Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
File:                     8QMX8k1xpRbXUEO-kPWr4_ocklk.mft (raw, json)
Hash identifier:          P6ZXV87gLZcLRGelWY4z/3Lshr1jFqEKZ3uTowc/JRo=
Subject key identifier:   A1:4E:F4:34:37:45:F3:24:C2:38:7E:57:26:D5:C7:9D:74:94:C6:75
Authority key identifier: F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
Certificate issuer:       /CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Certificate serial:       01A0C28DDD4995C9963175B3943B3C525ED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
Manifest number:          1618
Signing time:             Mon 21 Sep 2026 06:01:12 +0000
Manifest this update:     Mon 21 Sep 2026 06:01:12 +0000
Manifest next update:     Tue 22 Sep 2026 06:01:12 +0000
Files and hashes:         1: 8QMX8k1xpRbXUEO-kPWr4_ocklk.crl (hash: TcT7/nhm6Gt/uJuKyuCRbCyq1k4P7MfN97L+Jkr/X9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:8d:dd:49:95:c9:96:31:75:b3:94:3b:3c:52:5e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f10317f24d71a516d75043be90f5abe3fa1c9259
        Validity
            Not Before: Sep 21 06:01:12 2026 GMT
            Not After : Sep 22 06:01:12 2026 GMT
        Subject: CN=a14ef4343745f324c2387e5726d5c79d7494c675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:40:d9:1c:07:88:42:ef:40:f8:44:86:15:fa:
                    96:d1:2b:87:4a:ca:4e:b7:8d:b4:44:d6:35:df:c1:
                    96:fc:9b:74:37:f6:6b:64:75:f0:a0:6e:09:f4:29:
                    c5:ad:6e:43:71:80:f0:48:8c:6b:13:c5:56:87:b1:
                    85:1a:74:e2:62:5d:c7:25:7d:4f:61:5a:cd:45:b2:
                    e6:7b:c4:86:ad:b4:c8:f2:56:05:7c:33:4f:01:22:
                    2f:9f:d6:f9:18:10:1c:4c:e7:fc:40:2e:6c:ca:29:
                    39:c2:c8:27:e4:95:c9:55:48:74:c2:7a:e2:10:1c:
                    ee:27:aa:49:26:28:b6:0b:b9:cc:e5:4a:9b:05:6d:
                    4a:a8:6a:5f:fb:48:30:ef:c5:d9:0e:49:c3:cd:2a:
                    84:d2:8d:57:e7:c5:23:f2:1d:e9:7e:20:8b:c2:a6:
                    a3:df:01:37:96:13:14:f9:14:d1:c7:e9:71:4e:8e:
                    b1:96:c2:58:9d:c7:06:a8:68:fb:b1:7a:0f:a7:a8:
                    1e:80:88:84:5a:f8:51:fb:bc:2d:73:e9:94:08:1e:
                    62:61:3c:77:ce:db:a3:2e:f9:2a:f3:31:93:ee:46:
                    af:92:54:9d:0f:1d:0d:e8:f2:dd:d6:4f:20:65:c7:
                    a9:73:d1:75:25:c7:c4:78:4f:8c:f5:63:54:44:52:
                    1b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4E:F4:34:37:45:F3:24:C2:38:7E:57:26:D5:C7:9D:74:94:C6:75
            X509v3 Authority Key Identifier:
                keyid:F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:24:43:55:69:2e:c4:75:5f:71:e6:e2:d5:d8:21:dc:43:0a:
         68:1a:71:eb:ce:6d:25:93:08:75:ab:89:4b:53:07:cc:d2:09:
         19:9b:4e:19:14:78:b8:f9:b0:3a:33:68:33:4e:bc:45:26:cd:
         66:a9:48:6a:5a:28:f3:83:f9:cc:7d:c3:10:4c:98:77:eb:ba:
         85:08:ed:88:98:20:7d:e9:50:02:ce:bc:61:4f:eb:0b:b8:e4:
         8a:08:4a:d6:2e:1f:49:cb:ec:a4:15:3e:f9:a9:4a:93:0a:98:
         c2:a4:eb:27:fc:c3:42:4b:6e:05:df:8c:88:89:d7:4c:e4:71:
         b6:75:82:90:9a:23:d4:31:9d:a0:5f:90:ac:84:96:a7:c4:71:
         1b:06:25:3e:a2:ba:36:e7:0d:1c:13:8e:cc:aa:0d:e2:51:94:
         9c:29:1b:e9:47:7e:6f:01:20:11:24:10:8c:32:87:17:3a:72:
         6f:79:3b:21:bd:75:4b:b6:bc:0b:dc:7c:f9:b1:e9:d2:8c:45:
         70:e0:36:68:ef:0e:be:3f:6e:2f:77:be:55:71:3c:58:3f:02:
         03:74:88:ed:5b:a5:18:44:55:f2:a0:0a:31:d1:03:a6:2b:d7:
         03:41:0d:90:d6:f8:2e:18:8c:e5:bc:41:ac:2a:b9:da:8b:42:
         11:bd:57:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----