Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/8btSKOZ0B1WjIm7jLIUxoXVFe8I.mft
File:                     8btSKOZ0B1WjIm7jLIUxoXVFe8I.mft (raw, json)
Hash identifier:          cDN9JIH13nkp/N9wa6nENyaVhisnsCJnIMxh+Fsg49Y=
Subject key identifier:   1D:3D:AE:59:FE:2E:3A:9D:5D:8B:BC:98:E7:FC:A3:4A:38:66:BD:C8
Authority key identifier: F1:BB:52:28:E6:74:07:55:A3:22:6E:E3:2C:85:31:A1:75:45:7B:C2
Certificate issuer:       /CN=f1bb5228e6740755a3226ee32c8531a175457bc2
Certificate serial:       01A10814434B30A52CE3857EB1BD4EED1EFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8btSKOZ0B1WjIm7jLIUxoXVFe8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/8btSKOZ0B1WjIm7jLIUxoXVFe8I.mft
Manifest number:          0102
Signing time:             Sun 04 Oct 2026 18:01:48 +0000
Manifest this update:     Sun 04 Oct 2026 18:01:48 +0000
Manifest next update:     Mon 05 Oct 2026 18:01:48 +0000
Files and hashes:         1: 8btSKOZ0B1WjIm7jLIUxoXVFe8I.crl (hash: X9z8FaXrWcDNBlVs+jwk+jqPGa5OHSShP2iVgf4nVpE=)
                          2: jyJWlzyZ1vX6PJ6bDoA7JzTaum8.roa (hash: tR46ai3C4TAvLUk9BEjJ8S6Zo8lFI3KVbuM5/C/MToI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/8btSKOZ0B1WjIm7jLIUxoXVFe8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/8btSKOZ0B1WjIm7jLIUxoXVFe8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8btSKOZ0B1WjIm7jLIUxoXVFe8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 18:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:08:14:43:4b:30:a5:2c:e3:85:7e:b1:bd:4e:ed:1e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1bb5228e6740755a3226ee32c8531a175457bc2
        Validity
            Not Before: Oct  4 18:01:48 2026 GMT
            Not After : Oct  5 18:01:48 2026 GMT
        Subject: CN=1d3dae59fe2e3a9d5d8bbc98e7fca34a3866bdc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:de:20:d9:fb:70:78:09:db:36:75:3f:f5:3d:
                    d3:b2:5a:f5:ae:0d:37:3a:1a:2e:e2:6a:ca:d1:89:
                    6d:f1:8f:97:ac:52:59:b2:30:d2:43:08:d3:70:34:
                    85:40:2b:6c:8f:39:0d:a5:18:73:91:60:98:88:33:
                    6b:ed:eb:db:f2:96:89:c5:00:d4:15:ac:a3:4b:fa:
                    1f:c1:1a:25:ba:cb:60:fc:05:84:69:5d:97:af:14:
                    37:08:aa:bb:1b:29:a9:f6:a0:d9:79:6c:bc:cc:df:
                    83:a9:76:6b:6e:bb:f2:89:d4:73:4c:ec:fe:31:eb:
                    81:76:8b:bb:0f:11:64:29:0c:27:c6:14:d3:52:74:
                    96:80:13:4d:8e:ce:91:40:0a:da:ee:b3:e3:46:d6:
                    13:06:2d:49:7a:79:d5:36:30:17:1b:b9:60:eb:7b:
                    c0:12:b7:ba:a0:9c:15:6e:08:6f:cf:4b:0a:d4:56:
                    4a:fd:3d:eb:b2:90:cb:08:16:9f:22:fb:ef:43:1c:
                    96:6f:30:dd:31:e6:d4:66:98:36:34:51:6e:0d:2b:
                    ac:98:52:f6:bf:8c:f5:da:95:e8:3d:02:10:d8:42:
                    b1:8c:17:4a:c2:94:4e:b8:cb:81:7c:32:a2:51:02:
                    0b:8a:97:ee:66:d2:4b:11:95:c5:53:a4:66:19:da:
                    fc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3D:AE:59:FE:2E:3A:9D:5D:8B:BC:98:E7:FC:A3:4A:38:66:BD:C8
            X509v3 Authority Key Identifier:
                keyid:F1:BB:52:28:E6:74:07:55:A3:22:6E:E3:2C:85:31:A1:75:45:7B:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8btSKOZ0B1WjIm7jLIUxoXVFe8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/8btSKOZ0B1WjIm7jLIUxoXVFe8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/8btSKOZ0B1WjIm7jLIUxoXVFe8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:19:fd:3b:94:a9:5d:ec:4e:a9:89:79:a3:d8:83:c1:24:4e:
         e5:f3:1f:26:b8:28:36:6a:dc:5b:6b:4d:8f:3e:3f:cb:66:b3:
         2a:b0:cd:db:5d:29:21:a7:8e:6e:da:8c:ca:23:2f:6d:cd:51:
         57:cb:b8:6d:c8:20:d9:04:64:9a:70:06:94:03:33:c0:b7:78:
         63:4d:16:67:5c:1a:10:bb:c1:24:32:c0:fb:47:5a:6c:83:cc:
         7b:6d:98:4f:d3:1c:51:d8:be:35:6c:7f:dc:a3:89:a9:76:dc:
         26:23:70:b2:99:fe:92:f6:32:3a:2f:45:ac:a9:ad:2e:61:f0:
         2a:ec:19:62:e4:2e:71:55:37:67:d3:f0:f0:ca:a1:20:f4:54:
         f2:28:8c:97:6f:70:a4:8d:90:f5:ea:24:4d:7b:b5:bb:46:48:
         1b:bb:ec:44:b8:c2:85:c6:2f:d7:eb:c5:b0:c7:59:4c:90:95:
         83:b3:6f:dd:e4:04:a1:5f:ac:e6:5e:48:a8:ad:51:33:08:12:
         f4:8a:a5:8b:91:a8:d1:47:83:cb:fb:54:92:15:f1:a6:0f:0c:
         fe:82:32:3b:1b:41:c6:79:ed:85:40:ac:2e:bd:52:a7:1c:4a:
         ea:57:af:2a:db:d1:9c:e0:71:b0:f8:d8:1c:95:dd:30:3c:70:
         c5:13:33:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 04:57:06 2026 by rpki-client