Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
File:                     8v_48bgcLGFPw-lOsXy6CUAhGgE.mft (raw, json)
Hash identifier:          tQiWX0cuvC2kpszvzLAw+poUGVyGZPoSSWs++dHM5eA=
Subject key identifier:   D9:56:3C:89:B4:A4:D4:A1:DB:D8:3D:F8:43:59:E8:58:E3:66:A3:33
Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
Certificate issuer:       /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Certificate serial:       01A0C1B18AB427A2D396FA82F3886B314355
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
Manifest number:          1A63
Signing time:             Mon 21 Sep 2026 02:00:33 +0000
Manifest this update:     Mon 21 Sep 2026 02:00:33 +0000
Manifest next update:     Tue 22 Sep 2026 02:00:33 +0000
Files and hashes:         1: 8v_48bgcLGFPw-lOsXy6CUAhGgE.crl (hash: YGT7HBWVq/T5uhMn0dklwlYC2Yeh6wOBaiFLLFsU/zY=)
                          2: jRpXU9eqysmsAJR80B3Aax6y_BQ.roa (hash: XRM8W3BWblehC6PY0lBpqApKx5419cv1D4/Jksn00jI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 02:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:b1:8a:b4:27:a2:d3:96:fa:82:f3:88:6b:31:43:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
        Validity
            Not Before: Sep 21 02:00:33 2026 GMT
            Not After : Sep 22 02:00:33 2026 GMT
        Subject: CN=d9563c89b4a4d4a1dbd83df84359e858e366a333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3c:3a:65:7a:39:08:6e:39:6b:90:4e:73:ca:
                    ad:0d:90:6d:2c:0f:68:36:36:dd:18:5f:84:12:3e:
                    55:79:74:d3:1a:ac:82:e4:a0:be:80:48:a6:a7:9c:
                    fa:e5:b2:20:c3:ca:1d:64:b1:d7:01:a7:2a:0b:39:
                    b0:87:98:48:5a:da:c3:85:4b:1e:8f:af:07:6c:b2:
                    fc:56:b2:9d:66:93:ed:5b:a5:45:48:6e:2b:6b:1c:
                    10:c4:1b:2e:82:2e:9f:f1:7d:e9:93:40:18:7f:46:
                    77:ed:65:28:80:54:ff:62:c9:00:35:cd:47:4a:60:
                    28:7d:a1:cc:a8:76:ae:99:e2:de:aa:97:12:ce:5e:
                    27:5b:88:b8:30:84:70:30:2b:b2:09:7a:78:2c:a7:
                    51:46:78:51:6e:0a:24:6e:62:9c:fe:e6:ee:cf:02:
                    8d:55:02:94:24:35:76:05:4f:42:79:41:48:cf:78:
                    14:35:ed:2b:5c:93:22:a8:a0:af:b2:ee:8d:6d:6f:
                    90:a6:8d:38:1c:1f:3c:aa:bf:75:7f:6a:8a:c0:58:
                    89:9e:79:60:4c:fa:63:f2:d5:62:66:9e:7c:85:1d:
                    39:45:9d:41:ee:40:31:10:2b:0d:8d:ab:1a:c7:8c:
                    14:77:53:c8:77:b7:83:d9:5c:4a:f3:90:8a:5c:86:
                    8d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:56:3C:89:B4:A4:D4:A1:DB:D8:3D:F8:43:59:E8:58:E3:66:A3:33
            X509v3 Authority Key Identifier:
                keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:13:55:16:58:9b:62:f1:7d:d5:3c:93:be:fa:6a:71:e9:8a:
         3d:8e:12:b5:8c:2d:e0:8d:57:c8:c2:b2:d3:24:a9:da:b5:ab:
         1c:f2:11:33:ca:cd:25:93:18:9b:c9:46:82:d7:77:4f:36:7e:
         8b:03:c6:fd:2d:03:f5:45:75:2b:90:d8:da:d5:20:b5:08:7f:
         cd:c1:a0:21:b2:35:48:60:27:96:b3:c6:9b:87:48:4f:a1:aa:
         4f:70:5e:79:95:a0:55:f0:74:ad:03:06:8f:e5:d2:d4:fb:b0:
         bf:c2:9e:0e:11:11:70:57:30:41:b5:5f:65:f7:d1:41:a2:b0:
         7c:28:ea:8d:c7:3d:09:a5:4e:7d:59:2e:3c:f8:04:59:37:00:
         19:cb:9d:d0:1b:06:af:d5:86:5f:e3:ef:c9:38:24:ba:13:ac:
         29:e9:90:8e:49:de:4f:0f:00:ea:40:0a:e4:ef:f6:10:0d:3b:
         bb:6e:95:b8:5f:aa:48:00:03:72:c3:30:ae:1a:b7:39:c9:a6:
         44:83:d9:77:f5:31:ac:97:a2:4e:eb:91:0a:bd:13:fc:e1:24:
         bf:a0:98:e7:35:a2:b6:87:6b:cd:c3:d1:c3:c8:29:e9:2d:4f:
         e8:5e:8a:82:ea:a9:6d:78:c7:18:d1:53:dc:3e:b5:1c:83:15:
         2e:dc:a5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:35:47 2026 by rpki-client