Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.mft
File:                     i7nGJrPNS9wiQe7TQvSIPvtWVKA.mft (raw, json)
Hash identifier:          V5FB+a9o8tT7T7CcP11W4Fi3t8ehacKv5Dz1MaMxFjI=
Subject key identifier:   4E:8E:18:E4:D6:86:91:07:DD:EA:2E:31:E7:BC:CD:BE:F7:11:76:FE
Authority key identifier: 8B:B9:C6:26:B3:CD:4B:DC:22:41:EE:D3:42:F4:88:3E:FB:56:54:A0
Certificate issuer:       /CN=8bb9c626b3cd4bdc2241eed342f4883efb5654a0
Certificate serial:       01A06D94F4D4F19B596AB2D57BF41070434D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.mft
Manifest number:          A8
Signing time:             Fri 04 Sep 2026 18:01:13 +0000
Manifest this update:     Fri 04 Sep 2026 18:01:13 +0000
Manifest next update:     Sat 05 Sep 2026 18:01:13 +0000
Files and hashes:         1: 6KuPFzf4RKyktQ4wnHHPdKvoFXU.roa (hash: XTZ6AAhH0mITXv4PMvo+aFQ0m0dDHZ+yiHDISIQyhLc=)
                          2: ZIZ030QhhzFvggSEl-vTxdGfHlg.roa (hash: CUycEuUDS0zxjJemu4oZ9wIU+xi7vqRjfi0W27XlBfI=)
                          3: eLGE_51_6fXDl6v8POnsDoLbXD8.roa (hash: 1RwsA34iJlX33Oz/snyk+pECLx2oO8VCH9UrkWAkfXo=)
                          4: i7nGJrPNS9wiQe7TQvSIPvtWVKA.crl (hash: twmzfD7RfEpD/3wl8pMRm6X6RHJe1ZURlE/VUE4nvH8=)
                          5: stTRni4YM83OgBxFCYHTBarMniU.roa (hash: sdW8g8p16K2y61HEzLwNn3mjfOgNWIo1IuskhK0jm60=)
                          6: yER6Jwc260jYGlbdAWyVTAN3WMM.roa (hash: vpGox+pD5sY2CKKHnvr7twErOeITxh7mmeX17MbXeQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:94:f4:d4:f1:9b:59:6a:b2:d5:7b:f4:10:70:43:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb9c626b3cd4bdc2241eed342f4883efb5654a0
        Validity
            Not Before: Sep  4 18:01:13 2026 GMT
            Not After : Sep  5 18:01:13 2026 GMT
        Subject: CN=4e8e18e4d6869107ddea2e31e7bccdbef71176fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1d:26:df:94:49:4a:77:6d:d8:65:02:cf:68:
                    40:28:75:68:67:ad:03:9b:a8:25:21:c1:03:7e:fb:
                    01:6b:f6:ba:80:fa:f1:c3:f7:98:4c:45:ce:31:3f:
                    36:9f:71:57:62:86:30:73:54:f9:02:82:d4:36:01:
                    b5:b0:9b:be:ae:fd:d0:52:2b:b9:f7:62:64:0c:16:
                    ee:1c:2f:29:0b:54:e0:4f:61:0a:f2:0f:73:59:13:
                    21:e3:9c:89:07:f5:45:56:6d:0a:eb:73:f2:ed:4d:
                    56:95:6f:e0:13:80:e0:77:8a:b0:6e:5e:11:75:be:
                    7d:4d:0b:7c:78:66:d9:3a:14:87:8f:09:ae:a0:5f:
                    b1:50:2b:39:4a:b1:af:a8:b0:1a:98:52:db:d8:d6:
                    55:3e:20:01:fe:4e:65:ef:a1:19:b7:80:c0:87:0a:
                    4e:27:ea:e3:19:ce:7f:b0:75:9f:83:4d:36:0d:25:
                    82:59:e5:36:80:9e:59:41:8b:ed:6c:10:47:87:a7:
                    c1:ef:c8:85:1c:5a:a7:b8:03:5a:f3:b3:2e:7c:a7:
                    b9:fa:24:15:7e:0d:ef:b4:b4:38:7d:c3:f2:da:41:
                    2c:51:ce:5c:e6:0e:bb:98:a5:61:9d:d6:c0:a5:8c:
                    8c:40:34:00:80:24:77:48:d2:47:b0:2e:33:97:27:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8E:18:E4:D6:86:91:07:DD:EA:2E:31:E7:BC:CD:BE:F7:11:76:FE
            X509v3 Authority Key Identifier:
                keyid:8B:B9:C6:26:B3:CD:4B:DC:22:41:EE:D3:42:F4:88:3E:FB:56:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:80:9a:5c:2c:a3:e3:a0:27:1d:8e:fa:ca:e3:da:c4:b9:3b:
         cc:39:70:2a:57:c8:f4:06:e8:d8:5f:a8:e2:25:91:af:cb:cc:
         eb:ae:e1:10:06:56:15:e9:d9:6b:05:17:56:09:79:65:87:ba:
         6b:15:11:56:dd:08:66:3c:3f:94:92:25:4a:38:de:17:20:e7:
         cb:70:83:00:04:ab:e7:f8:ff:e1:06:37:70:c6:2b:3a:6d:f7:
         ab:0e:e3:aa:f4:fa:63:ce:94:41:fb:54:b9:ab:6e:ba:14:92:
         78:7c:a9:a5:90:50:fc:59:87:87:0c:4d:47:6b:16:4b:41:d3:
         97:12:2b:61:00:1f:22:2c:d2:e8:3e:3c:a4:68:1d:45:96:00:
         25:27:63:3c:43:02:51:50:69:ec:8d:87:c0:88:e2:a3:e2:38:
         e1:99:00:ee:c1:96:8a:f4:f4:c6:7f:f9:36:97:f0:1e:c7:38:
         7d:e0:18:27:96:4f:79:d5:a6:61:bc:d2:3f:07:49:f5:f2:6e:
         cf:c9:39:76:23:41:35:4b:bf:0d:63:10:35:96:b9:85:04:49:
         b2:23:62:f3:ea:e4:e2:6c:ec:f0:4d:a4:73:2b:db:f6:38:93:
         30:9f:fc:78:51:99:44:5e:92:43:e3:b9:4a:2c:ff:b5:37:b3:
         cf:aa:1d:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtlPTU8ZtZarLVe/QQcENNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjljNjI2YjNjZDRiZGMyMjQxZWVkMzQyZjQ4ODNlZmI1
NjU0YTAwHhcNMjYwOTA0MTgwMTEzWhcNMjYwOTA1MTgwMTEzWjAzMTEwLwYDVQQD
Eyg0ZThlMThlNGQ2ODY5MTA3ZGRlYTJlMzFlN2JjY2RiZWY3MTE3NmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB0m35RJSndt2GUCz2hAKHVoZ60D
m6glIcEDfvsBa/a6gPrxw/eYTEXOMT82n3FXYoYwc1T5AoLUNgG1sJu+rv3QUiu5
92JkDBbuHC8pC1TgT2EK8g9zWRMh45yJB/VFVm0K63Py7U1WlW/gE4Dgd4qwbl4R
db59TQt8eGbZOhSHjwmuoF+xUCs5SrGvqLAamFLb2NZVPiAB/k5l76EZt4DAhwpO
J+rjGc5/sHWfg002DSWCWeU2gJ5ZQYvtbBBHh6fB78iFHFqnuANa87MufKe5+iQV
fg3vtLQ4fcPy2kEsUc5c5g67mKVhndbApYyMQDQAgCR3SNJHsC4zlyeXAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6OGOTWhpEH3eouMee8zb73EXb+MB8GA1UdIwQY
MBaAFIu5xiazzUvcIkHu00L0iD77VlSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTduR0pyUE5TOXdpUWU3VFF2U0lQdnRXVktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9lOTM3NDItNmNkNi00YTUwLTgxYjEt
YzE1MjFiZGYzNDRkLzEvaTduR0pyUE5TOXdpUWU3VFF2U0lQdnRXVktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9lOTM3NDItNmNkNi00YTUwLTgxYjEtYzE1MjFiZGYzNDRk
LzEvaTduR0pyUE5TOXdpUWU3VFF2U0lQdnRXVktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYCaXCyj
46AnHY76yuPaxLk7zDlwKlfI9Abo2F+o4iWRr8vM667hEAZWFenZawUXVgl5ZYe6
axURVt0IZjw/lJIlSjjeFyDny3CDAASr5/j/4QY3cMYrOm33qw7jqvT6Y86UQftU
uatuuhSSeHyppZBQ/FmHhwxNR2sWS0HTlxIrYQAfIizS6D48pGgdRZYAJSdjPEMC
UVBp7I2HwIjio+I44ZkA7sGWivT0xn/5NpfwHsc4feAYJ5ZPedWmYbzSPwdJ9fJu
z8k5diNBNUu/DWMQNZa5hQRJsiNi8+rk4mzs8E2kcyvb9jiTMJ/8eFGZRF6SQ+O5
Siz/tTezz6odug==
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:31:16 2026 by rpki-client