Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/d38221-4771-46dd-b92e-45109f0bec54/1/F8sPV3nXgvvzmCWNWZq_uxfUd1c.mft
File:                     F8sPV3nXgvvzmCWNWZq_uxfUd1c.mft (raw, json)
Hash identifier:          ol1rweEjaRCw3kYYhGrnL2AuDYyQJKfbGZ6KKQePrP4=
Subject key identifier:   71:12:50:AA:C2:CE:9B:6D:68:C0:03:14:C8:5D:E6:E1:5D:99:FB:2D
Authority key identifier: 17:CB:0F:57:79:D7:82:FB:F3:98:25:8D:59:9A:BF:BB:17:D4:77:57
Certificate issuer:       /CN=17cb0f5779d782fbf398258d599abfbb17d47757
Certificate serial:       01A08B67E34E2B0A08D9276A8E1913BABA44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F8sPV3nXgvvzmCWNWZq_uxfUd1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/d38221-4771-46dd-b92e-45109f0bec54/1/F8sPV3nXgvvzmCWNWZq_uxfUd1c.mft
Manifest number:          0118
Signing time:             Thu 10 Sep 2026 13:00:36 +0000
Manifest this update:     Thu 10 Sep 2026 13:00:36 +0000
Manifest next update:     Fri 11 Sep 2026 13:00:36 +0000
Files and hashes:         1: F8sPV3nXgvvzmCWNWZq_uxfUd1c.crl (hash: 8rYfV/vDiz/d8WGsxF24tehuSrn7TPxpDBsfeWV8Pys=)
                          2: syhTH2wX3u_tD7zBh6--t1G7aME.roa (hash: su6NeICTH9HcdREPe6tfxxbXZnMHIW68+G5rwPESiIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/d38221-4771-46dd-b92e-45109f0bec54/1/F8sPV3nXgvvzmCWNWZq_uxfUd1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/d38221-4771-46dd-b92e-45109f0bec54/1/F8sPV3nXgvvzmCWNWZq_uxfUd1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F8sPV3nXgvvzmCWNWZq_uxfUd1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:67:e3:4e:2b:0a:08:d9:27:6a:8e:19:13:ba:ba:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17cb0f5779d782fbf398258d599abfbb17d47757
        Validity
            Not Before: Sep 10 13:00:36 2026 GMT
            Not After : Sep 11 13:00:36 2026 GMT
        Subject: CN=711250aac2ce9b6d68c00314c85de6e15d99fb2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ac:b0:ed:2e:dc:67:b1:85:6a:ca:87:1a:98:
                    38:92:34:97:fb:d3:bd:f3:0d:68:87:a2:00:50:37:
                    b2:68:ec:4a:06:57:0b:fc:08:3f:ad:31:f2:c1:96:
                    3a:93:70:c8:c7:b4:6a:0d:3d:3d:63:37:fb:07:1c:
                    78:44:47:1c:50:5c:a4:bf:01:86:8b:11:38:14:90:
                    29:00:29:c2:17:10:02:bb:74:b4:85:d2:19:43:8b:
                    63:b3:16:98:1c:e4:5b:6d:e9:ad:02:d6:0a:d3:70:
                    de:c2:0a:d6:37:47:fb:94:48:c3:bc:0d:69:b7:a1:
                    66:9d:83:f1:be:49:e5:d2:57:bd:9a:c0:5d:e3:82:
                    0e:3b:77:b1:c3:56:57:0d:4f:81:7c:d8:22:d8:7e:
                    9f:49:61:ea:2c:1f:19:bc:4a:62:7e:18:ea:c8:74:
                    19:7b:a9:5b:83:00:9b:88:f8:22:5b:e0:d6:b5:c9:
                    c6:f0:7e:47:5d:cf:1e:e5:5b:3d:e2:ef:c8:94:6c:
                    53:9e:58:8b:68:44:60:fd:e2:6d:99:ca:8f:18:fb:
                    20:c4:d2:3c:3b:f4:21:74:f3:84:a1:21:26:8f:69:
                    cf:2f:dc:6a:32:4d:fc:93:04:eb:20:9e:62:9f:c5:
                    9d:ab:f4:a5:db:e5:ba:f2:bc:30:b4:12:cb:e9:33:
                    b2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:12:50:AA:C2:CE:9B:6D:68:C0:03:14:C8:5D:E6:E1:5D:99:FB:2D
            X509v3 Authority Key Identifier:
                keyid:17:CB:0F:57:79:D7:82:FB:F3:98:25:8D:59:9A:BF:BB:17:D4:77:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8sPV3nXgvvzmCWNWZq_uxfUd1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d38221-4771-46dd-b92e-45109f0bec54/1/F8sPV3nXgvvzmCWNWZq_uxfUd1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d38221-4771-46dd-b92e-45109f0bec54/1/F8sPV3nXgvvzmCWNWZq_uxfUd1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:1e:f5:a8:d8:06:13:2b:47:3c:a5:2a:b0:e8:2f:94:9d:36:
         8b:4d:f2:54:44:bd:34:eb:0c:be:da:10:bf:7e:0a:cf:17:5b:
         2d:b9:23:1c:70:1e:a9:db:d3:ad:4a:42:f7:86:c4:f5:f4:fd:
         e4:f8:06:10:c8:c2:09:0d:fc:57:4a:73:e5:3e:18:82:72:1f:
         b9:70:e6:5c:b5:14:39:5c:3c:f0:b7:b1:c1:bc:52:df:fd:b9:
         1e:df:a9:1f:8d:21:f9:5c:7b:43:26:d5:c5:a8:56:0d:4a:2c:
         c7:af:27:77:df:10:10:9b:97:91:64:f2:03:66:c1:90:b5:2c:
         ec:22:5c:2f:ef:5e:0c:3c:67:d3:e8:f8:0d:ea:c8:77:8a:a7:
         74:78:0b:0a:8b:be:1a:8d:35:64:cb:c8:7f:b4:9b:77:56:83:
         0b:a9:c6:f4:a3:09:3c:54:84:ae:84:d9:76:ee:16:ad:8f:5b:
         b9:40:6d:12:83:9d:35:51:3e:3e:81:72:c2:fd:c7:cd:53:50:
         3d:2d:a0:c5:00:00:ca:06:04:ce:62:4f:99:1d:b7:82:1c:61:
         c2:28:df:9f:88:01:a2:f0:90:da:c0:fa:e3:26:84:10:19:19:
         78:0d:13:4e:e0:4b:39:99:c7:5e:00:79:6b:34:ef:81:e8:0f:
         57:27:ea:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:33:45 2026 by rpki-client