Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
File:                     8SEJSHr0AKY-PLARo9VJ51H9LBg.mft (raw, json)
Hash identifier:          hmuMkfjAljh3j5yNieexeQcBweUbVixEUJb/xTNMxCw=
Subject key identifier:   71:1A:EC:43:A2:21:61:BF:5B:3D:19:07:0C:99:B4:D5:4F:90:B9:EB
Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
Certificate issuer:       /CN=f12109487af400a63e3cb011a3d549e751fd2c18
Certificate serial:       01A13F02BB95E267D77B56C4F30D72167734
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
Manifest number:          1187
Signing time:             Thu 15 Oct 2026 10:01:46 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:46 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:46 +0000
Files and hashes:         1: 8SEJSHr0AKY-PLARo9VJ51H9LBg.crl (hash: 49Da5O5Dj4RmiSyBERvRye8GmoVgMkewb5NLIm3Qd4Y=)
                          2: FpQImozb1WQPa7ynxxGnFSr06JI.roa (hash: ifQklYq1Q4YF5Y36wrzWjlvtYcLa+HxFkFPijteQsCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:bb:95:e2:67:d7:7b:56:c4:f3:0d:72:16:77:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18
        Validity
            Not Before: Oct 15 10:01:46 2026 GMT
            Not After : Oct 16 10:01:46 2026 GMT
        Subject: CN=711aec43a22161bf5b3d19070c99b4d54f90b9eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2b:0d:f7:69:55:61:a0:39:83:e7:a8:49:64:
                    4d:be:02:09:54:1a:5d:8e:35:ca:30:36:c6:1c:90:
                    34:2b:d5:5d:72:cd:a5:27:e2:82:df:96:4e:70:94:
                    9b:83:18:98:73:0a:87:9c:2a:9d:7f:d4:89:28:dc:
                    42:2c:e3:47:32:81:a9:37:eb:72:e0:ae:56:fc:2b:
                    5c:06:5f:bd:3c:89:ae:4a:4b:79:18:df:74:e6:78:
                    a0:15:b5:6d:38:82:98:cd:96:63:ef:38:01:55:6b:
                    95:27:19:7e:aa:a6:ef:8c:44:e4:a9:c2:58:0b:e1:
                    dc:cf:66:9c:80:cf:3d:ba:1a:b3:09:f0:85:bd:2a:
                    24:8a:fa:27:be:a2:fe:fb:15:5d:9d:a8:cb:4b:36:
                    8c:7b:08:39:22:ac:b7:f8:af:e9:1b:24:41:d3:da:
                    b0:8c:7b:63:54:5e:7a:c8:f4:fb:c3:71:56:0a:83:
                    17:ad:29:3b:82:56:3e:f7:33:75:53:d8:07:8f:08:
                    3d:55:c9:45:8e:4d:44:92:24:92:78:66:9c:73:23:
                    73:77:ca:e6:e2:46:f4:09:31:3f:37:e1:11:e2:fc:
                    f3:65:23:5f:92:7f:c5:04:16:b0:a7:b4:a3:c5:b2:
                    af:d5:d3:8d:ef:c1:db:3a:36:0d:e1:02:60:48:24:
                    2a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1A:EC:43:A2:21:61:BF:5B:3D:19:07:0C:99:B4:D5:4F:90:B9:EB
            X509v3 Authority Key Identifier:
                keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:6e:b0:89:5d:04:2b:d9:28:02:72:61:73:16:02:16:0b:6b:
         e0:b4:a4:39:a6:48:2f:d9:c5:23:85:b1:a2:bb:8b:44:ad:05:
         b8:32:ce:e3:0e:29:2d:a7:0c:df:89:05:cc:ff:04:9b:57:9a:
         51:20:9e:9a:4b:96:9f:34:a9:f9:04:86:b1:64:0d:e8:a3:54:
         c2:47:5c:f2:be:dc:55:47:4e:0e:83:cb:e8:9c:55:34:45:84:
         81:a7:06:b9:18:ca:95:d9:0b:46:0d:b8:f2:fe:9f:26:79:da:
         b0:0c:14:a0:ad:3e:48:1f:34:b2:16:88:a8:71:3e:aa:48:31:
         67:e6:ae:75:75:7c:99:3f:b3:ed:c2:1f:44:1c:b3:d6:b1:9f:
         5c:36:ab:d7:a9:93:98:a8:f2:37:37:37:73:76:7a:87:28:cb:
         7a:97:96:17:e0:f6:3d:59:1f:56:ab:c7:b6:3f:d6:d5:66:61:
         4f:7c:e1:83:c5:9a:5b:e5:b0:3b:c3:b5:f1:4f:15:63:3b:05:
         76:cc:22:eb:81:91:f7:13:b3:d0:48:51:41:59:e5:3c:98:63:
         ad:58:4e:fb:ee:35:5a:dc:2c:cc:d4:40:5e:6c:97:a2:1a:b2:
         10:fb:02:1d:ac:45:74:f0:0c:2b:ba:0f:2e:bb:41:7d:07:01:
         e6:29:4b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:23:53 2026 by rpki-client