Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
File:                     E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft (raw, json)
Hash identifier:          bfu/vNeG6j+HsefnnVq4NUu1X004GYsI82pAAVggrbo=
Subject key identifier:   83:7E:B8:85:B6:42:26:BE:CC:39:45:6A:EF:EB:6C:6F:6C:B9:D9:39
Authority key identifier: 13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E
Certificate issuer:       /CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
Certificate serial:       01A1DCB8C79E3A893EB17090AF7DF1FEDF0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
Manifest number:          1AF7
Signing time:             Sun 15 Nov 2026 01:00:59 +0000
Manifest this update:     Sun 15 Nov 2026 01:00:59 +0000
Manifest next update:     Mon 16 Nov 2026 01:00:59 +0000
Files and hashes:         1: E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl (hash: jOip41djcPhz2IZr1Es1keK4X92Z4fAKnSmQ4Kg7Ud4=)
                          2: Kh2ibrrlvAJA0BPytF3vpct5nG8.roa (hash: 9S+B5OPrOVNMPF41i1ZV7e9GhndsXm9HajUBATSWGss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 01:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:b8:c7:9e:3a:89:3e:b1:70:90:af:7d:f1:fe:df:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
        Validity
            Not Before: Nov 15 01:00:59 2026 GMT
            Not After : Nov 16 01:00:59 2026 GMT
        Subject: CN=837eb885b64226becc39456aefeb6c6f6cb9d939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1b:e1:bf:4e:9b:14:8c:2a:a1:e7:80:25:b4:
                    cf:b9:6f:af:f3:df:92:c9:9a:95:61:f8:e4:13:62:
                    b2:fb:ea:6b:4c:eb:76:21:6e:03:d1:3b:6a:44:f5:
                    fa:02:67:db:e2:11:df:23:7c:f8:dd:ca:5a:ff:d8:
                    a6:23:25:71:3a:de:2b:a0:85:48:4f:41:65:19:33:
                    3a:4c:a6:e8:50:1e:ba:5d:63:62:b9:2f:e8:17:36:
                    f5:62:5d:b8:60:b4:a8:e7:22:90:ea:78:b0:0c:13:
                    43:a7:ba:2a:9d:ef:5e:c9:7f:62:2a:4f:67:75:b5:
                    67:00:4f:2a:00:1c:db:d7:54:ec:84:50:75:cb:e1:
                    48:05:8e:04:f5:c5:da:71:6f:5b:56:95:a8:4e:4c:
                    24:56:39:73:81:7e:d0:fd:4e:42:c5:61:85:97:35:
                    85:62:7b:f9:3c:dd:2d:00:8c:bf:95:90:3d:e5:a0:
                    05:a6:3a:64:11:78:68:52:31:0d:11:9f:0b:16:6b:
                    7a:ae:1f:f9:fd:9e:42:c1:d9:44:ff:9b:87:21:b7:
                    d7:7a:7d:4f:92:b0:f0:92:d6:61:96:a0:2c:82:4a:
                    cd:59:02:25:4f:e4:30:33:39:99:59:2b:71:a5:2c:
                    2c:51:c0:b2:b2:4e:94:17:5a:7f:f1:73:a7:c0:4e:
                    8d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7E:B8:85:B6:42:26:BE:CC:39:45:6A:EF:EB:6C:6F:6C:B9:D9:39
            X509v3 Authority Key Identifier:
                keyid:13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:9a:5f:18:25:99:ee:79:d7:cc:9d:a7:a6:17:a8:2f:6c:df:
         be:b8:df:a9:21:b0:29:54:4d:6a:42:b5:72:a2:cd:73:6d:da:
         a7:bb:41:1e:8c:75:da:42:1f:53:8f:8d:8e:bb:62:b9:4e:ea:
         e9:df:5f:f4:86:0d:80:f3:af:a2:e4:58:f2:1b:15:ef:a6:89:
         2e:9a:7d:48:02:ba:c1:15:81:c8:4f:f9:8b:13:f0:75:26:f6:
         dc:88:4f:4a:b5:5a:ad:16:43:9a:b2:b8:ba:b5:50:ca:ad:6a:
         14:c0:3c:6e:63:d3:c2:3f:37:8e:de:a1:c5:fc:6c:66:9a:32:
         da:33:0e:95:1e:95:ad:80:df:f9:6e:10:c6:ff:3e:c7:21:40:
         cc:47:e6:f0:eb:f9:56:7e:33:c6:14:11:c4:6a:b6:6c:56:0f:
         36:bd:81:27:af:2c:60:20:80:82:24:85:a3:ee:e6:c4:a3:3a:
         8d:99:80:1b:d7:b2:aa:c9:0b:03:b8:25:77:80:e1:b0:41:de:
         c5:2a:34:44:47:0b:63:aa:3b:bf:93:a9:68:8a:ac:69:89:cf:
         29:c8:dc:a3:e9:df:38:ae:64:a4:e2:a3:e3:8c:6a:10:2a:72:
         8b:f0:93:c5:ff:54:bd:27:2f:d0:b4:15:c3:be:ac:39:1d:ae:
         31:ca:ca:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:09:09 2026 by rpki-client