Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
File:                     8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft (raw, json)
Hash identifier:          anzRHFY8QZ8R0VFH4RMG1LMB14U8qVLr81bzPhOzQ94=
Subject key identifier:   62:35:6C:8B:57:7E:83:17:22:38:60:54:73:15:BB:F5:F4:C2:34:22
Authority key identifier: F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
Certificate issuer:       /CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Certificate serial:       01A0C47C449FE40F1C425B631623C99AADB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
Manifest number:          0D1E
Signing time:             Mon 21 Sep 2026 15:01:13 +0000
Manifest this update:     Mon 21 Sep 2026 15:01:13 +0000
Manifest next update:     Tue 22 Sep 2026 15:01:13 +0000
Files and hashes:         1: 1e3-ee_DDB8uKbq4DDF2oeY9brA.roa (hash: d1HzxXfkVXwQpykJbxZZ+w5Pxsb18cIOczK6ype9Npo=)
                          2: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl (hash: l6uefOVaticJFaxsYNucLwEfRRRlpoBEoJcA5Eh5soc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7c:44:9f:e4:0f:1c:42:5b:63:16:23:c9:9a:ad:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
        Validity
            Not Before: Sep 21 15:01:13 2026 GMT
            Not After : Sep 22 15:01:13 2026 GMT
        Subject: CN=62356c8b577e8317223860547315bbf5f4c23422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:ca:13:29:2d:65:67:b6:8f:ca:79:c3:75:
                    30:fc:54:9f:c6:2c:8b:92:72:a5:dc:b2:04:80:60:
                    13:67:9b:9a:7e:27:1e:a6:b6:69:df:0d:46:cf:02:
                    70:cf:54:ce:a2:6a:33:47:3a:3e:81:e3:76:38:41:
                    a3:c9:6b:84:89:66:d8:c8:4f:dd:a3:3d:71:53:fd:
                    a8:2c:5c:3b:07:44:de:5b:2f:13:43:f4:5b:fa:dc:
                    bc:a7:79:f9:30:b4:31:a9:b9:99:ea:23:8c:03:50:
                    f2:86:5e:2e:c8:d8:a1:4c:a1:b5:6e:a6:9e:78:3b:
                    e5:6d:7d:44:75:81:e0:14:7e:55:4b:e7:05:f7:97:
                    01:23:2f:14:d2:e3:12:0c:f6:12:72:3d:14:c0:ec:
                    e8:b0:6c:4e:fb:bc:2d:46:a0:93:f2:af:11:2b:53:
                    22:b2:68:c3:d8:a7:5e:66:6b:ae:3b:c5:44:7f:5c:
                    14:6b:50:f9:b9:c6:83:54:a2:d2:45:28:a2:cb:d3:
                    b9:29:4b:58:ba:b7:d9:ad:bf:7e:8c:87:f7:0b:ce:
                    86:20:37:de:5b:e3:8a:0e:87:bb:94:66:68:70:fa:
                    28:4b:d5:28:d3:fd:30:3b:09:1c:24:0c:fb:72:83:
                    24:f1:53:20:4f:04:0a:ab:fd:08:fb:6c:d1:14:02:
                    6f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:35:6C:8B:57:7E:83:17:22:38:60:54:73:15:BB:F5:F4:C2:34:22
            X509v3 Authority Key Identifier:
                keyid:F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:08:3a:6b:e3:2b:99:da:d1:0f:ef:2f:5d:f1:3f:df:09:10:
         8f:1a:b6:82:bf:d6:eb:d9:6d:74:b6:26:bb:cc:a6:bb:f2:33:
         51:91:13:91:74:4c:40:dd:1d:85:ce:47:84:c9:02:01:89:3b:
         eb:c0:f8:14:85:87:0a:c8:0e:70:98:03:9d:da:f7:f3:2f:ac:
         d5:eb:e4:64:5a:62:5a:8f:b2:d6:60:c8:b6:a2:d3:d0:8e:7d:
         e6:9a:7b:b8:c4:24:ef:0c:04:56:ef:cf:17:37:c0:01:ce:41:
         1d:3b:ae:a5:76:63:a0:5a:b7:f6:70:5c:5e:af:9c:f1:cf:2b:
         03:1c:34:9b:66:af:c8:c7:30:cd:1c:25:e8:eb:74:fb:a0:aa:
         80:ae:72:e3:c1:5e:10:9e:84:af:0d:3d:68:09:02:a6:3f:e9:
         c4:92:3d:a0:36:79:32:a8:71:5b:39:8f:be:93:0a:89:30:04:
         89:04:31:78:f8:c9:6c:b3:05:02:41:e2:71:16:0d:28:29:1a:
         16:2b:c2:cf:72:64:fa:db:0d:45:d3:8f:83:98:92:3b:7e:1f:
         03:82:71:17:ce:27:a0:fe:22:1f:88:84:7a:56:53:21:b4:b9:
         df:5a:85:8d:74:a9:81:36:94:f0:1e:4a:c4:aa:4b:ec:eb:ab:
         81:75:d7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:14:39 2026 by rpki-client