Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft
File:                     in2Cv6bL-YO5cDSUAb3veO1mgrg.mft (raw, json)
Hash identifier:          +M8knUGB2UZl3F6sFq61OiciA+NnNySNObtIFNgwr04=
Subject key identifier:   B5:86:55:91:0A:50:CE:1D:9C:FC:4F:46:4A:7A:FD:7C:81:8C:F9:1C
Authority key identifier: 8A:7D:82:BF:A6:CB:F9:83:B9:70:34:94:01:BD:EF:78:ED:66:82:B8
Certificate issuer:       /CN=8a7d82bfa6cbf983b970349401bdef78ed6682b8
Certificate serial:       01A08CE8DFA10D3EDBAFEA2F95C700777376
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft
Manifest number:          8D
Signing time:             Thu 10 Sep 2026 20:01:06 +0000
Manifest this update:     Thu 10 Sep 2026 20:01:06 +0000
Manifest next update:     Fri 11 Sep 2026 20:01:06 +0000
Files and hashes:         1: hMcWmfOrDrAMf7dFpd9dzvNPNAc.asa (hash: zDEzbE4uwtCgoLiCH/chQKVEo68ut8ck0BWOTkrF+1g=)
                          2: in2Cv6bL-YO5cDSUAb3veO1mgrg.crl (hash: 5sUZatDfKJv2KQF8JLmbfvmyxII8TFY0vH3lmrSPJro=)
                          3: xS8E-QjHw2dzPf1KkLqn10hE7LM.roa (hash: 5/fVJMfp+DX4M6I9ZjhWtgFG3senFJ4L1a5dgOE8EkY=)
                          4: yeXW_YTNCb28ui0glUomJkKeHCk.asa (hash: vdoh5rReyHOdjiVdFljYmY00V/dpR9j9Pzzhrb2/aMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:e8:df:a1:0d:3e:db:af:ea:2f:95:c7:00:77:73:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7d82bfa6cbf983b970349401bdef78ed6682b8
        Validity
            Not Before: Sep 10 20:01:06 2026 GMT
            Not After : Sep 11 20:01:06 2026 GMT
        Subject: CN=b58655910a50ce1d9cfc4f464a7afd7c818cf91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3a:53:a2:93:0a:bd:d9:29:bd:e4:6e:d9:52:
                    f8:bf:60:b1:e3:92:12:38:f7:1b:73:ee:7c:15:8c:
                    23:6e:97:54:a4:0e:e4:92:f4:34:ee:98:21:cf:e2:
                    c4:0b:79:81:28:19:e5:a6:ce:02:ba:2a:d8:57:58:
                    27:b9:6d:76:c1:b2:3a:e6:dc:0e:68:35:d8:0a:0a:
                    cc:d9:af:57:12:ce:4f:ee:d3:5e:99:79:0e:8c:f5:
                    f9:c4:2c:4f:a9:bd:4d:e1:37:e3:28:8c:25:3c:63:
                    71:fb:26:11:c7:e9:ec:99:ff:85:38:7a:97:da:7a:
                    82:7b:0b:57:f0:cd:a1:b4:e1:49:9d:59:93:69:1d:
                    b2:88:83:99:43:fa:64:59:1a:84:40:22:3b:9a:00:
                    cc:8e:41:36:a2:6c:25:e8:1d:99:3c:01:a2:0d:93:
                    6d:05:a0:43:02:88:89:35:38:9d:ee:08:80:c1:90:
                    b6:f8:40:68:75:e4:20:82:20:aa:c6:fe:33:c1:5a:
                    fe:f0:1f:42:73:ff:0a:06:31:29:a9:08:b8:cf:95:
                    a3:67:c9:c7:c6:ea:05:15:bd:61:4a:da:a6:ed:c1:
                    2d:c6:a4:13:9a:75:33:10:24:98:83:5d:6f:85:bb:
                    9a:ba:a6:c4:fe:26:66:d3:84:ed:0f:d1:5a:1e:12:
                    ef:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:86:55:91:0A:50:CE:1D:9C:FC:4F:46:4A:7A:FD:7C:81:8C:F9:1C
            X509v3 Authority Key Identifier:
                keyid:8A:7D:82:BF:A6:CB:F9:83:B9:70:34:94:01:BD:EF:78:ED:66:82:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:3c:cf:88:01:88:01:f4:33:49:48:ee:73:47:cf:64:a7:50:
         f9:98:fc:40:c2:b7:12:29:7c:4e:f0:5b:50:cf:c1:72:98:6e:
         b0:a1:79:f4:63:fc:ca:d8:9e:2f:15:e6:c6:02:b6:5b:eb:c6:
         0a:14:91:5e:b6:80:f3:07:14:db:d7:f2:fe:80:ce:73:dc:af:
         b7:d8:ba:70:06:82:d4:56:cc:51:69:5d:b6:ba:07:b8:63:2f:
         bc:fc:5f:5c:9c:83:da:5d:cf:8a:58:07:94:16:62:3f:67:de:
         70:66:45:bb:b2:b4:44:0f:e4:a1:6a:ad:58:c6:68:eb:58:34:
         70:99:6d:57:b8:1e:f4:b5:1d:82:32:d0:90:80:ed:9d:5e:fd:
         85:01:0b:83:1b:9d:a7:18:45:55:93:36:c7:c5:02:4d:e4:68:
         bf:13:d0:b6:1a:51:3b:39:08:82:ae:d3:10:70:9c:da:f3:bf:
         a0:14:7e:46:3c:ef:12:30:ca:f7:d6:c9:8f:21:f6:ca:5e:ee:
         8d:84:06:31:5d:52:aa:38:f1:9e:0f:12:e2:dd:64:a6:7b:29:
         ae:16:42:a3:f2:be:c1:fe:7f:e0:ad:8b:1c:85:22:7a:21:58:
         ea:d8:3a:ee:45:01:11:03:51:17:e6:b7:f8:87:d9:42:90:46:
         96:f2:53:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:02:18 2026 by rpki-client