Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/bc8558-5a19-4996-8fe8-182e7c024bce/1/8eeslnls81wLQCS0RrmEwPfC6dU.mft
File:                     8eeslnls81wLQCS0RrmEwPfC6dU.mft (raw, json)
Hash identifier:          b7W1oyRTx4ssRQjl2/UmIeJHlg/Cbbf0yfH7/DI1nhM=
Subject key identifier:   DA:8D:C2:8C:C6:02:DC:61:65:74:17:45:01:77:0B:8E:61:3E:75:D9
Authority key identifier: F1:E7:AC:96:79:6C:F3:5C:0B:40:24:B4:46:B9:84:C0:F7:C2:E9:D5
Certificate issuer:       /CN=f1e7ac96796cf35c0b4024b446b984c0f7c2e9d5
Certificate serial:       01A1BA2CC5ED17AF281E611AD41A8111F52C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8eeslnls81wLQCS0RrmEwPfC6dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/bc8558-5a19-4996-8fe8-182e7c024bce/1/8eeslnls81wLQCS0RrmEwPfC6dU.mft
Manifest number:          75
Signing time:             Sun 08 Nov 2026 08:00:58 +0000
Manifest this update:     Sun 08 Nov 2026 08:00:58 +0000
Manifest next update:     Mon 09 Nov 2026 08:00:58 +0000
Files and hashes:         1: 8eeslnls81wLQCS0RrmEwPfC6dU.crl (hash: e04tViME37hyzEyRjXpqHSfWi4aK2WYEoFwc6W3+rqo=)
                          2: 9V2-m0NGxI72O3R3bUbU2flL2Rs.roa (hash: cpSR+cuIXdghpZLaW7FnpDsg9IFTD0DTDzECS1Zeuqg=)
                          3: rigrF52kbfmpzrGC12XftRZqA4c.asa (hash: ElJVZxzgf7Bt3mVC8qbbUArNau5imoxSTpS3iscgINQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/bc8558-5a19-4996-8fe8-182e7c024bce/1/8eeslnls81wLQCS0RrmEwPfC6dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/bc8558-5a19-4996-8fe8-182e7c024bce/1/8eeslnls81wLQCS0RrmEwPfC6dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8eeslnls81wLQCS0RrmEwPfC6dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Nov 2026 08:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:ba:2c:c5:ed:17:af:28:1e:61:1a:d4:1a:81:11:f5:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1e7ac96796cf35c0b4024b446b984c0f7c2e9d5
        Validity
            Not Before: Nov  8 08:00:58 2026 GMT
            Not After : Nov  9 08:00:58 2026 GMT
        Subject: CN=da8dc28cc602dc616574174501770b8e613e75d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:04:8b:3b:f6:47:46:83:96:3c:29:c3:22:d5:
                    25:23:51:93:f5:7d:1c:4f:6b:80:3d:6d:3b:5e:ef:
                    f0:c4:68:64:66:96:03:83:57:39:1f:7f:f1:96:78:
                    09:7b:8d:65:d0:e3:61:7b:04:d6:15:23:2c:ec:23:
                    3e:ae:7c:e6:26:5e:9b:71:9d:91:cb:fd:ee:6e:61:
                    a6:f6:ee:f3:12:ab:92:d0:e3:8a:f2:56:48:4d:09:
                    e5:af:17:73:08:05:9b:7f:f1:f3:df:18:30:e7:b3:
                    91:79:7c:43:2b:35:12:3c:96:a4:71:09:50:43:db:
                    d8:95:65:34:c9:72:10:98:a9:50:18:f7:a0:e1:0c:
                    5e:b0:49:35:2c:9b:f0:cc:42:e7:e1:2e:a4:ff:24:
                    d9:3d:b1:2a:78:a4:d8:3b:ff:ee:8a:cb:1e:31:85:
                    6b:db:d5:c0:67:3a:fb:b4:c7:ad:49:28:5e:37:93:
                    ed:85:b9:1a:8d:ef:e1:5a:89:6f:2d:00:bd:78:3c:
                    91:58:10:44:10:57:f7:3e:71:5a:5f:0d:c1:01:2e:
                    5c:f1:ef:f3:f8:7f:20:29:c1:93:72:3c:68:76:15:
                    91:dd:f9:d3:64:e4:3b:fc:a6:64:19:0b:d2:22:e1:
                    11:ad:fa:11:37:46:31:0b:6d:a2:ba:05:df:1d:08:
                    93:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8D:C2:8C:C6:02:DC:61:65:74:17:45:01:77:0B:8E:61:3E:75:D9
            X509v3 Authority Key Identifier:
                keyid:F1:E7:AC:96:79:6C:F3:5C:0B:40:24:B4:46:B9:84:C0:F7:C2:E9:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8eeslnls81wLQCS0RrmEwPfC6dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bc8558-5a19-4996-8fe8-182e7c024bce/1/8eeslnls81wLQCS0RrmEwPfC6dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bc8558-5a19-4996-8fe8-182e7c024bce/1/8eeslnls81wLQCS0RrmEwPfC6dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a7:7f:b5:db:65:fc:a4:9b:c1:8f:18:c7:43:11:46:06:8a:
         a9:78:c6:10:0f:24:24:df:7e:5b:32:fd:fa:17:63:3e:5f:d1:
         cc:af:6e:04:24:59:bd:16:d7:0e:ca:9d:d3:23:64:76:9e:a3:
         9c:f4:b7:30:71:2c:d0:3a:ac:8c:2f:f5:c9:e2:b8:63:1b:44:
         b5:91:f0:3f:0a:e6:9c:d0:4a:bf:12:46:ef:aa:4c:a4:ed:75:
         17:4b:59:b4:67:4a:5d:cf:24:85:82:69:18:58:74:33:71:b6:
         e3:a3:b3:c0:82:38:38:0e:ef:dc:04:69:b9:1a:7f:3b:8f:04:
         c9:38:66:c5:46:b7:a6:80:ab:7c:43:28:f4:aa:76:3e:a6:ca:
         8c:33:99:6e:68:ce:36:a9:81:cb:4f:29:f4:be:5d:97:a0:d9:
         f4:16:cf:9c:e2:7e:6a:89:2a:9e:4d:11:78:b9:70:60:f4:66:
         50:fe:79:e4:bc:7c:96:76:98:aa:c4:0a:cd:9a:d7:e6:04:f5:
         87:9c:66:16:10:d9:e6:3a:bf:85:7b:46:94:51:20:4e:50:23:
         b8:53:f7:d4:9b:02:25:c3:61:3b:ab:ba:23:f1:7e:80:f6:e0:
         2b:51:9f:d3:a2:f2:f0:8c:c4:30:b9:74:cd:fc:b2:9d:a1:7a:
         fa:bb:3c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 23:32:19 2026 by rpki-client