Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
File:                     1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft (raw, json)
Hash identifier:          sv+oZSlGl4BRvV/e0Go6+3TMyULWv57+6YXst+m2z6I=
Subject key identifier:   8E:0E:21:48:16:7E:50:99:CF:C5:BE:14:1D:2F:40:E5:06:69:05:E8
Authority key identifier: FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
Certificate issuer:       /CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Certificate serial:       01A1249DB1258D07A354EDFA44B58DC2824E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
Manifest number:          0D87
Signing time:             Sat 10 Oct 2026 07:01:16 +0000
Manifest this update:     Sat 10 Oct 2026 07:01:16 +0000
Manifest next update:     Sun 11 Oct 2026 07:01:16 +0000
Files and hashes:         1: 1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl (hash: gmq3XBL7JVs6m5JE+XzukKzZofQGiNiHuBkUyMzNygo=)
                          2: KWWsY3yI72ioCOq7Ehofgc0rEjc.roa (hash: DKEhqLA1Q4tgERt0qIwT8m3BK6uRcKG/np3muRhMq5Q=)
                          3: KYxqHBdlJM50_l8QVytJGND1lFU.roa (hash: NIzeGS795nzm0xWuHYzaf7CPiwKVqEugUFyuP5WF98U=)
                          4: ZRh3pZ05kNEQxO0UbrFtzVM39i0.roa (hash: Un3wT8GPR+7E06qoTt0jBaNkX6d2hzTILScAwxIEZ9U=)
                          5: nIQBtqCOW4jgDZ2FJb1xHaqF1ic.roa (hash: tTtgs//t2Juiyz/b3YQWkBvs5uSiar0aUFIwCd1CLm4=)
                          6: sbfAkA7H-Szs8U4pMGUpwhJuU48.roa (hash: dZ9aXjp2r1NAiCJ79h91KYouoMe/pfGvhZ6kp2jSGYA=)
                          7: taknDyACtnaEhocHtQ2E5k9t9Qk.roa (hash: k4+ZvdQoIZX14PC02EQB9rSpmz2VUWHz3T+YtKmHn3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:24:9d:b1:25:8d:07:a3:54:ed:fa:44:b5:8d:c2:82:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
        Validity
            Not Before: Oct 10 07:01:16 2026 GMT
            Not After : Oct 11 07:01:16 2026 GMT
        Subject: CN=8e0e2148167e5099cfc5be141d2f40e5066905e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:33:43:2a:09:c4:ec:05:f4:15:65:d1:b0:dd:
                    98:a0:9f:5b:15:8b:64:09:d9:25:cc:d2:85:23:bf:
                    b6:2b:d2:f0:b1:1f:9c:a9:cd:70:0b:e8:98:a0:5d:
                    8e:bc:9b:d4:a9:47:19:2c:35:79:a2:9b:e0:bb:32:
                    76:53:8f:4c:62:87:af:dd:f5:ef:2e:95:cc:3e:2c:
                    01:fa:fe:a2:b5:23:f3:33:f5:b3:53:c5:22:91:77:
                    9e:3d:14:d3:3c:3a:df:19:7c:5f:0f:10:5d:98:be:
                    8a:65:05:63:2d:0d:ec:f7:30:31:30:7f:bc:ed:79:
                    3a:2b:ab:25:e2:76:bb:59:74:ad:af:1f:1b:3b:28:
                    43:79:a3:0f:fa:b8:52:81:3b:6b:a2:de:d8:93:b7:
                    5b:39:56:9b:13:18:98:e4:ea:a7:13:ee:0a:4b:11:
                    4d:72:be:a9:78:bc:72:b3:8b:cd:03:b0:be:56:a9:
                    8b:96:16:cd:2b:10:31:ca:79:fe:6c:9b:19:97:22:
                    07:3c:4d:e5:e3:79:18:65:92:71:c3:2a:64:e0:ba:
                    f1:67:37:e1:9b:bb:b2:a6:8e:78:ae:61:a3:e8:66:
                    82:7b:cb:2c:c7:1a:07:d5:e8:a2:06:03:db:10:9c:
                    9f:63:6c:5f:b2:57:ed:82:bf:19:98:17:b8:4f:af:
                    75:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0E:21:48:16:7E:50:99:CF:C5:BE:14:1D:2F:40:E5:06:69:05:E8
            X509v3 Authority Key Identifier:
                keyid:FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:5e:1e:ad:c0:41:7e:85:21:5a:36:4c:77:01:26:c4:2a:1a:
         70:39:44:e5:a5:8e:13:d2:be:b0:ba:6a:05:f0:09:4b:53:95:
         e3:76:bd:77:7f:61:dd:25:b3:12:4c:72:01:cc:da:f2:59:b3:
         39:c3:df:0b:71:be:97:87:fc:c9:12:12:31:7b:0c:05:c9:e3:
         7c:63:02:aa:37:71:c5:18:ed:aa:f9:56:89:b8:ed:9b:5a:e2:
         42:9a:4b:bc:db:4e:99:48:ae:8b:30:b5:57:4c:7b:b4:98:71:
         90:bb:c4:36:5d:a3:ae:f8:7b:1b:52:3a:1e:f0:ed:64:aa:2a:
         35:7b:9f:b3:ba:a0:14:cd:4d:0f:d4:11:19:16:3e:79:3b:e2:
         c6:24:f4:2e:fb:48:19:90:61:39:10:b4:0b:ca:72:cd:7d:0b:
         a9:dd:64:70:9a:32:01:df:4d:b0:d1:d2:43:13:cc:cc:6b:2f:
         3f:9d:29:2f:22:51:4e:81:52:08:a8:44:11:ba:73:5e:ca:5c:
         45:cc:64:57:da:d8:3a:c8:2d:68:62:af:52:f2:b7:dd:ff:88:
         bb:b0:0c:fa:fb:03:0c:52:3f:99:3f:fe:13:24:c1:63:0a:bb:
         0b:96:00:37:15:03:3c:72:0f:b4:7d:04:48:e4:d1:2f:5a:72:
         53:c1:cd:b8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaEknbEljQejVO36RLWNwoJOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiY2QwMjMzODA4NTcwZTMxZmZiMmZjZGUxYjg3NzA3MWNi
YzY2MDMwHhcNMjYxMDEwMDcwMTE2WhcNMjYxMDExMDcwMTE2WjAzMTEwLwYDVQQD
Eyg4ZTBlMjE0ODE2N2U1MDk5Y2ZjNWJlMTQxZDJmNDBlNTA2NjkwNWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzNDKgnE7AX0FWXRsN2YoJ9bFYtk
CdklzNKFI7+2K9LwsR+cqc1wC+iYoF2OvJvUqUcZLDV5opvguzJ2U49MYoev3fXv
LpXMPiwB+v6itSPzM/WzU8UikXeePRTTPDrfGXxfDxBdmL6KZQVjLQ3s9zAxMH+8
7Xk6K6sl4na7WXStrx8bOyhDeaMP+rhSgTtrot7Yk7dbOVabExiY5OqnE+4KSxFN
cr6peLxys4vNA7C+VqmLlhbNKxAxynn+bJsZlyIHPE3l43kYZZJxwypk4LrxZzfh
m7uypo54rmGj6GaCe8ssxxoH1eiiBgPbEJyfY2xfslftgr8ZmBe4T691NwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFI4OIUgWflCZz8W+FB0vQOUGaQXoMB8GA1UdIwQY
MBaAFPvNAjOAhXDjH/svzeG4dwccvGYDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS04MENNNENGY09NZi15X040YmgzQnh5OFpnTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvM2I1MTEwLTUxNjctNDhlMC04NTk3
LTYxZDczMzNmODU3MC8xLzEtODBDTTRDRmNPTWYteV9ONGJoM0J4eThaZ00ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJkLzNiNTExMC01MTY3LTQ4ZTAtODU5Ny02MWQ3MzMzZjg1
NzAvMS8xLTgwQ000Q0ZjT01mLXlfTjRiaDNCeHk4WmdNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAml4e
rcBBfoUhWjZMdwEmxCoacDlE5aWOE9K+sLpqBfAJS1OV43a9d39h3SWzEkxyAcza
8lmzOcPfC3G+l4f8yRISMXsMBcnjfGMCqjdxxRjtqvlWibjtm1riQppLvNtOmUiu
izC1V0x7tJhxkLvENl2jrvh7G1I6HvDtZKoqNXufs7qgFM1ND9QRGRY+eTvixiT0
LvtIGZBhORC0C8pyzX0Lqd1kcJoyAd9NsNHSQxPMzGsvP50pLyJRToFSCKhEEbpz
XspcRcxkV9rYOsgtaGKvUvK33f+Iu7AM+vsDDFI/mT/+EyTBYwq7C5YANxUDPHIP
tH0ESOTRL1pyU8HNuA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 13:18:16 2026 by rpki-client