Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
File:                     8VzG8-5-0llTHW0Izp4JNztxYGI.mft (raw, json)
Hash identifier:          k1c0pb6klE//hr4q8lDhaoFmL2nmXfg4QTk9m4vwi44=
Subject key identifier:   E8:EC:50:2C:B6:5E:2B:F4:BB:DF:DC:AF:77:35:63:A5:69:BA:9A:09
Authority key identifier: F1:5C:C6:F3:EE:7E:D2:59:53:1D:6D:08:CE:9E:09:37:3B:71:60:62
Certificate issuer:       /CN=f15cc6f3ee7ed259531d6d08ce9e09373b716062
Certificate serial:       01A0C88FE1BB43EFA0187AECDED4DF5D6B34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
Manifest number:          0804
Signing time:             Tue 22 Sep 2026 10:01:07 +0000
Manifest this update:     Tue 22 Sep 2026 10:01:07 +0000
Manifest next update:     Wed 23 Sep 2026 10:01:07 +0000
Files and hashes:         1: 8VzG8-5-0llTHW0Izp4JNztxYGI.crl (hash: qaPNse7orNyNUQGlArm7mmCVy95lvM5gJUqPfWuU+EQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 10:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:8f:e1:bb:43:ef:a0:18:7a:ec:de:d4:df:5d:6b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15cc6f3ee7ed259531d6d08ce9e09373b716062
        Validity
            Not Before: Sep 22 10:01:07 2026 GMT
            Not After : Sep 23 10:01:07 2026 GMT
        Subject: CN=e8ec502cb65e2bf4bbdfdcaf773563a569ba9a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:62:10:5b:96:ab:1b:c4:2e:30:59:f6:a6:
                    26:b2:c3:22:2b:47:12:28:3a:5c:e8:78:ba:74:17:
                    d9:38:c6:11:52:13:9f:f4:43:d7:b3:62:c5:42:07:
                    ad:2d:8e:15:90:89:eb:b1:83:f6:b4:ec:33:53:96:
                    7b:4e:f2:45:13:15:0c:c0:0a:1f:0c:bf:38:65:04:
                    da:a3:65:d4:ac:0e:2d:7c:f0:ff:c4:18:4f:a2:08:
                    b2:99:ce:a5:d7:60:31:9c:cd:39:12:23:e7:24:b1:
                    14:cd:d5:b1:23:35:d2:4c:1d:1c:8b:00:41:21:1a:
                    fc:f5:8e:56:ee:7b:47:12:88:14:32:16:50:0d:3e:
                    67:7f:34:04:20:c1:8e:a0:40:36:93:5d:f1:fe:54:
                    86:9b:c5:58:e7:a2:bd:7b:61:fb:12:73:ce:43:fb:
                    03:80:6a:ff:2c:1b:80:d3:5c:18:d3:32:6c:8c:c4:
                    c1:e6:7a:cc:0c:3c:04:46:fd:b6:58:a0:ab:fe:0c:
                    1f:10:88:c2:84:9d:72:53:bf:54:72:2b:63:94:a1:
                    eb:c2:71:7b:0e:ad:3f:d0:33:9e:af:d8:1f:39:27:
                    90:a2:91:9f:47:98:da:61:85:5b:38:ad:19:bc:9b:
                    d6:92:c1:82:b5:b6:00:ff:e8:93:1e:d8:99:76:f5:
                    38:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EC:50:2C:B6:5E:2B:F4:BB:DF:DC:AF:77:35:63:A5:69:BA:9A:09
            X509v3 Authority Key Identifier:
                keyid:F1:5C:C6:F3:EE:7E:D2:59:53:1D:6D:08:CE:9E:09:37:3B:71:60:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:94:1f:14:24:1e:b4:49:c1:4d:f2:40:11:c3:f8:43:cc:39:
         e5:22:2d:d2:31:28:47:9c:6a:49:e0:ea:e9:bc:66:95:5d:b3:
         32:d8:ed:4c:dc:90:2e:30:f6:0a:a0:17:b1:c9:c8:18:42:52:
         6e:33:c2:2f:02:26:84:b9:c3:51:e4:8f:dd:5f:c0:af:a8:7c:
         a5:16:4f:89:3a:ff:95:24:ef:45:a2:dc:a4:18:7e:59:a6:ee:
         89:ad:90:ef:a9:bd:31:08:64:2e:57:1b:3e:2d:1c:b5:b9:d6:
         bc:28:9c:79:6e:c1:8e:f8:47:c7:53:ec:da:d5:49:d0:db:d8:
         22:f9:75:c3:28:ed:05:df:ed:5c:b0:4c:ae:6d:8c:04:90:d7:
         4c:91:25:bd:7c:da:39:ca:b1:2f:e6:9d:3e:e5:6b:51:8d:8a:
         b7:8f:03:2c:28:e3:75:96:f4:32:eb:a1:8c:87:eb:e0:1c:cc:
         61:77:a4:b3:73:06:d8:d0:b5:0a:1c:96:1f:80:5c:23:f9:27:
         e2:7a:2d:15:e4:09:74:45:f5:43:1d:52:9f:4f:da:93:44:a4:
         9e:30:06:f3:97:3e:e3:fa:19:79:20:b1:d8:87:ea:a2:54:81:
         4e:9c:5c:0e:82:76:8d:f5:c5:bc:56:8d:16:07:55:e4:63:48:
         40:6a:78:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIj+G7Q++gGHrs3tTfXWs0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNWNjNmYzZWU3ZWQyNTk1MzFkNmQwOGNlOWUwOTM3M2I3
MTYwNjIwHhcNMjYwOTIyMTAwMTA3WhcNMjYwOTIzMTAwMTA3WjAzMTEwLwYDVQQD
EyhlOGVjNTAyY2I2NWUyYmY0YmJkZmRjYWY3NzM1NjNhNTY5YmE5YTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDliEFuWqxvELjBZ9qYmssMiK0cS
KDpc6Hi6dBfZOMYRUhOf9EPXs2LFQgetLY4VkInrsYP2tOwzU5Z7TvJFExUMwAof
DL84ZQTao2XUrA4tfPD/xBhPogiymc6l12AxnM05EiPnJLEUzdWxIzXSTB0ciwBB
IRr89Y5W7ntHEogUMhZQDT5nfzQEIMGOoEA2k13x/lSGm8VY56K9e2H7EnPOQ/sD
gGr/LBuA01wY0zJsjMTB5nrMDDwERv22WKCr/gwfEIjChJ1yU79UcitjlKHrwnF7
Dq0/0DOer9gfOSeQopGfR5jaYYVbOK0ZvJvWksGCtbYA/+iTHtiZdvU4swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjsUCy2Xiv0u9/cr3c1Y6VpupoJMB8GA1UdIwQY
MBaAFPFcxvPuftJZUx1tCM6eCTc7cWBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZ6RzgtNS0wbGxUSFcwSXpwNEpOenR4WUdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84N2U5YjctZWFkNC00YjViLWJjODgt
NjkxZWU0MWE2MDE0LzEvOFZ6RzgtNS0wbGxUSFcwSXpwNEpOenR4WUdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi84N2U5YjctZWFkNC00YjViLWJjODgtNjkxZWU0MWE2MDE0
LzEvOFZ6RzgtNS0wbGxUSFcwSXpwNEpOenR4WUdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZQfFCQe
tEnBTfJAEcP4Q8w55SIt0jEoR5xqSeDq6bxmlV2zMtjtTNyQLjD2CqAXscnIGEJS
bjPCLwImhLnDUeSP3V/Ar6h8pRZPiTr/lSTvRaLcpBh+Wabuia2Q76m9MQhkLlcb
Pi0ctbnWvCiceW7BjvhHx1Ps2tVJ0NvYIvl1wyjtBd/tXLBMrm2MBJDXTJElvXza
OcqxL+adPuVrUY2Kt48DLCjjdZb0MuuhjIfr4BzMYXeks3MG2NC1ChyWH4BcI/kn
4notFeQJdEX1Qx1Sn0/ak0SknjAG85c+4/oZeSCx2IfqolSBTpxcDoJ2jfXFvFaN
FgdV5GNIQGp4Qw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:26:09 2026 by rpki-client