Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
File:                     8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft (raw, json)
Hash identifier:          D/dV36G+tN6SGkoe+jR3WzggWrZ1vKpNVlzHicAL82I=
Subject key identifier:   E2:B7:A1:19:E0:33:74:C8:59:7F:FE:57:1B:98:5D:61:EE:B8:22:25
Authority key identifier: F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0
Certificate issuer:       /CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
Certificate serial:       01A13D1339E9779D6F33508B54CFFA469B76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
Manifest number:          1AA2
Signing time:             Thu 15 Oct 2026 01:00:32 +0000
Manifest this update:     Thu 15 Oct 2026 01:00:32 +0000
Manifest next update:     Fri 16 Oct 2026 01:00:32 +0000
Files and hashes:         1: 8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl (hash: /9ccutwmplBPujcJHxwqSMcb4kutyCNkQdq/6eVKoxY=)
                          2: D0hPX_cQdsaP42kw__DQw0Fz_yc.roa (hash: LtUEAUpBvXQgL6TVsY4N5ahD34Iyyko8ridz4ffMENc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:13:39:e9:77:9d:6f:33:50:8b:54:cf:fa:46:9b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
        Validity
            Not Before: Oct 15 01:00:32 2026 GMT
            Not After : Oct 16 01:00:32 2026 GMT
        Subject: CN=e2b7a119e03374c8597ffe571b985d61eeb82225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6e:b0:fd:4e:dc:28:ae:cb:44:b1:f4:af:3e:
                    b2:8c:55:0c:4e:2e:38:50:cd:17:8e:56:de:19:a1:
                    0b:45:40:7a:58:44:60:4b:0e:72:a0:16:8b:c2:61:
                    e4:28:00:01:fd:49:ad:98:94:a2:44:29:37:e8:84:
                    74:65:10:94:08:76:60:5a:f9:f8:32:61:93:2a:9f:
                    8d:f3:cf:d6:d2:28:0d:c9:d8:a2:30:28:35:c6:0a:
                    39:38:0b:2a:d1:d0:89:bf:47:65:d7:07:2b:3b:f9:
                    ce:7b:50:8d:6d:ce:92:84:c3:c8:95:08:33:69:90:
                    37:11:53:3b:e4:82:48:6b:8e:1e:cf:39:a3:e1:7a:
                    f5:7b:61:49:2b:78:c6:c2:7f:13:56:6c:71:d6:3f:
                    d7:44:18:c3:08:fd:9f:d1:18:5d:4b:3e:c4:82:6a:
                    0b:2a:f5:6a:72:4d:d1:54:57:82:a1:0f:81:44:69:
                    dd:37:b5:e5:cc:3e:61:32:a3:60:bb:04:b7:32:18:
                    3d:b1:f1:db:4d:7e:00:4b:c4:d1:b1:91:77:cb:31:
                    ff:92:e3:bd:84:da:af:20:5b:01:dd:7b:02:50:cd:
                    e7:bd:34:fd:56:4b:72:56:7f:c4:00:59:c7:89:f0:
                    53:08:23:b3:c5:d2:66:3b:33:a6:5b:92:4a:a1:d9:
                    d6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B7:A1:19:E0:33:74:C8:59:7F:FE:57:1B:98:5D:61:EE:B8:22:25
            X509v3 Authority Key Identifier:
                keyid:F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:7c:28:b5:4c:5d:77:0e:2f:7c:4d:08:67:61:6e:18:5d:53:
         df:aa:d5:74:fb:cf:08:db:13:b8:eb:d6:e4:49:80:ba:a0:08:
         03:d7:d8:35:40:35:17:f9:27:56:1e:d9:6c:6b:42:f4:4f:b4:
         cf:a7:0b:2a:7b:5c:3b:30:52:1a:70:f2:88:61:f9:b9:04:50:
         38:b6:32:23:4a:e5:f7:23:3d:41:f6:29:a7:bd:42:b2:21:bc:
         28:c4:48:bf:b1:43:dc:0e:b4:78:af:53:cd:b0:62:ad:69:20:
         87:7f:e8:5c:32:b8:60:df:a2:4e:45:6a:25:8b:84:e4:ff:21:
         47:e9:a7:3d:71:1f:25:e3:95:82:c9:4f:1a:3c:42:83:77:7a:
         03:67:70:e4:c2:17:e9:7b:8a:69:d1:73:2a:67:74:13:b8:a7:
         cd:a3:84:5c:09:a9:1a:b1:93:96:ea:51:57:a0:a4:1b:7e:99:
         57:7b:0b:bc:b1:d8:50:2d:4a:f2:7b:f4:c6:e5:e4:64:ed:b3:
         13:8d:db:da:b8:a5:4f:99:5a:a7:df:88:fa:0f:81:7b:8e:b9:
         29:c8:d7:f8:da:b4:ff:e2:ea:0a:4d:59:c0:01:f7:e3:f5:5c:
         2a:40:56:36:e5:3b:f4:82:8e:e4:67:34:4a:85:c6:5a:b3:c6:
         76:7c:f8:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9Eznpd51vM1CLVM/6Rpt2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjFmYTFmZTZkYzA5ZmE1NGQxYWY1OWMyZTEwMGNkMTQx
MmM3ZjAwHhcNMjYxMDE1MDEwMDMyWhcNMjYxMDE2MDEwMDMyWjAzMTEwLwYDVQQD
EyhlMmI3YTExOWUwMzM3NGM4NTk3ZmZlNTcxYjk4NWQ2MWVlYjgyMjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq26w/U7cKK7LRLH0rz6yjFUMTi44
UM0XjlbeGaELRUB6WERgSw5yoBaLwmHkKAAB/UmtmJSiRCk36IR0ZRCUCHZgWvn4
MmGTKp+N88/W0igNydiiMCg1xgo5OAsq0dCJv0dl1wcrO/nOe1CNbc6ShMPIlQgz
aZA3EVM75IJIa44ezzmj4Xr1e2FJK3jGwn8TVmxx1j/XRBjDCP2f0RhdSz7EgmoL
KvVqck3RVFeCoQ+BRGndN7XlzD5hMqNguwS3Mhg9sfHbTX4AS8TRsZF3yzH/kuO9
hNqvIFsB3XsCUM3nvTT9VktyVn/EAFnHifBTCCOzxdJmOzOmW5JKodnWiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOK3oRngM3TIWX/+VxuYXWHuuCIlMB8GA1UdIwQY
MBaAFPJh+h/m3An6VNGvWcLhAM0UEsfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1INkgtYmNDZnBVMGE5Wnd1RUF6UlFTeF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi81ZTBlNGYtNzQ2Yy00OTA4LTg1NWQt
ZTc3ZTBlMjFiMTZhLzEvOG1INkgtYmNDZnBVMGE5Wnd1RUF6UlFTeF9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi81ZTBlNGYtNzQ2Yy00OTA4LTg1NWQtZTc3ZTBlMjFiMTZh
LzEvOG1INkgtYmNDZnBVMGE5Wnd1RUF6UlFTeF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnwotUxd
dw4vfE0IZ2FuGF1T36rVdPvPCNsTuOvW5EmAuqAIA9fYNUA1F/knVh7ZbGtC9E+0
z6cLKntcOzBSGnDyiGH5uQRQOLYyI0rl9yM9QfYpp71CsiG8KMRIv7FD3A60eK9T
zbBirWkgh3/oXDK4YN+iTkVqJYuE5P8hR+mnPXEfJeOVgslPGjxCg3d6A2dw5MIX
6XuKadFzKmd0E7inzaOEXAmpGrGTlupRV6CkG36ZV3sLvLHYUC1K8nv0xuXkZO2z
E43b2rilT5lap9+I+g+Be465KcjX+Nq0/+LqCk1ZwAH34/VcKkBWNuU79IKO5Gc0
SoXGWrPGdnz43w==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:26 2026 by rpki-client