Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
File:                     E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft (raw, json)
Hash identifier:          EvZqy4PTHf5fTvgfT6q1e1XcxPcO0rRyFA1eRBsOkkY=
Subject key identifier:   88:D4:D3:AC:68:41:3A:8D:4C:51:1C:8A:62:5F:49:E0:DE:5E:50:48
Authority key identifier: 13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E
Certificate issuer:       /CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
Certificate serial:       01A0C4B24A4FC14640050A0B682E344A8989
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
Manifest number:          1A66
Signing time:             Mon 21 Sep 2026 16:00:13 +0000
Manifest this update:     Mon 21 Sep 2026 16:00:13 +0000
Manifest next update:     Tue 22 Sep 2026 16:00:13 +0000
Files and hashes:         1: E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl (hash: 2KU04iU9mJv6H60AjBvmdinjllHmwIoNzNS0pief4kM=)
                          2: Kh2ibrrlvAJA0BPytF3vpct5nG8.roa (hash: 9S+B5OPrOVNMPF41i1ZV7e9GhndsXm9HajUBATSWGss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:b2:4a:4f:c1:46:40:05:0a:0b:68:2e:34:4a:89:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
        Validity
            Not Before: Sep 21 16:00:13 2026 GMT
            Not After : Sep 22 16:00:13 2026 GMT
        Subject: CN=88d4d3ac68413a8d4c511c8a625f49e0de5e5048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:81:0c:33:54:2a:ed:49:f4:b5:d0:73:9d:f5:
                    2e:fe:58:05:0e:5a:b0:71:74:0b:eb:98:a7:f7:ae:
                    7a:01:d9:ba:c1:86:c9:49:d8:a1:c0:b2:9f:2f:14:
                    a5:8b:94:f7:25:23:a8:2d:68:7b:58:02:0f:84:36:
                    9a:3a:f1:6e:7a:4b:e1:e1:26:98:7b:a1:c4:28:d6:
                    e5:da:9f:cc:a0:7e:9d:fb:b0:2d:e5:b7:43:53:65:
                    71:97:7f:81:6c:56:cb:3f:14:04:28:08:67:f4:b5:
                    ae:4b:c1:a3:e5:82:4e:09:2d:18:54:c1:01:48:13:
                    2c:9a:bf:ea:66:f0:3e:11:9e:6a:4c:89:63:ae:ab:
                    b7:1e:d4:fa:e1:4b:56:33:24:69:97:87:bc:2e:10:
                    fc:03:62:d1:a0:10:67:f1:92:dd:e5:af:bb:57:9d:
                    fb:64:93:72:6c:87:cb:21:ee:d0:e2:e5:1c:3d:7c:
                    48:48:ac:cd:dd:dc:a0:bb:02:cc:e3:29:7b:75:67:
                    b0:53:fa:c9:d8:ab:7f:a4:ec:02:14:84:e3:7f:ef:
                    2f:b9:99:2a:b5:49:80:0b:ac:8d:98:5a:83:de:41:
                    b0:bc:a8:7e:65:1c:11:f7:26:b3:a0:d8:ce:50:93:
                    bd:26:40:16:14:68:36:21:c3:bd:ab:ac:74:22:80:
                    5b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D4:D3:AC:68:41:3A:8D:4C:51:1C:8A:62:5F:49:E0:DE:5E:50:48
            X509v3 Authority Key Identifier:
                keyid:13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:da:4e:6d:97:c0:1c:15:8f:0b:f4:17:29:96:c4:ac:7b:36:
         e5:e0:8d:3f:ff:b2:82:ab:42:11:6c:8c:5a:7d:c4:ca:c9:a3:
         c1:66:b1:76:93:3e:2e:c9:83:3c:05:1a:84:de:5c:97:3a:61:
         bd:a1:e8:17:8e:32:34:bf:a6:ba:cf:30:e5:c3:5d:cc:89:17:
         e7:ca:08:cc:b2:57:df:1a:75:3e:45:c2:08:84:bb:1f:4f:fe:
         fe:88:b3:88:8c:9a:f8:c5:6a:34:93:c3:be:4b:1a:7e:92:60:
         a6:ce:5b:02:66:24:af:41:fc:55:1e:29:ac:55:7c:86:c3:61:
         fb:87:0b:98:89:2c:b4:09:21:aa:3c:cc:b8:68:0d:cf:10:d8:
         e7:7f:8c:c8:08:77:c3:45:78:b3:8e:a5:2f:84:a1:53:53:62:
         da:14:91:c4:a2:3a:92:6c:47:c4:63:fc:ad:85:f8:d9:0e:d2:
         bf:87:38:4e:a3:7a:27:a9:ff:43:20:6e:5d:52:0a:e6:e7:56:
         fc:b6:05:8c:b7:c3:88:05:f0:e9:ef:76:85:ce:68:9d:ae:c6:
         ae:28:d9:f1:38:e9:dd:74:b7:95:dd:1a:33:dd:0c:a2:26:8d:
         19:a7:8a:5e:af:67:71:56:40:3c:02:b9:d0:cb:85:d2:68:17:
         42:15:5b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:31:52 2026 by rpki-client