Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
File:                     8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json)
Hash identifier:          4h3ZjXp8e+gfPRgwT/SBwWCIG2PvcxDpryGU+rFIXcc=
Subject key identifier:   38:0D:65:EE:14:5A:55:63:9A:A5:C1:78:0D:DD:7E:13:D8:81:E7:2B
Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Certificate issuer:       /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Certificate serial:       01A13E25FAA9C55F8B774D0D43C8CC8C77A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
Manifest number:          1AA2
Signing time:             Thu 15 Oct 2026 06:00:38 +0000
Manifest this update:     Thu 15 Oct 2026 06:00:38 +0000
Manifest next update:     Fri 16 Oct 2026 06:00:38 +0000
Files and hashes:         1: 1-0HVLayObU8RuL6OrsnJm4gmTnI.asa (hash: KYPcud2EQy4OYgiyeuat0HLeEC0DLCcTFa4Ml4StUxY=)
                          2: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: /tUsEsTUpt4H0bm+0q/zN8uOv6xQ2WEjt/SSxnvo9bg=)
                          3: ZHNg-iGHdhJIyPbT0YesOHZSckA.roa (hash: jtRC2+2eYimT7dpLaE8cbiYXDkhbQMmqL54jAdK1K3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:25:fa:a9:c5:5f:8b:77:4d:0d:43:c8:cc:8c:77:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
        Validity
            Not Before: Oct 15 06:00:38 2026 GMT
            Not After : Oct 16 06:00:38 2026 GMT
        Subject: CN=380d65ee145a55639aa5c1780ddd7e13d881e72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:91:25:43:b9:fa:7a:0e:6b:2e:97:0d:38:50:
                    cd:d3:0a:61:1a:ab:42:c0:75:88:b4:85:8a:dc:75:
                    8b:2e:45:46:b3:aa:aa:e3:3e:f2:d4:b3:60:bf:9e:
                    dd:01:17:8c:f9:3d:d1:fb:4a:ee:a6:b6:8a:da:5c:
                    aa:94:bc:55:1f:7f:8f:8f:dc:4b:5c:2e:66:d0:99:
                    b0:8a:aa:77:0b:ae:61:f9:13:d3:61:37:72:07:c7:
                    6e:04:b5:2a:db:da:fa:58:4c:d6:d1:37:e5:fa:9f:
                    1c:bf:a0:ef:47:3d:62:c0:ee:af:3e:b3:c9:83:f3:
                    ee:0e:c1:21:85:ab:92:96:7d:8a:a7:25:c0:5e:f3:
                    9d:e2:47:4f:08:7d:7c:af:ab:b9:ed:91:0e:40:cc:
                    c4:58:a9:f8:5f:df:ea:a3:16:71:f9:f8:4b:09:7e:
                    ad:c8:ab:e3:54:f3:57:b5:7b:08:2d:74:13:b7:24:
                    c3:14:89:d5:3c:4e:d9:fa:d1:52:34:20:ff:7d:82:
                    a3:72:bc:3d:95:5e:07:d1:d3:6f:0c:e3:8e:f9:07:
                    9f:9e:c9:cd:6a:25:17:80:47:74:3d:cd:a5:67:4f:
                    8b:ba:df:a7:0b:b4:3d:b5:cc:36:d0:c5:80:45:ba:
                    a8:85:ba:26:c3:2a:1e:ae:76:9e:6c:f7:ac:1f:a3:
                    b5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0D:65:EE:14:5A:55:63:9A:A5:C1:78:0D:DD:7E:13:D8:81:E7:2B
            X509v3 Authority Key Identifier:
                keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:09:d0:33:1e:78:4a:14:38:f3:82:04:62:d6:ba:c0:78:26:
         9c:0a:1f:55:70:86:26:cd:17:1c:b6:15:24:08:01:16:d0:d2:
         8e:f4:0a:4e:59:f7:0e:30:cf:b8:b2:fc:38:ab:0a:f3:bb:32:
         f1:69:65:e5:e3:9c:d9:23:84:16:43:f5:e9:36:4d:ef:7e:92:
         75:e6:8d:14:2c:c8:30:8f:ab:2f:0a:48:a6:05:5a:98:c1:1d:
         fa:c9:ef:27:44:fe:61:a8:38:8d:cc:01:bb:eb:01:67:43:bf:
         40:c1:90:23:20:1a:1d:54:c2:32:6b:5e:1e:f3:0a:ef:e3:09:
         f8:c8:e2:e5:d7:37:dd:7b:9b:ea:44:90:6a:b7:10:e7:0b:4b:
         74:50:67:cf:5a:23:9c:82:3f:39:4c:3e:50:38:e5:3d:87:03:
         f4:2e:06:fb:20:83:8d:77:09:d1:97:83:78:0d:44:7b:89:b0:
         d4:f9:9d:07:2a:64:e6:22:be:0d:e4:69:25:b4:ee:cf:ba:76:
         7b:75:0e:0f:fd:ad:cd:56:4e:04:e7:5c:78:43:6b:4b:32:4b:
         48:12:65:ec:07:df:8e:0d:c0:96:34:68:4d:2d:81:8f:60:c4:
         17:6b:a1:c2:88:34:fe:e6:c0:c3:78:45:89:34:58:60:ef:1a:
         62:77:51:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:32:50 2026 by rpki-client