Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
File:                     8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json)
Hash identifier:          gnCeDl0SmXEMA+UMCQyNPhu9f72HZCraUp8sJLVCEtg=
Subject key identifier:   F4:61:38:48:43:AC:53:FC:E6:36:17:10:7F:70:30:8D:6A:6A:91:26
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Certificate issuer:       /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial:       01A125795ECC89B71E18221DAF8C66610F32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
Manifest number:          1BBF
Signing time:             Sat 10 Oct 2026 11:01:13 +0000
Manifest this update:     Sat 10 Oct 2026 11:01:13 +0000
Manifest next update:     Sun 11 Oct 2026 11:01:13 +0000
Files and hashes:         1: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: CmoLD2Kt4DUC/cySYf6FhnqaErOZOh0zqUNNaRP6lyY=)
                          2: BY90jgROFhJJZ1NbH4-tElkR_GE.roa (hash: Y5QIyQBYfCYfbH1jDCElmPITA4Jk6lEfynUlV4MgKn0=)
                          3: FjdVngLDionqDh_18cFGQYsmeKM.roa (hash: Tr+Fqc+oiTydduMLlPL1oc/kxHz+RUGFOArR1+9AQpM=)
                          4: jOKUVjy0c9vId2Sgar1ALyHha2U.roa (hash: LYaq4K0uwHA/ENOgkf4QZP3JMqPWmSKEI1664spJ028=)
                          5: q38Vrr1-lrXh4gRVryv7KRjcsHU.roa (hash: GS4WkhgAvCrSjsSDa1MVGmMSwhXFRTBu+xrlewUGZtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:79:5e:cc:89:b7:1e:18:22:1d:af:8c:66:61:0f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
        Validity
            Not Before: Oct 10 11:01:13 2026 GMT
            Not After : Oct 11 11:01:13 2026 GMT
        Subject: CN=f461384843ac53fce63617107f70308d6a6a9126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e2:bb:db:77:ab:4f:e8:9c:2c:8e:10:0b:6c:
                    f9:f9:94:bc:ac:10:5d:67:2c:7f:55:d3:48:6a:40:
                    89:d8:d6:66:f6:7f:6e:f9:f2:20:d5:18:bc:e2:d5:
                    f6:30:6f:40:65:9d:4f:4c:e7:eb:f1:2b:0f:69:f2:
                    ea:3f:f2:0e:0c:01:66:b0:94:4e:fe:6b:b0:33:65:
                    e6:60:22:cd:6f:7c:9b:84:72:d7:2c:c8:e5:c3:43:
                    c9:25:7b:b8:37:e5:e9:8b:1f:b9:ac:f6:0f:7b:91:
                    ce:2f:b9:60:87:b8:2c:9f:20:e0:aa:21:c9:b9:4e:
                    e2:bc:5c:fd:2d:14:fe:9f:3b:e6:0a:3d:69:da:af:
                    d3:b9:68:4c:3c:75:74:82:02:c4:ce:f1:08:74:5e:
                    0e:3e:68:7d:e7:10:4c:03:23:0b:5a:ed:46:b5:c0:
                    57:87:97:9f:48:2b:e6:41:43:dc:55:c2:86:c0:43:
                    e5:e3:05:ba:e1:93:4e:f6:8f:a0:38:d6:8b:7b:11:
                    d4:ed:18:e4:74:6c:8c:87:89:9d:ba:9d:4e:f2:f6:
                    61:e1:88:11:c5:63:85:7d:ed:30:a9:63:99:5c:7c:
                    5b:17:ac:ed:5a:94:61:40:06:90:3f:2c:4a:cb:bf:
                    f5:78:fb:d4:46:2b:0c:b3:77:7c:99:98:42:39:2a:
                    b5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:61:38:48:43:AC:53:FC:E6:36:17:10:7F:70:30:8D:6A:6A:91:26
            X509v3 Authority Key Identifier:
                keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:74:fb:24:cf:32:75:c2:e9:bc:ec:9a:fd:d8:ce:64:9b:84:
         ee:2f:a9:ab:90:86:c9:7b:65:00:cf:e4:69:cd:ce:50:bb:90:
         62:9e:b2:a9:36:27:55:b5:eb:d9:db:6b:c1:49:6e:fa:78:6a:
         6c:59:d4:99:b8:97:4c:92:7b:eb:03:a5:df:01:7e:7b:8f:43:
         11:b7:6e:22:ce:8d:8b:75:60:39:ae:52:5c:5f:1b:49:0e:5b:
         86:2b:14:52:5f:ea:c8:77:3c:54:0a:c6:4b:90:d3:83:9a:d5:
         e4:5e:3c:fd:1a:5d:9c:85:a4:51:d9:20:19:02:6d:2e:7f:ee:
         e4:63:aa:97:c7:89:f8:dc:77:6d:c5:1a:57:14:ba:01:a6:58:
         f0:5e:a0:cc:d4:c6:4e:34:b6:1a:38:48:e3:cf:95:d4:cd:82:
         01:53:40:10:f5:a2:78:43:8b:d6:62:6a:ca:39:b2:3d:0e:83:
         c6:dd:55:0a:9c:fe:a5:f0:d3:bf:04:5f:6a:89:38:26:5e:33:
         58:37:a0:90:08:b3:50:43:de:42:8c:b4:8d:33:d1:3e:e3:ba:
         f3:00:78:74:e9:93:28:70:87:53:9b:73:2c:f7:ef:c2:fa:0f:
         18:b0:b3:ce:68:84:13:4e:bc:37:36:f1:88:86:99:65:9f:9a:
         db:2c:27:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:45:22 2026 by rpki-client