Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
File:                     8D9771R9ACUziqa2rueqHb4Urio.mft (raw, json)
Hash identifier:          kKK8cCPKgnJAswlf4zXiS38ER/x4nf3jcXv0LjaDHe0=
Subject key identifier:   6F:C0:5E:AE:1F:DF:AD:22:9B:80:65:5D:7D:EF:C2:E9:AB:56:66:3F
Authority key identifier: F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
Certificate issuer:       /CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Certificate serial:       01A13FA77721127421885FE018A4AD729EDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
Manifest number:          1AA2
Signing time:             Thu 15 Oct 2026 13:01:41 +0000
Manifest this update:     Thu 15 Oct 2026 13:01:41 +0000
Manifest next update:     Fri 16 Oct 2026 13:01:41 +0000
Files and hashes:         1: 8D9771R9ACUziqa2rueqHb4Urio.crl (hash: r5qqss3pFIPlV2K87QPlhLXPpia6X4ugZwCIkl+do8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a7:77:21:12:74:21:88:5f:e0:18:a4:ad:72:9e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
        Validity
            Not Before: Oct 15 13:01:41 2026 GMT
            Not After : Oct 16 13:01:41 2026 GMT
        Subject: CN=6fc05eae1fdfad229b80655d7defc2e9ab56663f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:aa:93:89:d3:9b:4e:aa:48:e3:ec:d7:7c:9a:
                    51:c8:f7:fe:29:f6:f7:d0:50:53:5c:ce:0c:23:63:
                    bb:ef:19:eb:02:43:22:17:34:12:86:db:4f:9e:96:
                    a0:c8:40:ac:05:a7:35:6a:b2:d3:02:b2:de:39:36:
                    cd:fe:3f:6b:ed:65:c6:06:d5:72:06:4b:3f:02:cb:
                    f4:fe:0a:71:8a:0f:0a:cd:58:21:90:f6:35:50:55:
                    bc:65:60:9c:fd:1e:5e:3a:c2:41:9c:42:96:ab:df:
                    49:37:ff:26:62:ef:9b:7e:ec:4a:ce:1a:a5:72:3c:
                    99:16:ce:66:bd:c8:fd:eb:28:ef:bc:65:34:9e:61:
                    38:55:ab:69:c8:89:d7:8b:ea:35:0a:92:01:58:68:
                    27:72:7a:50:5c:1b:85:4e:97:53:54:dc:46:bf:af:
                    14:23:14:02:70:07:9b:5a:55:76:25:ea:11:fb:4c:
                    10:c6:96:18:08:14:ef:7a:4b:a9:ce:ff:f9:15:96:
                    2d:81:23:ae:f2:75:5f:56:79:54:45:e4:de:15:70:
                    be:89:10:31:4d:77:2d:a7:8e:15:77:d6:0f:6c:e7:
                    05:10:24:76:07:fb:c6:1b:fc:c8:84:dd:a0:4d:7f:
                    1f:6d:d4:d7:74:72:74:6a:44:87:38:ae:ff:e6:48:
                    d2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C0:5E:AE:1F:DF:AD:22:9B:80:65:5D:7D:EF:C2:E9:AB:56:66:3F
            X509v3 Authority Key Identifier:
                keyid:F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:06:6e:22:02:17:18:a3:dd:28:d3:95:4b:e1:90:f2:70:4e:
         0e:36:fd:a7:9a:5a:16:f9:66:a2:5c:5c:5c:37:52:84:cf:d6:
         d0:62:aa:8a:85:cf:3e:4b:bc:f4:33:22:c4:d6:a8:a1:cf:7d:
         ef:06:7c:47:a9:28:9b:42:9d:8a:91:cc:ee:28:3f:a4:67:51:
         b3:72:a2:4f:56:3d:76:c2:25:e3:44:9d:4d:e8:37:fc:c5:58:
         6c:63:a8:6e:6b:62:38:c1:1b:71:97:e9:3a:31:12:35:90:83:
         8e:ae:d8:bb:c8:51:5b:27:d3:ff:f1:78:6d:82:74:39:65:6d:
         b0:6a:ba:ca:bf:27:85:e6:bd:cd:be:72:a1:8f:31:75:1b:32:
         50:25:99:ef:22:2b:88:dd:91:f9:eb:54:98:89:cf:5e:c8:c8:
         d3:0b:56:70:17:1a:46:b6:68:74:b2:f9:e0:63:a1:6d:3c:00:
         9b:56:f5:14:a8:45:26:9d:21:15:12:10:54:f3:95:bb:5d:63:
         76:40:a1:f4:8b:2a:e3:fa:d3:c8:0a:ec:20:3a:d5:04:42:54:
         95:3f:de:07:f6:ae:f5:d1:f2:b4:ac:eb:48:25:37:2f:bc:1d:
         a8:12:bf:16:04:b4:ad:32:a8:fb:0a:4e:e0:06:7f:94:99:e2:
         a7:4d:b9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:21:45 2026 by rpki-client