Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File:                     8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier:          AZmX6q0vEZKd8RK9gya+ImPst/iNo519WezUA8/s6R0=
Subject key identifier:   F9:8B:96:F7:77:E5:4C:1B:81:37:F5:78:85:18:E3:EE:3B:42:B3:41
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer:       /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial:       01A000C9FC32517290A96C9BBFBCC5D39D15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number:          1A03
Signing time:             Fri 14 Aug 2026 15:00:32 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:32 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:32 +0000
Files and hashes:         1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: sgoLgq+2gAAYGU8r1P3pmOb0z3HBoQUnIvl+72ydfsU=)
                          2: PLcdq8HBbATb33TrLOZuRDuXEVQ.roa (hash: XGsrxoZcwiWsioFa6/X1psR1kn5m17Bl9f4lBLZE5dk=)
                          3: yYbe2iJW7P_sCDhFY34_L0RrDto.roa (hash: a8JSg8aR8AsTXy0JLCDrOWelsw6IkJ4MgTxTFuy83io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:c9:fc:32:51:72:90:a9:6c:9b:bf:bc:c5:d3:9d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
        Validity
            Not Before: Aug 14 15:00:32 2026 GMT
            Not After : Aug 15 15:00:32 2026 GMT
        Subject: CN=f98b96f777e54c1b8137f5788518e3ee3b42b341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c4:79:38:75:12:32:1e:8c:61:50:de:4e:0f:
                    dc:15:6e:85:e1:69:46:e1:03:55:64:01:11:4a:c4:
                    39:c7:23:eb:0b:7b:2e:87:ee:1a:43:17:db:e9:c2:
                    af:27:2d:f3:46:0d:e8:e5:54:0b:76:84:eb:c6:6f:
                    de:35:9b:4d:53:5e:9e:42:50:8b:d9:21:a0:b2:35:
                    8f:2a:dc:4f:b9:a0:98:07:72:75:42:a9:82:bc:3d:
                    73:e6:3c:6a:c9:63:d6:c3:81:5b:06:b7:20:c9:6d:
                    ce:4e:86:1d:00:0f:ca:c5:be:1d:ee:c9:a1:52:f7:
                    2f:03:00:9e:c3:98:56:20:26:de:a9:a7:84:e5:19:
                    f2:1d:9e:62:2d:fd:58:4b:be:a6:dd:fc:c4:11:cc:
                    6e:1c:82:2f:ec:9e:2f:3a:6b:f8:da:d5:e9:bd:4b:
                    b8:f9:0f:8e:9f:65:1f:c2:c8:b9:8c:c0:d3:99:7e:
                    36:4e:04:43:b0:cf:9a:12:5f:a7:b7:3d:7a:47:0f:
                    c6:3f:a7:c2:8f:ed:d0:4d:f3:40:12:bb:2b:55:0e:
                    b8:17:de:43:76:88:c3:f7:49:31:8b:31:02:a0:bc:
                    cf:a4:70:b2:1e:52:b6:50:c0:2f:8f:56:90:eb:85:
                    d8:20:f5:76:90:08:1b:55:ab:e1:52:ac:54:00:01:
                    85:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8B:96:F7:77:E5:4C:1B:81:37:F5:78:85:18:E3:EE:3B:42:B3:41
            X509v3 Authority Key Identifier:
                keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:37:3f:e5:7c:56:77:df:a0:d3:80:2b:77:59:85:29:c5:67:
         50:4c:84:19:85:52:dc:94:68:22:46:22:40:f3:2c:be:41:4f:
         d5:da:b0:2b:6e:e0:ab:3c:1e:e6:97:b5:47:a8:10:62:f4:aa:
         2f:2b:ea:c1:3d:1d:09:94:12:50:8a:32:99:4d:09:4f:7e:26:
         34:ef:bb:bb:6f:d2:bb:af:69:09:e1:4f:70:ea:a3:5b:dd:ed:
         a7:7a:6d:57:d8:6c:b3:a0:7c:aa:a0:37:61:80:37:5a:a9:6b:
         00:19:d0:b0:dd:d3:f7:ea:b8:59:6a:ec:d3:3e:57:b7:41:a5:
         c7:d6:80:af:cf:ed:2b:6d:7f:5e:fd:65:24:a8:f5:ff:e2:48:
         9e:76:b4:41:ca:a1:0a:68:ff:47:4c:28:6f:79:1b:24:ad:63:
         14:6e:ca:18:67:57:9a:86:e0:e8:7b:5d:e2:46:a6:b9:df:94:
         95:66:65:35:a6:75:f9:0d:73:d0:68:3c:bc:8f:d7:89:9b:8b:
         e5:cd:4e:6d:dc:18:92:d6:39:ad:f3:72:4f:6e:26:0a:e0:06:
         4d:a9:68:e2:ec:e9:eb:dd:6d:fb:1c:e9:c3:b4:df:53:84:56:
         e2:43:0d:34:d6:e5:92:bd:d6:71:0e:91:27:04:6e:85:7b:a4:
         04:b5:1e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:09 2026 by rpki-client