Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
File:                     8p5p65n-wSVjcxHUMFL3kx2P3TI.mft (raw, json)
Hash identifier:          38S9kp6xEdFx+wXdUjYl1W5kgTNdwTgoSogTwY7ugvc=
Subject key identifier:   A6:55:3E:7A:02:84:9F:D2:69:07:EC:FC:56:F9:49:31:BB:61:2C:99
Authority key identifier: F2:9E:69:EB:99:FE:C1:25:63:73:11:D4:30:52:F7:93:1D:8F:DD:32
Certificate issuer:       /CN=f29e69eb99fec125637311d43052f7931d8fdd32
Certificate serial:       01A0C47C2569A49C6EA50A3BB3F4B7B36B63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8p5p65n-wSVjcxHUMFL3kx2P3TI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
Manifest number:          09FF
Signing time:             Mon 21 Sep 2026 15:01:05 +0000
Manifest this update:     Mon 21 Sep 2026 15:01:05 +0000
Manifest next update:     Tue 22 Sep 2026 15:01:05 +0000
Files and hashes:         1: 8p5p65n-wSVjcxHUMFL3kx2P3TI.crl (hash: 0RlN/vQG0bivIhldTllgsIsd1Q6jeI4XI+6rd1yCBWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8p5p65n-wSVjcxHUMFL3kx2P3TI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7c:25:69:a4:9c:6e:a5:0a:3b:b3:f4:b7:b3:6b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29e69eb99fec125637311d43052f7931d8fdd32
        Validity
            Not Before: Sep 21 15:01:05 2026 GMT
            Not After : Sep 22 15:01:05 2026 GMT
        Subject: CN=a6553e7a02849fd26907ecfc56f94931bb612c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e0:f4:c8:cd:ce:36:0b:c4:f8:43:06:7f:ad:
                    98:bf:5d:5c:d8:44:bc:90:5b:c5:fd:77:78:11:2b:
                    83:76:82:84:ec:1c:bd:19:ae:72:fb:3e:c8:66:ee:
                    89:be:cd:62:3f:19:f7:6d:01:ed:f2:3c:83:02:86:
                    63:db:f3:13:b1:de:f3:c4:dd:46:f8:21:66:91:4c:
                    e3:8f:f3:9a:54:51:68:d7:67:6d:d7:a1:ca:2a:f7:
                    f8:6f:53:5e:b7:74:2c:67:dc:41:07:84:46:77:83:
                    8e:6d:46:81:e9:c9:58:fa:c2:79:5c:2e:38:98:e5:
                    91:4c:0c:cf:fd:80:a3:8f:72:81:50:e0:da:b9:16:
                    28:d9:d0:1f:1f:31:87:48:da:db:53:c1:25:75:48:
                    f9:0e:ba:ba:e8:dd:72:e7:8d:45:d3:98:22:f8:04:
                    e9:1d:2e:7b:d2:f9:cc:b6:37:8d:90:c6:fe:5f:8b:
                    c9:70:d0:a3:14:72:04:4c:b3:aa:e8:00:ad:e1:2e:
                    91:6b:8b:4d:a5:bb:a5:8c:18:d2:47:a7:3a:25:3b:
                    f4:ee:9b:51:62:4a:76:d1:83:2e:20:da:91:60:59:
                    6e:c6:d1:39:4c:09:e2:d3:6a:92:f7:d8:8b:c8:27:
                    dc:57:87:99:4e:b8:d1:8d:f4:59:c7:45:fe:35:b3:
                    10:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:55:3E:7A:02:84:9F:D2:69:07:EC:FC:56:F9:49:31:BB:61:2C:99
            X509v3 Authority Key Identifier:
                keyid:F2:9E:69:EB:99:FE:C1:25:63:73:11:D4:30:52:F7:93:1D:8F:DD:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p5p65n-wSVjcxHUMFL3kx2P3TI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:9c:95:43:1d:1b:67:4b:b1:c3:96:d9:4d:9f:2e:59:5d:ce:
         49:fe:2f:99:c2:4e:76:de:26:c2:7a:13:df:93:23:c7:a2:4a:
         95:23:1c:c2:56:26:9d:db:94:bd:2f:62:51:80:81:c8:47:24:
         ff:c4:23:55:08:18:70:e4:8f:63:ad:5c:04:d5:2c:6e:42:4f:
         30:75:b0:0b:ab:09:84:d0:45:95:ce:a9:35:6b:df:c6:98:0e:
         d7:00:7f:67:4a:14:f3:da:b8:00:27:9e:b7:d8:23:ce:8c:b6:
         be:6f:75:31:09:9d:f5:bf:2b:d2:06:54:73:53:77:49:c8:09:
         41:f5:22:d1:1f:d5:9f:66:d9:8c:e2:a0:9f:17:2c:4a:bf:4f:
         83:9e:4b:2c:d1:87:9f:86:15:35:4b:5d:55:42:21:33:31:94:
         2f:ba:ae:06:09:64:37:e1:63:7b:e3:01:84:b9:13:d7:90:29:
         93:a5:ab:cf:e6:68:6e:ce:80:14:5a:c6:77:9d:8c:4f:17:c7:
         1f:f6:fb:89:4e:55:8c:6e:41:ea:d9:18:76:ac:94:5c:54:42:
         09:e8:7b:52:39:5f:be:11:f3:0e:8b:0e:f0:f0:78:b9:32:38:
         1c:23:02:db:53:ee:6f:0a:41:b1:9e:1d:fa:ce:19:c7:b8:e6:
         54:b3:74:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----