Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
File:                     8V__itxu51EnLAqR0F3K_36NLWk.mft (raw, json)
Hash identifier:          tiC6gD8WqSO6OqjOVfrGGtg+rUreKmi2+1OP5aoSEzw=
Subject key identifier:   55:0E:BB:3E:D8:E9:6E:F2:3E:0B:05:95:5B:D3:2C:59:6C:CC:3B:A8
Authority key identifier: F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69
Certificate issuer:       /CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
Certificate serial:       01A141958973186231AE0E3F8E9E58EBC495
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
Manifest number:          1AA4
Signing time:             Thu 15 Oct 2026 22:01:21 +0000
Manifest this update:     Thu 15 Oct 2026 22:01:21 +0000
Manifest next update:     Fri 16 Oct 2026 22:01:21 +0000
Files and hashes:         1: 8V__itxu51EnLAqR0F3K_36NLWk.crl (hash: BE6TRra5LEcQayZrTDaPgl4iqYRvbvhJR7n58ZiXYp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:41:95:89:73:18:62:31:ae:0e:3f:8e:9e:58:eb:c4:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
        Validity
            Not Before: Oct 15 22:01:21 2026 GMT
            Not After : Oct 16 22:01:21 2026 GMT
        Subject: CN=550ebb3ed8e96ef23e0b05955bd32c596ccc3ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:15:23:20:f0:49:b9:1d:2a:62:a9:1f:18:
                    98:ff:8c:7c:8c:fd:51:f7:dd:a8:6f:37:09:57:50:
                    29:99:63:00:65:17:20:09:8b:58:54:55:b4:f4:e7:
                    f2:e6:81:eb:27:f6:0f:7a:0b:09:df:0b:d5:76:1e:
                    71:3d:c9:6a:62:89:32:c7:ee:30:18:fc:30:ee:ce:
                    16:10:90:b6:ce:69:35:c7:0d:0d:06:9c:17:3b:77:
                    d0:55:3e:a0:58:6e:62:35:00:17:53:00:8f:c5:0a:
                    06:c8:ce:d3:c8:5e:cb:48:e4:48:29:5e:a8:64:06:
                    a6:b7:15:14:37:e4:98:71:10:72:87:1b:2d:8a:9b:
                    dd:f3:5d:08:1d:55:4f:0b:fa:ea:93:0b:e6:97:75:
                    30:58:07:bf:23:51:00:6d:2a:23:c0:98:0f:5e:ac:
                    2f:f1:90:2c:17:b1:49:a4:54:32:e8:2d:16:3f:70:
                    3b:42:d7:92:d8:0a:20:23:c7:c7:65:c7:95:ab:2a:
                    8e:b0:a7:b9:6d:ae:46:14:64:6d:e3:df:e8:67:bd:
                    d0:b1:e8:49:32:05:b1:11:3a:98:66:e8:a3:42:a3:
                    a0:64:b0:3e:3d:da:89:4c:a7:c4:73:e7:ea:42:9c:
                    11:05:38:9c:b9:35:87:e6:56:32:27:c7:95:ed:34:
                    17:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0E:BB:3E:D8:E9:6E:F2:3E:0B:05:95:5B:D3:2C:59:6C:CC:3B:A8
            X509v3 Authority Key Identifier:
                keyid:F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:7e:b0:49:22:ed:6d:52:52:6d:4f:3b:85:d2:13:a9:98:fe:
         52:78:8f:57:ae:31:d0:ad:e5:cb:b0:66:79:57:1d:c4:d4:13:
         7d:d9:87:13:13:17:1d:b5:ef:7b:d4:e4:cc:0c:4f:1b:bd:b9:
         9c:79:0b:a6:f6:29:60:08:90:25:a6:db:27:a5:9a:c4:f0:2d:
         c3:53:af:09:0b:cf:9e:46:c7:74:b0:c2:eb:5c:5e:8b:ae:2f:
         2f:ae:73:4b:42:ac:51:26:80:5d:77:03:e3:d9:9a:43:4d:65:
         05:a0:63:7b:6c:e8:da:fe:12:b6:8a:71:d8:b5:c0:fb:df:f2:
         d6:8e:68:15:f5:53:a9:62:21:d6:21:99:c5:81:44:07:7c:55:
         09:c7:f0:43:a1:66:95:aa:8b:19:51:97:0c:a0:33:2a:e5:6d:
         51:7a:35:21:5d:80:b1:38:94:cf:f2:f7:25:f1:ad:32:70:7f:
         46:69:a5:9e:51:15:a8:83:1d:c5:0f:8e:b7:e9:57:31:ac:b4:
         c2:aa:fb:37:6a:92:de:f7:ff:ea:fd:f8:b9:82:17:7e:cd:80:
         98:07:ca:eb:9c:22:1d:2d:41:2a:7f:08:46:9d:eb:00:fa:db:
         3a:2a:f3:82:56:62:a4:9e:da:00:54:06:da:1b:17:7d:ca:06:
         13:9c:00:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:06:26 2026 by rpki-client