Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
File:                     8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json)
Hash identifier:          Yz4FHwIt40CzJ3BE3HafYbd66yn/6iYU4pAEFh8DQ9o=
Subject key identifier:   69:D1:C3:55:B9:6C:58:2E:5F:9B:50:EC:9E:3B:1A:EB:EC:20:03:B8
Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
Certificate issuer:       /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Certificate serial:       01A0C6A16048C075ABADED2766DB413B74AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
Manifest number:          19F8
Signing time:             Tue 22 Sep 2026 01:00:59 +0000
Manifest this update:     Tue 22 Sep 2026 01:00:59 +0000
Manifest next update:     Wed 23 Sep 2026 01:00:59 +0000
Files and hashes:         1: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: Hxc4M3YCchYpzol3m5T5CuIxuApHVVZxO9gyjuqaHV4=)
                          2: GYXVPChjE0NPSEdDhucM44Q05y0.roa (hash: Aj116UIxTV5UX+R+IJJ14L/FveXnD0nSIlVBqSjnPM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:a1:60:48:c0:75:ab:ad:ed:27:66:db:41:3b:74:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
        Validity
            Not Before: Sep 22 01:00:59 2026 GMT
            Not After : Sep 23 01:00:59 2026 GMT
        Subject: CN=69d1c355b96c582e5f9b50ec9e3b1aebec2003b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:10:85:ff:94:84:4f:3b:97:ac:f6:9f:df:59:
                    2e:8e:cf:d2:5b:46:71:e2:cf:88:20:47:a6:71:90:
                    db:3c:05:91:83:2d:07:10:03:61:9b:d3:8c:ae:d5:
                    9b:fe:7a:06:da:6c:fc:54:07:f2:19:c5:eb:45:00:
                    13:5f:b3:97:11:bb:51:ea:f5:14:d8:b8:11:a8:36:
                    d9:4b:4e:42:32:5a:7d:e5:0e:f2:5b:0b:e7:9d:8f:
                    a6:9e:8d:61:4d:42:4a:c7:51:49:de:f4:31:cf:53:
                    a9:f0:03:1c:dc:ad:fa:06:2a:37:a1:71:83:fb:cb:
                    4b:92:26:5b:0a:8a:b6:7e:29:07:47:01:c2:7d:6b:
                    d7:da:83:d9:19:49:80:21:97:ab:3b:07:f3:a4:58:
                    67:c9:dd:83:33:d2:0f:e4:2f:10:57:09:44:3f:ba:
                    78:b1:df:53:99:ef:e8:bc:1d:5b:e8:64:bd:51:31:
                    a0:c2:49:08:f7:c0:dd:ff:b4:ae:82:78:23:fb:cf:
                    cf:bf:73:f5:14:bc:dd:3b:1c:17:b5:bc:36:f6:ae:
                    79:01:de:a1:2b:90:31:d2:29:e7:4c:ab:d4:cd:ce:
                    e2:ad:9d:53:0a:14:08:cc:05:3e:f1:16:6a:dc:b8:
                    85:23:2b:1f:8e:f4:d9:34:86:92:d9:59:95:7e:f3:
                    03:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D1:C3:55:B9:6C:58:2E:5F:9B:50:EC:9E:3B:1A:EB:EC:20:03:B8
            X509v3 Authority Key Identifier:
                keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:32:8f:90:1e:df:a9:5d:43:6a:86:64:cb:8b:b3:56:56:a9:
         32:58:bc:56:0f:63:c6:b5:9d:ea:f4:3a:82:25:85:dc:24:0e:
         9b:b6:c2:30:70:84:bb:dd:dd:77:f6:f2:b4:f8:36:c7:04:d0:
         44:3d:c7:be:54:fb:81:b4:d4:33:ab:f8:a3:45:f7:cf:56:13:
         87:a8:41:75:24:35:34:f5:15:8a:7b:2f:28:66:20:be:ff:e6:
         38:4d:1a:29:94:51:bf:ad:91:4c:20:fb:0b:62:02:6a:41:e6:
         bf:c6:ff:25:5f:8d:9d:24:a2:4f:7f:13:d2:2d:65:b4:d8:13:
         01:54:71:c5:bc:f6:66:72:bf:3b:ff:22:9f:40:2c:b2:f5:f7:
         a7:50:94:7f:77:07:99:c1:c3:ec:81:6f:c4:b4:1a:90:fe:32:
         07:21:6b:d5:48:ba:75:45:7e:e4:1c:85:11:e1:82:98:78:9d:
         0d:3a:c4:00:41:c5:13:96:17:aa:be:7b:1a:24:27:f7:ec:2d:
         fb:a2:73:94:e3:21:cf:ed:43:39:83:ac:c2:36:85:4a:18:00:
         01:7a:73:3c:77:8e:55:b4:8b:cc:2d:38:00:53:b4:5a:c2:b0:
         b8:c9:90:d8:7f:af:09:3d:1a:de:e7:05:66:8b:62:4c:57:d4:
         fa:88:8f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:16:50 2026 by rpki-client