFZ7JTwvDKwpa7PsKgNm5GHs3DhA4vBq4DQY=)
                          6: HYEI0JEwrvGeEpfpFZTeCg5EH8g.asa (hash: ARMsZy0uoDJPAUtmO4+hjp62F/uBIE4HsM0N2UwPbqY=)
                          7: K_c7eVlzPkp6rhiHCxnA36F4-xc.roa (hash: 6S2BWd2mNzmFbAB+J2b2FN4NJksfT7p6QVbD3sv/VL8=)
                          8: WtD6mKlfmpS7KMd25I2nHKzWkGQ.roa (hash: 8kdIDFqVwJHFysKGYVAc28Ycb8D240Eugchj4O4w7C4=)
                          9: Xf3bZPWk0_bi28_oQ2232QrSJQQ.roa (hash: ffz/L4K0R9hVyQDyQ+n17EfkZ224IbQsJdVzmjU75wU=)
                          10: a0OAcZfUpJ_at-NAiRWnugtXHZs.roa (hash: CX3pL+do0k62/x9rzFqYTy+gZPu9+b2sUZEH679CN44=)
                          11: ek9-6det_a8IxIqHsWia7-WY-A4.roa (hash: w03N+IHDbJSsXXRy6rZBj/rl7phalEGurLQVXj4bedQ=)
                          12: hmPo_o1Wwb_fc_jDeTYw0RTyias.roa (hash: buOdy6wcshKPWdUb86nMrSnh3bWvA83WVFp55tOqeX4=)
                          13: kE6tecKZ0fG9qC_JtCBXfpG4g1A.roa (hash: CDpFmGMaqgiUJFuGVEP8AvEce972KDkWrlC2GvXzIOA=)
                          14: sD9_KvYGNd0gSG9dqlTzmRlJx9g.roa (hash: cpPGHuiYhlqjVa2ZLptrQ2LGEEYQM6YwJPoAsBdLFRc=)
                          15: xjJ15D14LS-olVuJZ7jEwkrPC0k.roa (hash: x/bc5dXq+6Lyq8Lw/fVl1pcZIUuQ/Nrr00RhE1xkTLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:15:cf:20:fe:a1:af:49:68:d4:7d:78:cb:b8:48:51:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
        Validity
            Not Before: Oct  7 10:00:58 2026 GMT
            Not After : Oct  8 10:00:58 2026 GMT
        Subject: CN=c79a685c971255abbb906981e81511c81cf230d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:71:ce:9d:b9:09:63:67:81:bc:62:50:c3:fc:
                    98:f4:5b:cc:93:b9:ee:3e:26:b1:00:8d:af:fd:7b:
                    9e:bf:9c:a1:bf:1c:59:56:18:30:27:54:1f:70:41:
                    c4:2c:d9:a0:f2:aa:0c:94:07:1d:b5:b1:d0:fc:4d:
                    8b:41:7f:b6:68:3a:c1:c9:ec:86:8d:e3:1b:ca:f3:
                    59:25:74:d4:e5:f1:03:fb:ce:6c:da:97:9c:16:cf:
                    b2:4a:59:b8:9c:9f:75:19:06:b0:ba:17:b6:ec:c2:
                    37:1e:04:d0:0f:aa:b8:d3:10:82:b1:72:5a:4d:f0:
                    e5:70:f1:7a:30:fd:25:27:db:1d:75:4c:a3:86:60:
                    98:fd:92:ef:79:1a:d6:48:bf:7b:12:5b:b2:f8:df:
                    7f:07:4f:e5:a2:b9:a7:57:75:ca:97:b6:da:99:d2:
                    75:59:cb:17:0e:fe:ff:aa:ff:09:2c:0c:2b:3c:24:
                    d2:c1:48:a0:03:2c:ad:0b:87:37:b5:b6:e4:48:8f:
                    01:8e:fe:12:c5:02:63:b7:05:24:f6:d7:5c:0e:d3:
                    8d:62:41:d1:11:6b:82:6e:f5:b5:81:47:b0:f5:7f:
                    57:aa:a9:49:2a:cc:fb:a9:ad:41:36:77:54:d8:74:
                    4a:fe:ce:79:a7:f1:f7:70:cb:14:93:48:1d:3d:57:
                    a0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9A:68:5C:97:12:55:AB:BB:90:69:81:E8:15:11:C8:1C:F2:30:D0
            X509v3 Authority Key Identifier:
                keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a4:13:4c:0d:94:c4:06:f6:83:aa:50:1b:84:55:61:ef:58:
         08:93:e9:33:4f:01:d5:79:e6:d8:a2:42:b0:a7:a6:3a:a5:7a:
         cb:05:b8:aa:e9:10:17:1f:09:68:ce:f8:f6:c9:98:1c:d5:c2:
         53:0a:92:cd:93:61:96:ee:fe:a7:71:de:16:40:20:19:cc:0e:
         4d:5a:e4:7e:0f:83:4b:ea:e3:a8:45:b6:2c:0f:2f:d1:02:31:
         59:db:77:98:c1:fc:67:0f:35:d9:b4:68:1a:01:f3:3f:9b:da:
         5c:ae:29:15:5d:61:91:5f:22:f6:40:54:89:b6:66:86:ae:53:
         ae:1f:d2:a3:07:69:9e:1a:dd:c5:2b:4b:f9:54:de:ff:14:6b:
         ce:62:8f:43:60:77:5b:66:0f:f9:ce:ff:47:a4:5c:31:4c:80:
         71:76:3b:99:3f:fb:3e:f7:18:73:9b:a2:3c:ad:31:48:a8:7c:
         43:ed:a4:7d:cb:a2:5d:3e:36:20:c6:5d:b8:75:85:fb:04:a9:
         45:b6:45:3d:bf:e4:f0:58:6b:13:d9:98:6a:a6:d2:c3:d8:32:
         54:1d:dc:a5:c6:6e:95:89:01:62:32:57:f8:c3:c3:48:b6:e2:
         88:ad:74:fb:28:7c:ea:bb:ad:0c:0b:10:23:43:6d:57:e7:d7:
         97:7d:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:06:07 2026 by rpki-client