Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          bTOVjbMMTKyPYlyKp0hsbNQb9mCTZrOOhQXApJl9Sec=
Subject key identifier:   DA:F4:03:96:0A:F8:5B:40:0D:F1:92:BB:6E:2D:35:3E:06:31:A4:8F
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       01A0C1B168718AA884B4C63E4F755F07A191
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          1A87
Signing time:             Mon 21 Sep 2026 02:00:24 +0000
Manifest this update:     Mon 21 Sep 2026 02:00:24 +0000
Manifest next update:     Tue 22 Sep 2026 02:00:24 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: IMK5UKhzVKxkhpmiVzZt7nhBf2x5PkiU6F2fDDQ0cTY=)
                          2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          3: JIW91ppQFrOACtjn3f9ZCp12wgg.asa (hash: C/yrhKJB+QdjcqMNi3etoGUrT4jwaUYzueXmwVYLCS8=)
                          4: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
                          5: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:b1:68:71:8a:a8:84:b4:c6:3e:4f:75:5f:07:a1:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Sep 21 02:00:24 2026 GMT
            Not After : Sep 22 02:00:24 2026 GMT
        Subject: CN=daf403960af85b400df192bb6e2d353e0631a48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f7:df:66:cb:54:9e:66:fa:a1:56:6c:fe:85:
                    9f:60:64:96:77:39:62:e1:0b:2e:69:77:87:ff:41:
                    81:f8:19:bc:d0:07:b3:45:76:70:87:41:c8:57:c8:
                    c8:2f:77:e6:4a:c0:df:e9:c1:28:24:52:fa:e3:3e:
                    56:2c:70:34:57:a6:d1:36:fa:1b:f3:29:b9:d0:85:
                    ce:9a:59:c6:90:7e:dc:e4:27:ad:85:7a:9a:89:ec:
                    7d:56:97:2e:4a:2b:20:50:e8:69:20:0a:f0:a2:eb:
                    82:fe:fb:38:6f:02:48:4c:7e:18:91:61:97:2f:e1:
                    6c:ec:ca:17:d8:2c:a1:63:b4:06:bd:f7:5f:15:26:
                    b5:45:dd:21:b5:d6:a9:4b:2c:2d:3b:a1:da:5a:b8:
                    e6:4f:40:d4:7b:83:74:78:c7:05:4c:4e:64:24:60:
                    0f:1d:8b:f7:f8:f7:f8:8a:7b:2e:66:d1:3c:61:b6:
                    3f:19:8f:f9:8c:9b:72:1f:37:05:52:13:22:a7:9f:
                    f3:b5:8b:b8:59:b0:c2:5b:dd:61:5c:fb:28:4a:ab:
                    b7:4c:53:a6:f9:53:3b:3e:55:70:76:d0:98:9a:6c:
                    c9:51:b2:25:87:63:b9:2b:b2:1c:f4:7a:a5:89:9c:
                    e1:4c:2e:f3:33:3a:73:ff:c9:ca:30:df:a3:b2:42:
                    f5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F4:03:96:0A:F8:5B:40:0D:F1:92:BB:6E:2D:35:3E:06:31:A4:8F
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b2:84:5d:5a:9e:05:a1:07:21:c3:2b:67:43:45:3f:e8:1b:
         29:06:57:ea:65:1c:9a:f0:07:5e:64:70:a2:2d:de:48:59:ad:
         d7:6b:14:a3:e0:95:94:75:e5:70:c1:19:3a:7f:5e:42:e6:41:
         72:92:63:dd:09:9c:6e:a0:11:00:78:92:00:7e:8d:07:bf:7a:
         91:f1:c5:8b:3c:91:67:e5:47:4d:fc:db:3b:36:f7:09:4c:02:
         83:f1:e6:7b:ae:1d:f7:ae:c3:e5:c7:60:61:2e:31:59:d8:17:
         1c:a2:b2:35:0f:4b:21:e0:c9:66:63:28:16:73:b7:cb:0a:b5:
         78:fd:bb:40:d3:f8:3e:95:da:ed:26:23:cc:3f:97:26:b7:b2:
         1c:dd:cf:c3:ce:53:13:c3:9f:50:e0:7a:50:32:fc:a7:0e:3b:
         0b:f4:38:ad:5f:4a:9b:d9:c1:90:70:ff:12:a2:50:31:a4:84:
         6e:f9:40:95:bc:81:a3:45:a7:f2:5f:4f:5e:a7:a4:86:d9:dd:
         49:f9:42:59:d2:46:04:95:8c:d3:ea:c1:37:7b:e0:a4:2d:5d:
         60:89:af:34:96:f7:a2:f2:9a:c3:20:a1:55:00:39:70:26:bf:
         39:69:64:1d:ea:37:b0:44:f8:6b:88:cf:79:bf:49:14:4f:e7:
         69:4c:e2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:10:09 2026 by rpki-client