Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
File:                     8WmQKta3v0YB7qpecj7yPXD6dxQ.mft (raw, json)
Hash identifier:          DvL0KFwYAzCwGDCS3lKX4/8F2SDUDTs87lw8M0TXDHc=
Subject key identifier:   4D:A8:68:01:2D:E3:09:4E:A3:23:5C:68:D6:72:81:B7:48:F1:F0:AD
Authority key identifier: F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14
Certificate issuer:       /CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
Certificate serial:       01A140834765419553AE19B8DAE02B3DB442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
Manifest number:          1AA4
Signing time:             Thu 15 Oct 2026 17:01:47 +0000
Manifest this update:     Thu 15 Oct 2026 17:01:47 +0000
Manifest next update:     Fri 16 Oct 2026 17:01:47 +0000
Files and hashes:         1: 8A44F-HK4brDvcdx38UFaUUZrxg.roa (hash: J1l91xAYUMrUVrPKe9o7rX2U+//nR5fojqbrmgbxxMA=)
                          2: 8WmQKta3v0YB7qpecj7yPXD6dxQ.crl (hash: pcRNnJzfaCh2gKM/fJmXNZHzEL9knxUiOUyA1UQLCDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:83:47:65:41:95:53:ae:19:b8:da:e0:2b:3d:b4:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
        Validity
            Not Before: Oct 15 17:01:47 2026 GMT
            Not After : Oct 16 17:01:47 2026 GMT
        Subject: CN=4da868012de3094ea3235c68d67281b748f1f0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:93:37:2b:5c:85:d7:18:f2:90:cb:1e:ae:a3:
                    c5:34:2e:53:49:6d:00:f7:26:67:23:e4:be:f5:3a:
                    05:07:ba:32:3c:16:54:a6:ae:c3:dd:2a:75:e4:49:
                    dc:43:71:bc:23:de:3c:fe:1d:54:f1:55:49:f0:61:
                    e1:94:dc:0a:ab:95:59:34:36:f7:b7:f3:6a:f0:fd:
                    1c:e0:32:40:8d:05:b4:46:94:a1:c2:d6:82:8d:a3:
                    7b:d1:6d:31:9c:10:04:ca:e7:5a:14:8a:df:57:b7:
                    a8:1a:96:0f:08:3f:02:11:0c:46:d5:8f:ce:ee:ff:
                    b9:50:8d:fa:24:62:56:c9:c8:e5:2f:4d:64:f5:4e:
                    4a:67:d9:ba:ff:2c:7e:4c:8e:71:53:2b:26:b9:ee:
                    40:ba:33:9b:7d:24:a9:b2:fd:94:22:6b:37:21:8a:
                    a4:26:74:28:2f:f7:c6:9a:04:91:7f:61:da:0d:bc:
                    e8:e5:36:b7:e3:db:4a:51:23:a2:7a:17:6e:1b:ee:
                    0c:b1:32:cd:2a:96:3f:71:99:cd:99:56:3b:9f:15:
                    5c:d4:41:99:31:31:d4:de:57:d7:77:d2:52:2d:64:
                    c3:d3:41:26:c9:60:ee:35:a9:5c:54:f8:b6:5b:aa:
                    06:0a:2d:d1:30:3c:fe:dc:cd:3e:3c:a7:90:9e:e9:
                    a2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A8:68:01:2D:E3:09:4E:A3:23:5C:68:D6:72:81:B7:48:F1:F0:AD
            X509v3 Authority Key Identifier:
                keyid:F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:15:4f:fa:28:5d:8d:9b:0b:7e:a9:04:bb:eb:7d:8a:96:21:
         99:58:c4:75:2d:ad:44:b4:4b:16:d4:f0:ff:d9:1d:2d:f6:f5:
         eb:23:88:ea:40:3a:93:f4:ad:90:7a:7b:0b:ab:fb:89:05:c1:
         0d:24:e5:c0:fd:7d:21:19:4b:bb:27:f0:f8:43:57:d0:e8:5b:
         7f:32:62:d3:32:76:07:71:6c:9b:7d:71:82:95:9e:1e:97:b7:
         36:0e:0b:f4:e2:55:14:85:1f:3f:42:3b:f0:b4:53:30:86:3b:
         0c:bc:36:d3:a5:88:65:36:9f:68:85:a2:ff:b5:1d:46:96:ee:
         b0:40:3f:5e:79:1a:d5:eb:0e:19:f8:29:1f:60:cb:4b:4b:6c:
         e8:64:39:ff:49:fc:cd:a8:29:8f:ee:0c:ec:75:b8:38:4f:0a:
         42:f7:22:53:0b:64:3e:98:c5:61:66:0d:fa:da:3a:05:c3:87:
         f9:3c:52:a3:2a:3f:d3:3b:4b:18:93:93:ff:43:7f:de:a4:25:
         c0:ef:ce:56:cc:ed:09:b5:5f:f1:91:35:00:54:38:ad:5f:53:
         b4:67:03:9c:72:06:b3:d3:c3:a9:40:4a:bf:76:7e:08:9e:a9:
         73:5f:d7:83:07:94:9b:c3:32:61:b4:de:0c:16:05:63:90:ef:
         55:67:c3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:24:45 2026 by rpki-client