Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
File:                     8JLOTWiFNFSE6Zp312Fm_HICIDM.mft (raw, json)
Hash identifier:          zhO5n3jk4RtiKs+RGzhRGugUliLzmZaDGHjoR+Cow3k=
Subject key identifier:   CB:18:3F:52:22:D5:30:77:9B:62:33:AE:60:44:5E:3E:BB:97:F3:C9
Authority key identifier: F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33
Certificate issuer:       /CN=f092ce4d6885345484e99a77d76166fc72022033
Certificate serial:       01A1DEDE0422931E20BE4FA0955D7647C8D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
Manifest number:          1AF6
Signing time:             Sun 15 Nov 2026 11:00:54 +0000
Manifest this update:     Sun 15 Nov 2026 11:00:54 +0000
Manifest next update:     Mon 16 Nov 2026 11:00:54 +0000
Files and hashes:         1: 8JLOTWiFNFSE6Zp312Fm_HICIDM.crl (hash: q8NeEcd74HWT2zUzwC+vR+AS8kBNmlUmQC22xCtf2Bo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:de:04:22:93:1e:20:be:4f:a0:95:5d:76:47:c8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f092ce4d6885345484e99a77d76166fc72022033
        Validity
            Not Before: Nov 15 11:00:54 2026 GMT
            Not After : Nov 16 11:00:54 2026 GMT
        Subject: CN=cb183f5222d530779b6233ae60445e3ebb97f3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3a:ce:a7:11:f0:3f:db:03:fc:9a:80:36:73:
                    d4:7f:aa:ae:8e:47:1a:f5:1d:89:e4:4a:a0:d6:79:
                    fa:99:db:98:11:dc:5c:df:04:bc:8d:97:db:fa:6f:
                    fd:7b:2a:2d:29:b9:4e:98:1a:6b:57:83:a9:41:e5:
                    03:12:c0:82:c3:2e:d7:af:04:a9:6a:a3:c2:33:82:
                    b5:24:84:39:1c:9c:c2:a6:95:e5:50:fb:88:b4:d4:
                    63:16:11:f2:c1:4f:78:4a:a4:ec:47:2d:92:2d:38:
                    5b:1d:95:22:d1:86:56:e4:d7:70:e3:40:07:6e:93:
                    b9:ab:51:b1:cc:84:10:b6:a0:47:c9:82:49:89:6f:
                    71:9b:5d:2f:de:dc:f8:79:05:b0:b7:dd:83:0d:f0:
                    d0:29:9f:ec:84:0d:6f:c5:70:6d:4a:70:35:67:22:
                    69:8c:4a:be:74:c9:b7:35:a9:60:6a:32:35:1b:b3:
                    6a:cb:9b:39:08:90:b7:ea:80:4c:77:2e:88:34:a4:
                    59:b5:db:cb:e1:f1:e4:58:fc:96:01:8b:f3:11:ed:
                    cb:65:99:47:e1:b0:2c:70:89:3a:ac:39:28:6a:a8:
                    09:3a:58:5a:b4:fd:ed:6b:22:d7:cb:3a:35:d8:3b:
                    43:9e:7f:9a:13:00:a2:3e:6c:b6:91:28:ae:a5:bf:
                    a2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:18:3F:52:22:D5:30:77:9B:62:33:AE:60:44:5E:3E:BB:97:F3:C9
            X509v3 Authority Key Identifier:
                keyid:F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:00:33:4a:18:fc:14:87:8f:5a:f3:9e:6f:5d:12:4c:1f:76:
         84:fc:6c:a8:aa:3a:c2:f9:5f:1d:1c:e0:29:45:63:7f:bf:c4:
         ca:6f:a3:86:55:57:69:bf:4d:e6:b5:24:23:60:ca:32:70:15:
         99:db:e1:9e:b9:38:12:7f:0d:f9:59:fd:25:89:4b:d0:1e:6f:
         fe:c7:c4:e8:99:5e:2d:a7:57:56:17:93:6c:3a:af:d2:2a:f9:
         09:ec:ba:7c:4f:3c:dc:6c:e6:cb:0c:60:88:33:48:25:4c:37:
         8a:29:4d:b6:7c:0d:1d:65:33:ee:a7:ea:31:45:8a:f0:58:c9:
         9a:5c:c0:0c:41:ed:b9:31:3c:38:fa:87:00:32:76:b1:95:f9:
         61:e4:2f:e5:bd:8e:49:f5:af:8c:9c:af:1d:38:71:d7:54:9b:
         b1:26:2b:25:bb:03:98:7c:15:ae:a5:9e:28:1e:2e:e6:70:23:
         fd:70:8e:9c:c9:f0:b0:89:21:7e:13:fd:80:04:db:31:4b:db:
         cf:07:54:0f:2a:43:9e:df:42:ca:1d:73:5f:f0:4e:9e:41:8a:
         09:0b:62:ad:ab:dc:26:53:00:90:9d:03:22:a8:cd:f0:92:08:
         83:0c:2c:0e:7a:59:5d:a3:87:98:9c:e6:73:91:6d:d5:1e:4b:
         22:71:48:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHe3gQikx4gvk+glV12R8jVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOTJjZTRkNjg4NTM0NTQ4NGU5OWE3N2Q3NjE2NmZjNzIw
MjIwMzMwHhcNMjYxMTE1MTEwMDU0WhcNMjYxMTE2MTEwMDU0WjAzMTEwLwYDVQQD
EyhjYjE4M2Y1MjIyZDUzMDc3OWI2MjMzYWU2MDQ0NWUzZWJiOTdmM2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TrOpxHwP9sD/JqANnPUf6qujkca
9R2J5Eqg1nn6mduYEdxc3wS8jZfb+m/9eyotKblOmBprV4OpQeUDEsCCwy7XrwSp
aqPCM4K1JIQ5HJzCppXlUPuItNRjFhHywU94SqTsRy2SLThbHZUi0YZW5Ndw40AH
bpO5q1GxzIQQtqBHyYJJiW9xm10v3tz4eQWwt92DDfDQKZ/shA1vxXBtSnA1ZyJp
jEq+dMm3NalgajI1G7Nqy5s5CJC36oBMdy6INKRZtdvL4fHkWPyWAYvzEe3LZZlH
4bAscIk6rDkoaqgJOlhatP3tayLXyzo12DtDnn+aEwCiPmy2kSiupb+i9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsYP1Ii1TB3m2IzrmBEXj67l/PJMB8GA1UdIwQY
MBaAFPCSzk1ohTRUhOmad9dhZvxyAiAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEpMT1RXaUZORlNFNlpwMzEyRm1fSElDSURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kMDIyMTgtNWRmOS00M2ZkLWJlZWMt
MDMxNTk2MTEyNDgwLzEvOEpMT1RXaUZORlNFNlpwMzEyRm1fSElDSURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9kMDIyMTgtNWRmOS00M2ZkLWJlZWMtMDMxNTk2MTEyNDgw
LzEvOEpMT1RXaUZORlNFNlpwMzEyRm1fSElDSURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxQAzShj8
FIePWvOeb10STB92hPxsqKo6wvlfHRzgKUVjf7/Eym+jhlVXab9N5rUkI2DKMnAV
mdvhnrk4En8N+Vn9JYlL0B5v/sfE6JleLadXVheTbDqv0ir5Cey6fE883Gzmywxg
iDNIJUw3iilNtnwNHWUz7qfqMUWK8FjJmlzADEHtuTE8OPqHADJ2sZX5YeQv5b2O
SfWvjJyvHThx11SbsSYrJbsDmHwVrqWeKB4u5nAj/XCOnMnwsIkhfhP9gATbMUvb
zwdUDypDnt9Cyh1zX/BOnkGKCQtiravcJlMAkJ0DIqjN8JIIgwwsDnpZXaOHmJzm
c5Ft1R5LInFIzQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:46:09 2026 by rpki-client