Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
File:                     8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json)
Hash identifier:          48m5cNfKrbLf/vtegCle4cv6BN4htCkux70toWJpGvQ=
Subject key identifier:   E7:9D:98:84:D3:EB:5E:32:A4:D8:95:81:91:96:9A:98:BE:D9:87:70
Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
Certificate issuer:       /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Certificate serial:       01A0C09F649E22B30C2D263F541711F9D3F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
Manifest number:          0FAE
Signing time:             Sun 20 Sep 2026 21:01:06 +0000
Manifest this update:     Sun 20 Sep 2026 21:01:06 +0000
Manifest next update:     Mon 21 Sep 2026 21:01:06 +0000
Files and hashes:         1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: 3Jm/sBzXzXn9VL+Ec6XrXISZHCadrrYZDDS6/x93lgs=)
                          2: rrV62ijQPMJX14hvzKMZztvUerc.roa (hash: qf9E3VmwVfV6USXHUXb50PtIEki9bvKr+AmM9c2BKVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:9f:64:9e:22:b3:0c:2d:26:3f:54:17:11:f9:d3:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
        Validity
            Not Before: Sep 20 21:01:06 2026 GMT
            Not After : Sep 21 21:01:06 2026 GMT
        Subject: CN=e79d9884d3eb5e32a4d8958191969a98bed98770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6b:81:eb:78:b4:7d:49:85:c3:d6:39:ec:c7:
                    90:f7:57:f2:61:f0:a2:fb:e2:f7:85:0c:89:62:17:
                    b2:6b:66:b4:ee:e6:2b:60:f5:60:0a:c1:da:ee:ce:
                    51:24:e1:9c:f9:ff:2b:6a:db:4f:81:d0:c2:88:1c:
                    d9:1e:e1:8d:93:a3:d3:40:c8:10:ed:85:53:21:db:
                    89:09:bb:ea:96:bc:ff:34:3a:e8:57:c6:f8:73:0e:
                    e3:14:94:19:6e:41:1d:87:45:ef:ca:88:84:5a:6b:
                    0f:31:a7:c2:59:f5:80:a8:f7:17:0e:94:70:c4:6d:
                    f8:01:7a:bb:46:6f:3d:81:5a:9e:e2:bb:f7:af:20:
                    f2:1f:15:cd:f0:89:b3:90:6c:a6:06:db:d5:17:39:
                    27:7d:d8:13:41:6c:2f:6d:25:2a:02:7f:c8:b3:84:
                    de:25:d5:0a:90:af:3c:45:f9:59:f7:8b:a8:4f:0f:
                    47:a9:21:27:74:98:34:c6:3e:e1:8c:10:14:a4:72:
                    52:c7:06:70:9f:29:1a:6a:51:ca:6b:69:e1:e8:1e:
                    45:87:f4:10:5d:ad:6f:e8:d0:03:75:f1:ca:02:78:
                    2f:6f:f0:1c:55:a8:dc:31:d8:5c:e1:87:62:3d:30:
                    8d:ab:14:4a:0b:cb:64:30:c7:8f:de:22:49:f1:2a:
                    11:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9D:98:84:D3:EB:5E:32:A4:D8:95:81:91:96:9A:98:BE:D9:87:70
            X509v3 Authority Key Identifier:
                keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e9:28:7c:d8:e9:e6:61:07:59:30:64:a1:06:b4:45:93:f5:
         ad:83:f4:b6:f7:67:f9:ea:1d:02:ee:ee:a7:1c:89:5f:01:f0:
         7e:69:56:1a:5e:e6:0a:57:cc:b0:3c:54:c5:e2:ee:91:68:2a:
         92:f7:3b:6a:e5:38:e6:5c:40:a8:01:e0:7a:b2:b8:d1:59:c6:
         5b:74:91:97:54:2f:4f:45:a4:cc:a4:93:93:10:c4:df:2c:f4:
         a3:7f:53:16:9e:b7:b8:20:4f:7c:53:69:d4:e4:3d:87:b6:05:
         19:23:5e:00:7a:2e:57:48:f7:d3:8f:3f:83:f2:9d:ae:e4:8e:
         7d:c4:29:7d:2e:a9:52:b9:1c:da:63:85:84:7a:42:1c:ea:ab:
         54:41:c9:db:fa:62:2a:a0:0f:a7:72:cb:b7:89:9d:e7:b5:87:
         87:e4:af:6d:a7:ed:99:97:3f:df:d9:8e:9e:65:c6:a0:bf:e0:
         a5:2f:b9:c0:8e:23:92:b3:9d:1b:38:97:8f:1c:1c:4a:3d:b4:
         19:5c:82:9a:11:3c:5c:9c:bf:72:e1:ba:ef:4e:29:b5:73:47:
         2e:f3:a1:8a:d8:aa:56:8a:56:68:ca:06:f0:4c:d8:16:e5:e6:
         e2:53:cd:c2:6c:18:00:6d:39:c5:aa:b1:27:cd:f2:dd:a4:f5:
         34:22:78:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:18:15 2026 by rpki-client