Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
File:                     8FCiDjDskV3tHfIAVa9rXyZnLqk.mft (raw, json)
Hash identifier:          Y6+V/8ZBhLFsCwZ0ZxahdaGZt4GW/Aa6NYMrVlrP3EA=
Subject key identifier:   94:3F:7E:CA:AB:A4:A9:00:02:88:1B:21:48:B7:07:9F:00:EC:74:3F
Authority key identifier: F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
Certificate issuer:       /CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Certificate serial:       01A0C934D6C6BCA4F87197628B01AF62D720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
Manifest number:          1A66
Signing time:             Tue 22 Sep 2026 13:01:18 +0000
Manifest this update:     Tue 22 Sep 2026 13:01:18 +0000
Manifest next update:     Wed 23 Sep 2026 13:01:18 +0000
Files and hashes:         1: 8FCiDjDskV3tHfIAVa9rXyZnLqk.crl (hash: na+ot7CMrBTjpMF74jLmt4AW3wVEFD9R87CFyGUX2U4=)
                          2: VVUHU9wzPSipaX2HFFPnxlMDk40.roa (hash: LpkGFoTMr4l6RIiQwmwapd7pQ8v6qmtf4dTq+3Df5AE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:34:d6:c6:bc:a4:f8:71:97:62:8b:01:af:62:d7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f050a20e30ec915ded1df20055af6b5f26672ea9
        Validity
            Not Before: Sep 22 13:01:18 2026 GMT
            Not After : Sep 23 13:01:18 2026 GMT
        Subject: CN=943f7ecaaba4a90002881b2148b7079f00ec743f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ce:e9:2c:c1:98:28:1b:ab:4c:ad:10:bf:30:
                    c7:3f:5f:90:10:d3:4d:21:1d:01:f8:92:17:e0:5c:
                    33:01:b1:19:d9:38:a4:66:f3:9f:f1:c2:3d:e4:c6:
                    a5:5a:15:71:7f:03:68:fe:82:dc:ee:44:f4:57:db:
                    30:5f:81:fe:23:62:d5:3b:ed:02:9f:0e:cf:65:01:
                    f2:03:c4:30:7b:05:cd:47:1d:fd:c8:aa:f9:09:dd:
                    c9:59:82:a7:0b:4e:e3:61:e2:7b:46:33:2f:fb:fa:
                    9c:af:ef:10:20:bf:bb:55:9c:de:40:bf:1b:44:8d:
                    57:43:05:d9:8b:35:80:35:ae:a9:07:3d:49:75:f0:
                    a5:d2:b5:45:a1:11:17:17:51:59:52:68:23:67:d9:
                    4c:30:95:d4:be:ce:e0:2a:ac:cf:38:02:21:49:f4:
                    a0:be:6c:1f:c0:aa:a0:24:c9:6d:80:ae:a6:e2:10:
                    ae:1e:ba:ce:9d:cb:55:e7:60:c5:e1:ac:f5:ec:ca:
                    f8:a9:78:60:05:da:5a:1e:94:c2:34:60:59:6b:c1:
                    2f:17:61:ac:45:fa:3b:8b:01:de:a3:65:84:46:1a:
                    97:ee:15:6e:bc:7c:5e:c8:55:5f:dd:03:15:13:e2:
                    24:db:60:58:c8:ef:76:83:fc:26:ab:6e:b7:50:c6:
                    dd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3F:7E:CA:AB:A4:A9:00:02:88:1B:21:48:B7:07:9F:00:EC:74:3F
            X509v3 Authority Key Identifier:
                keyid:F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:60:68:73:d8:ee:8e:de:82:a2:13:46:3c:1c:7d:23:75:5a:
         1a:87:c2:27:e6:c5:64:c6:1d:62:a2:af:3a:96:6f:6b:0a:25:
         3e:76:ab:ff:52:1f:e8:69:5f:13:d3:c5:5d:43:f9:ad:25:3b:
         16:cf:4a:62:18:5b:1f:e6:30:b7:8d:6d:0f:dd:3a:93:ff:40:
         a9:b2:7b:3c:4b:43:2b:9d:3f:89:07:c1:54:7d:57:03:a2:78:
         f3:42:24:b3:9c:3e:9d:98:33:1e:42:ca:d8:ff:7a:00:b7:18:
         08:aa:f8:d2:cb:bd:2f:6b:bc:80:7d:fa:84:ef:89:95:f5:2a:
         d2:a1:ab:fb:9d:4b:ef:1b:63:ef:d3:af:19:6e:c3:27:b9:73:
         2a:25:43:2f:34:d7:53:72:61:da:d4:a7:3c:30:47:ae:18:9a:
         32:99:e9:f5:dc:27:ae:9d:c2:b0:9b:3d:e7:83:ae:44:e5:79:
         a0:b2:71:49:1a:5d:72:07:2f:24:55:2d:2d:f1:e3:1e:51:bd:
         a4:4b:35:ee:1b:fb:c2:f8:b5:41:4f:95:f2:14:f9:f6:df:58:
         63:8d:0b:c4:65:9d:69:28:96:a5:6a:7f:e2:c3:3d:41:dd:bd:
         1b:76:45:1c:a2:6a:e9:be:90:b1:a5:c3:68:b7:df:68:bb:e7:
         de:95:a2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:40:12 2026 by rpki-client