Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
File:                     8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft (raw, json)
Hash identifier:          S7ZIed7J9CEkxWIzMroIsSsfYdEnieS/dMQ6SnZu1o0=
Subject key identifier:   5C:25:94:A7:84:69:70:1F:F4:F6:1E:9A:97:05:A6:1D:D9:61:62:77
Authority key identifier: F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6
Certificate issuer:       /CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6
Certificate serial:       01A0C5209D107FA38C02AE27FB3B795325C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
Manifest number:          139F
Signing time:             Mon 21 Sep 2026 18:00:43 +0000
Manifest this update:     Mon 21 Sep 2026 18:00:43 +0000
Manifest next update:     Tue 22 Sep 2026 18:00:43 +0000
Files and hashes:         1: 8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl (hash: v1L2KmUEGZQ+UM2Owz4/2D+gjEXJnJ9va6GhZAyZ2JQ=)
                          2: jNP4lkkfBvGwQninx6yZc-naqo8.roa (hash: sz5Qqi9rGFZNr7jIWcNDJD+aLk3iNQT71jM/j1utVDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 18:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:20:9d:10:7f:a3:8c:02:ae:27:fb:3b:79:53:25:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6
        Validity
            Not Before: Sep 21 18:00:43 2026 GMT
            Not After : Sep 22 18:00:43 2026 GMT
        Subject: CN=5c2594a78469701ff4f61e9a9705a61dd9616277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4d:eb:b9:7c:43:81:dd:f3:db:b7:85:93:4e:
                    59:52:03:94:02:a4:f6:9c:3d:32:75:81:cc:76:7f:
                    49:7d:85:25:97:c1:ba:80:d6:5b:e0:7d:a1:59:13:
                    98:38:04:d3:b0:3d:7f:68:a9:a0:2e:73:d5:7d:e2:
                    3d:59:b7:e7:7b:68:e3:67:ed:0f:37:27:14:40:6a:
                    53:df:67:a3:50:8f:8d:ae:7e:2f:cd:2d:81:18:df:
                    6b:a4:6d:08:a7:be:9e:bd:aa:54:16:8b:a3:69:54:
                    cb:4b:be:83:6c:4c:dc:79:c4:56:ad:9d:51:f4:fb:
                    3a:ff:5c:49:8c:2d:dd:20:da:1b:04:b0:76:94:83:
                    85:b0:d9:44:d5:5f:c2:2f:c6:c8:18:c2:fd:12:82:
                    af:1b:4b:03:b1:47:bc:80:4c:b8:9b:26:fb:39:39:
                    32:3f:b2:29:f3:53:ff:ca:61:e7:36:70:4e:e9:72:
                    ba:58:49:6b:c6:63:bd:41:0e:ad:01:66:19:73:dd:
                    c3:9e:14:17:93:5c:3a:b8:46:93:82:29:70:52:40:
                    57:1b:4e:a0:f8:c3:72:6c:1d:20:e8:13:ff:7c:de:
                    28:99:d1:88:8c:2e:6f:c7:1f:64:c4:ed:30:60:a2:
                    c0:bf:3e:a1:f2:b9:d9:f6:f2:e2:0c:c0:14:a9:97:
                    7e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:25:94:A7:84:69:70:1F:F4:F6:1E:9A:97:05:A6:1D:D9:61:62:77
            X509v3 Authority Key Identifier:
                keyid:F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a6:cb:fd:19:30:e3:87:ba:af:8a:34:98:9c:66:a0:52:b1:
         6f:3a:a5:90:c4:cb:a7:50:36:0c:56:29:6d:f6:29:1e:fd:ba:
         9d:5c:f5:6c:7d:ce:f6:46:53:22:da:ff:84:96:95:1e:bc:f6:
         00:8c:1e:9d:a4:37:e0:25:0d:b4:65:74:9b:9a:0d:12:8a:5b:
         3f:ed:52:48:d3:3f:c4:f7:ff:16:dc:5d:20:e9:e2:59:c9:55:
         ca:6a:d2:79:e7:8b:2a:52:b9:a9:06:a4:9a:fb:ff:9b:41:a6:
         a9:85:92:61:fc:39:37:76:38:38:46:21:b1:a1:23:29:b8:e8:
         01:32:43:10:53:5d:d3:b3:61:04:1d:ca:1e:3f:28:1c:dd:07:
         26:01:69:30:94:26:60:60:bb:c3:ea:f4:97:df:2b:3b:11:df:
         88:2c:b2:c9:80:42:77:59:1a:40:8c:2e:0f:c2:9d:59:27:f5:
         e4:30:ad:41:0c:7a:b3:b2:a4:55:cf:f0:72:63:4c:6a:2e:8d:
         c7:e7:68:08:77:d8:7e:86:1f:73:94:3b:39:22:2b:82:91:18:
         94:bb:27:5e:0f:2d:c9:69:ef:e6:e9:07:41:45:0d:17:60:2e:
         c2:ed:ed:6b:66:9e:a5:76:1f:b7:82:e5:fe:db:41:e5:0c:4a:
         0e:57:ee:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:22:21 2026 by rpki-client