Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
File:                     E266c8PZX-9psaYwJBeji5vyJ20.mft (raw, json)
Hash identifier:          NXd4hG9vTZDTqiP+MzY6Kck/30FckU6BolW2JF0es6Q=
Subject key identifier:   89:80:EE:68:8F:4B:1A:3A:D2:E4:EC:0B:BE:0A:DF:67:23:28:8E:07
Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
Certificate issuer:       /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Certificate serial:       01A1107244411A7C97D0A5AE240C394E89DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
Manifest number:          1A8B
Signing time:             Tue 06 Oct 2026 09:01:26 +0000
Manifest this update:     Tue 06 Oct 2026 09:01:26 +0000
Manifest next update:     Wed 07 Oct 2026 09:01:26 +0000
Files and hashes:         1: 8CplLFWUvz6m9qItnwKIEf1AFuY.roa (hash: +6+r1k0vn4RC5WvNIEMfcVoLtHbswjoBxdnPLuAEN74=)
                          2: E266c8PZX-9psaYwJBeji5vyJ20.crl (hash: JS8+n/lhcpaS1bVOAxwRdJDV7iQKlFtn5qgZcPAXLY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:72:44:41:1a:7c:97:d0:a5:ae:24:0c:39:4e:89:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
        Validity
            Not Before: Oct  6 09:01:26 2026 GMT
            Not After : Oct  7 09:01:26 2026 GMT
        Subject: CN=8980ee688f4b1a3ad2e4ec0bbe0adf6723288e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b5:3b:e1:df:f0:05:62:6e:e6:a0:78:a7:26:
                    4a:c4:04:2b:5f:a0:44:25:6e:ab:aa:84:bc:d6:d3:
                    83:d2:8d:8f:e1:e9:74:f2:2f:77:f5:ea:35:cb:d7:
                    8f:7a:12:14:1a:8b:c9:ac:d0:a7:ea:4f:81:c1:f6:
                    0e:46:24:b4:10:3e:a9:97:79:83:30:6f:2e:ee:3b:
                    a6:8a:cd:38:c5:fe:e7:ee:8a:ba:4e:37:9e:c5:77:
                    18:d2:8a:33:2a:b8:7c:46:49:8b:ac:7a:6c:90:cf:
                    24:85:05:4c:1b:34:01:ff:7e:0f:19:b4:da:1d:fa:
                    c7:c0:f1:f6:60:fb:4e:85:d3:50:3d:74:0e:38:2f:
                    50:a3:89:31:9f:2a:60:5c:41:40:86:05:53:b3:dd:
                    72:25:5b:ae:fb:f5:b9:be:c6:42:a3:4f:b3:5f:f9:
                    20:1a:af:c1:85:c9:94:05:4f:c6:7c:01:a9:e1:60:
                    84:08:94:3a:fb:35:1e:9f:5c:31:e8:27:d9:ac:58:
                    6a:57:d8:ff:6a:42:90:2c:13:ce:02:d8:86:ad:79:
                    6d:96:43:49:98:21:ea:45:a3:04:9a:72:50:47:9d:
                    cb:02:f8:1a:4d:4c:83:57:3b:bc:c4:a3:7e:07:4f:
                    7f:18:cb:31:31:30:b1:ca:88:71:3d:6e:0d:3a:db:
                    86:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:80:EE:68:8F:4B:1A:3A:D2:E4:EC:0B:BE:0A:DF:67:23:28:8E:07
            X509v3 Authority Key Identifier:
                keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ee:a7:9d:fe:5e:11:fe:df:d2:04:96:0d:d7:99:6a:15:bf:
         90:41:b0:1a:c0:4e:ef:80:a7:23:66:a3:10:07:27:e2:ef:c8:
         6f:e3:98:eb:c1:f1:5d:ef:ac:3d:3c:3f:9e:1f:79:b7:a8:b6:
         8f:dd:b9:08:de:da:1b:b5:37:d0:c9:7a:1e:db:63:d3:c8:e7:
         1e:c2:17:26:e3:34:29:49:60:4b:3b:2d:23:85:d3:05:56:ea:
         2c:e0:52:7a:35:0e:b5:25:1e:06:ce:ed:35:09:59:3f:e9:6f:
         62:64:f9:2f:d4:8b:61:d4:92:9b:6b:b9:e0:a6:3a:6f:3d:17:
         60:dc:55:ad:01:9b:c7:86:9c:9d:88:66:93:7e:30:1c:ef:30:
         79:ea:26:2b:66:34:fc:d9:f5:9f:26:15:e3:f9:25:25:f2:a7:
         b3:dc:44:a4:ee:38:21:a4:f6:f1:d3:2e:06:16:2b:82:b6:cc:
         50:c6:12:0a:48:53:6a:21:3b:96:7a:d4:8a:2d:02:22:5e:3f:
         4a:d3:bd:1a:c9:35:f8:6d:27:eb:9a:32:39:8a:41:4e:94:59:
         2d:92:a0:b7:00:cc:9a:d6:98:0f:c2:9b:7c:2f:61:43:be:9a:
         69:26:64:19:c7:a7:3f:11:79:15:3c:78:22:1a:76:4d:6c:79:
         2c:a6:2a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:02:46 2026 by rpki-client