Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.mft
File:                     8FeESpdTnPV_g8yXTVju0ofv2as.mft (raw, json)
Hash identifier:          WPXSHNaOf8Bvm7xUNk1J6pNUL0cAbwm191mlU2eN4eY=
Subject key identifier:   B9:BD:A8:89:D0:D6:19:46:4C:C5:E8:3E:35:B0:1C:C1:7D:1D:7B:FA
Authority key identifier: F0:57:84:4A:97:53:9C:F5:7F:83:CC:97:4D:58:EE:D2:87:EF:D9:AB
Certificate issuer:       /CN=f057844a97539cf57f83cc974d58eed287efd9ab
Certificate serial:       01A0BEB1242B46C305D76A7A6ACAF7F6300E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8FeESpdTnPV_g8yXTVju0ofv2as.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.mft
Manifest number:          DC
Signing time:             Sun 20 Sep 2026 12:01:15 +0000
Manifest this update:     Sun 20 Sep 2026 12:01:15 +0000
Manifest next update:     Mon 21 Sep 2026 12:01:15 +0000
Files and hashes:         1: 8FeESpdTnPV_g8yXTVju0ofv2as.crl (hash: o40C2pI0Mz1aSHSlD7Z1UTi2m/GwCdGCJPIe/tuT3II=)
                          2: YAe6av1IQX5FoLA2_JIjBhAIgMk.roa (hash: ThkHx60LVftccna25b9+M7mqoqOKfrX7xC9VLS13eM8=)
                          3: pZ9V2IY1voGm3J0lqTj6JXZy-jc.roa (hash: ftUTgUhlmUu/y5OQmNNSk095RdRMaTOBMZx0Ohtho2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8FeESpdTnPV_g8yXTVju0ofv2as.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:b1:24:2b:46:c3:05:d7:6a:7a:6a:ca:f7:f6:30:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f057844a97539cf57f83cc974d58eed287efd9ab
        Validity
            Not Before: Sep 20 12:01:15 2026 GMT
            Not After : Sep 21 12:01:15 2026 GMT
        Subject: CN=b9bda889d0d619464cc5e83e35b01cc17d1d7bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f6:87:17:c9:93:8d:c2:22:bc:bc:bd:48:e6:
                    13:3e:9a:bd:0a:9b:59:98:08:4b:7a:85:df:e5:af:
                    6d:91:15:0d:77:01:b9:ed:14:a6:e3:25:46:51:e1:
                    c9:9d:69:00:5f:46:ce:21:67:15:5a:4f:df:0a:fc:
                    23:da:09:68:0f:e4:77:ce:7c:c4:b6:e4:c0:f6:d1:
                    a4:63:34:e8:13:6e:86:92:e0:ea:18:e9:eb:ba:35:
                    6d:53:f1:72:a0:e1:9b:c4:5d:47:2d:24:5e:f0:a9:
                    c9:82:72:58:0a:c1:5e:f6:19:bb:45:66:56:e4:fc:
                    31:c0:ee:ee:9a:93:dd:62:cd:5a:99:0e:f3:7a:69:
                    86:ca:3c:ce:ac:5e:c9:63:cf:8b:ea:39:fd:a0:0d:
                    fe:20:7b:72:01:e2:fc:07:7b:11:74:b4:d9:38:9b:
                    4d:cf:d4:65:53:73:c3:99:41:fc:c1:46:41:49:5e:
                    2f:89:a1:fc:e4:cd:43:e5:e9:99:54:8d:7c:fe:80:
                    7f:f7:08:af:3d:e3:ba:77:cb:41:2a:e1:b6:69:84:
                    fa:24:27:27:62:0b:62:a3:56:0a:ff:43:55:d3:48:
                    0d:49:dd:98:bd:bc:7d:81:19:e3:e3:d9:94:49:f4:
                    6d:e3:97:25:6d:42:6c:51:ee:c0:56:39:a7:68:ac:
                    87:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BD:A8:89:D0:D6:19:46:4C:C5:E8:3E:35:B0:1C:C1:7D:1D:7B:FA
            X509v3 Authority Key Identifier:
                keyid:F0:57:84:4A:97:53:9C:F5:7F:83:CC:97:4D:58:EE:D2:87:EF:D9:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FeESpdTnPV_g8yXTVju0ofv2as.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:85:99:86:36:e2:c6:9d:c6:45:3c:a9:0f:df:1c:7f:31:a6:
         fb:23:8b:ea:fa:8e:e2:44:4d:fd:e0:a7:4d:3a:d5:02:c0:d8:
         85:9a:65:fd:a3:8c:59:72:98:11:57:c9:05:4a:86:b0:00:80:
         93:a5:ed:83:90:65:b3:63:03:ac:41:0c:2d:47:77:c9:aa:70:
         35:bc:7f:e2:58:89:ba:a3:bc:29:bc:0c:fe:43:10:55:f0:e3:
         cc:08:95:f3:21:a5:f6:76:ec:6b:87:7f:01:ad:d7:13:2f:05:
         ce:b1:2d:ac:02:7e:e7:55:c8:10:18:72:a9:6a:a1:12:24:b3:
         61:6c:2b:1c:3c:21:43:3d:b0:67:72:84:a1:08:b0:54:a5:ba:
         30:82:51:10:2e:c4:61:91:f9:3d:76:60:84:d8:63:27:2a:b7:
         b3:bf:dd:2a:ac:cf:38:24:49:8d:03:1f:c8:82:15:f1:83:d6:
         8d:a9:72:8c:24:bb:0a:cb:7d:cb:7c:92:ba:bc:64:07:4c:d1:
         6b:76:2a:6f:69:35:11:ec:eb:0a:88:65:ba:4a:f9:d6:b4:8f:
         8a:e9:b8:54:91:cc:1f:de:3f:a3:68:d9:c1:86:c1:58:4b:23:
         07:ad:b8:52:ec:f2:a2:1b:76:5a:d3:00:1b:32:fd:94:e8:aa:
         74:c1:bf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:01:06 2026 by rpki-client