Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
File:                     08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json)
Hash identifier:          qkQT9K2kKv0HmsbSoetYlsF9bnrkMeGsY6Uzn4ESFss=
Subject key identifier:   7E:76:D2:5E:3C:B0:05:5A:9F:24:4B:1B:BB:6C:A5:97:00:3D:FB:E3
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Certificate issuer:       /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial:       01A0C746B4A21BE4CAC453BB1971BC4D4768
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
Manifest number:          1378
Signing time:             Tue 22 Sep 2026 04:01:34 +0000
Manifest this update:     Tue 22 Sep 2026 04:01:34 +0000
Manifest next update:     Wed 23 Sep 2026 04:01:34 +0000
Files and hashes:         1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: pim9nGlQlrK+L3osBnUaFsfwWZBXulYQXCQPsgzgmK4=)
                          2: 8iiGHlsOJWwsrr4dYEu2DAJmDu4.roa (hash: 8N8stGdhMpNHOzJEakrzgY5qXFCD32clBj0A+s284Zo=)
                          3: AFteCS1Hd7e6qi02RMRsgw9AZFI.roa (hash: gi5cvPOf8jzBgqQP0MjAWXH2Iw3GEPq9YJDLxWTBGA8=)
                          4: EsIWvzYNxFeMPUFmjBH6kTpjbB0.roa (hash: 9ZtPQ0L/4UvcfpXOzs0mWSnfUX+7UiuSsVqPpiFMuzI=)
                          5: NYre9NG9YeEOV-9DADYBR1_ANFc.roa (hash: SGio3sReojeOyDGlNC4y1GQcfv+IKwO1tdbB5z6Ax9c=)
                          6: ilxsUka29LSmxhagYYgOUwx9G1M.roa (hash: Z+faE599Aw5TvsDGU85PKGJH3ruym0pUbib3gVDAVFE=)
                          7: ur620Y0Jnk61OHeYYoTBq--EZKE.roa (hash: OtNM19zTl3crChLyF+XGQsp+urHf9QrZvH/kX/2ejmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 04:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:46:b4:a2:1b:e4:ca:c4:53:bb:19:71:bc:4d:47:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
        Validity
            Not Before: Sep 22 04:01:34 2026 GMT
            Not After : Sep 23 04:01:34 2026 GMT
        Subject: CN=7e76d25e3cb0055a9f244b1bbb6ca597003dfbe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c8:5a:dd:8e:a2:79:7b:ab:e3:8e:9e:8d:29:
                    43:af:83:75:a8:84:9d:24:24:55:3f:74:58:26:ef:
                    8c:c1:c0:60:86:43:48:fd:61:2d:4b:4a:3c:99:52:
                    e6:2a:2c:c7:1f:b6:bf:ec:4f:15:4d:11:66:7d:f7:
                    ed:8f:fd:15:30:f5:69:5e:ee:01:9f:68:df:07:39:
                    43:26:15:bb:61:21:0e:30:9f:76:96:61:a6:4a:96:
                    e6:a2:0f:5e:03:a4:b9:93:11:02:a7:0b:8f:ac:05:
                    21:34:af:a0:94:fb:de:2b:92:0b:2b:2d:9d:5c:45:
                    76:03:0f:90:19:7a:af:95:5b:65:8c:0c:0c:ee:25:
                    8c:8d:e6:87:d8:f0:3b:01:29:69:a4:2e:1a:38:13:
                    5d:62:08:f4:5e:aa:80:ab:80:fe:22:54:e5:2d:7d:
                    19:f0:7f:31:1a:7b:50:07:c1:b2:4e:85:5e:85:8c:
                    f0:bb:cf:b3:e7:19:35:ed:de:a7:28:9a:8f:85:4f:
                    d4:85:72:77:2f:7d:eb:30:1a:be:cf:39:23:64:2f:
                    73:a7:38:6e:ef:53:d7:5d:60:9c:66:70:fd:9d:19:
                    d7:c2:49:9f:f0:a4:a8:14:05:f0:8e:47:18:52:22:
                    2c:96:6e:be:62:a1:64:af:09:b3:df:8c:09:db:6c:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:76:D2:5E:3C:B0:05:5A:9F:24:4B:1B:BB:6C:A5:97:00:3D:FB:E3
            X509v3 Authority Key Identifier:
                keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:22:0e:a6:66:25:e5:1f:5f:93:76:24:74:ab:bf:9b:26:06:
         f7:04:1d:72:e9:1d:53:93:be:92:a5:a5:e7:a0:8d:1c:47:eb:
         5e:5f:f1:51:bd:d5:bd:33:a2:6b:d5:b2:40:d5:cd:10:b6:2c:
         5a:57:57:79:a2:df:b0:fc:10:4d:ab:19:62:81:fb:56:3a:4c:
         eb:6f:65:b5:41:af:8e:53:a5:98:0f:48:d5:69:23:7e:c8:29:
         3e:de:0a:b2:14:a3:5e:78:40:5b:6d:46:0e:7e:dd:1c:61:cd:
         cb:a3:9c:5b:c1:1e:cc:39:cd:12:e4:8b:74:2c:66:e3:32:dd:
         35:04:5a:81:50:25:be:58:21:14:e2:a5:19:34:72:4d:08:1f:
         47:b2:d4:56:ba:41:39:66:b7:9e:cd:69:37:56:4d:7c:a8:7b:
         6e:fa:8a:a1:90:c9:68:16:5f:a5:02:58:21:60:9e:e3:40:84:
         23:1e:03:00:f3:aa:31:79:98:98:87:bd:f5:64:55:5c:b0:d4:
         09:95:5e:29:05:71:30:28:e5:7a:b1:35:04:f4:ab:04:2c:ac:
         ce:21:42:4b:4b:81:d7:6a:12:4f:f2:23:41:4a:24:97:b6:5f:
         76:58:0c:d1:18:8d:48:98:c0:47:56:50:06:40:7c:ac:8b:3d:
         cf:41:32:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:08:15 2026 by rpki-client