Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
File:                     D8lnTtVfCnZcpdocb6-k3SXioXg.mft (raw, json)
Hash identifier:          DI0NbdANcsGOnv6zyF00DA+Sm22WItwugECZjtxibPU=
Subject key identifier:   E9:06:65:23:DC:1F:53:22:DA:DA:B9:2E:D3:A7:52:49:A5:87:9C:4E
Authority key identifier: 0F:C9:67:4E:D5:5F:0A:76:5C:A5:DA:1C:6F:AF:A4:DD:25:E2:A1:78
Certificate issuer:       /CN=0fc9674ed55f0a765ca5da1c6fafa4dd25e2a178
Certificate serial:       01A13C6E7207B441831E6C996EE195C419C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D8lnTtVfCnZcpdocb6-k3SXioXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
Manifest number:          0B88
Signing time:             Wed 14 Oct 2026 22:00:33 +0000
Manifest this update:     Wed 14 Oct 2026 22:00:33 +0000
Manifest next update:     Thu 15 Oct 2026 22:00:33 +0000
Files and hashes:         1: D8lnTtVfCnZcpdocb6-k3SXioXg.crl (hash: StaTs+3BUYu8cG1I2IHmrMYHk56XKAM8/J/IXD33Ws4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D8lnTtVfCnZcpdocb6-k3SXioXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 22:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:6e:72:07:b4:41:83:1e:6c:99:6e:e1:95:c4:19:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fc9674ed55f0a765ca5da1c6fafa4dd25e2a178
        Validity
            Not Before: Oct 14 22:00:33 2026 GMT
            Not After : Oct 15 22:00:33 2026 GMT
        Subject: CN=e9066523dc1f5322dadab92ed3a75249a5879c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:3e:0a:a2:12:57:9b:50:13:ac:d6:89:c3:
                    73:f1:5b:e9:51:72:cf:80:83:86:51:08:eb:63:9b:
                    05:75:eb:7c:54:66:3f:7e:93:79:bf:af:8e:27:82:
                    cb:1c:77:77:e4:9b:0f:ed:3e:e1:d3:f9:2d:8e:9a:
                    0f:37:86:34:c9:97:e7:84:10:aa:50:0c:98:96:4a:
                    53:e5:a9:fb:c9:d1:05:1c:19:9d:ba:b6:ba:7b:51:
                    05:c5:f2:aa:98:89:43:23:6d:78:f5:5d:16:8c:5b:
                    5e:34:63:da:57:21:79:13:9a:85:70:db:5a:c6:87:
                    dc:7e:c6:b8:a9:40:43:dd:fe:a7:49:33:7d:a0:54:
                    45:54:fc:f0:c6:76:a1:96:7f:d1:46:22:f3:09:2d:
                    f6:dd:ca:b0:29:3a:b0:c4:77:81:92:73:54:e0:66:
                    f7:00:4b:c6:99:51:73:58:6c:2b:37:8a:6c:b1:46:
                    e0:2f:dc:a9:5a:0d:a4:ec:57:57:04:24:68:d5:8c:
                    cc:c5:b2:4a:30:6b:69:2a:cd:e1:de:0b:77:d2:9d:
                    ec:32:d3:7b:44:7c:2b:96:06:cf:f1:64:3d:6c:ea:
                    ab:ba:f5:3b:b7:50:3c:db:0c:e6:c6:94:9a:82:6b:
                    cf:d5:66:9e:d6:a1:e6:d3:53:56:1d:76:94:f8:0f:
                    88:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:06:65:23:DC:1F:53:22:DA:DA:B9:2E:D3:A7:52:49:A5:87:9C:4E
            X509v3 Authority Key Identifier:
                keyid:0F:C9:67:4E:D5:5F:0A:76:5C:A5:DA:1C:6F:AF:A4:DD:25:E2:A1:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8lnTtVfCnZcpdocb6-k3SXioXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:dd:2e:f3:5f:a3:46:94:bb:83:4c:df:38:c3:50:4c:da:23:
         df:34:f8:49:cd:56:5e:81:07:a3:e3:1a:11:94:0e:fb:6a:c0:
         35:e0:85:74:1e:53:db:ec:b8:96:88:3c:42:64:9e:4d:8e:a5:
         eb:3d:4e:42:2b:67:1e:7a:09:76:8b:8e:74:b3:cd:9b:d8:29:
         26:27:6b:70:b6:f4:65:92:9b:b8:cf:85:34:a7:26:91:7b:98:
         bc:80:4c:58:30:c6:07:08:bf:61:f1:7a:6e:06:c1:c0:5e:7e:
         40:32:f3:7d:48:36:bd:bc:3b:77:d9:ee:f1:b0:8c:93:51:ea:
         04:2a:6a:80:28:a0:c1:a0:c7:35:bc:6f:0c:af:cd:f1:93:cd:
         9b:c9:97:73:89:50:01:40:5e:f5:e1:ba:03:24:ab:99:8c:1d:
         01:b3:be:fa:1d:e5:4d:fa:86:94:43:13:ab:0a:b5:96:d8:8f:
         9a:76:48:3b:21:72:28:63:df:2c:2a:b2:9e:4e:19:e4:5e:62:
         d6:90:4d:63:a6:39:7c:c1:84:9a:33:c5:d2:77:57:1c:55:e4:
         96:57:c7:c4:f8:ff:fb:3e:66:47:6b:a9:d7:19:f3:c3:86:33:
         81:cb:88:74:e7:88:4c:bf:10:9b:fa:90:ca:f2:8c:01:66:07:
         a8:ea:f7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:05 2026 by rpki-client