Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File:                     cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier:          BD9F1zmU4CY3qMKj635mN0b8Rv2caFXd1fJ0CWzGCe0=
Subject key identifier:   87:29:C5:81:05:E7:73:A9:2D:E1:47:81:27:9D:1E:B7:38:EE:21:26
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer:       /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial:       01A0C5C511578B4417C397F2062DDF10535F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number:          0E13
Signing time:             Mon 21 Sep 2026 21:00:21 +0000
Manifest this update:     Mon 21 Sep 2026 21:00:21 +0000
Manifest next update:     Tue 22 Sep 2026 21:00:21 +0000
Files and hashes:         1: 6Tbppy4MQkLuvQtyLGsGd3CPcic.roa (hash: 7/QkF9HhHe+dG7SWSPYfgjpwfSEFuQhLwXrd2nTq/qU=)
                          2: NzZA0ZJSkjRaWslFXPndZfar7cg.roa (hash: RJF0xypUlCqc73vpWjXekHDMqnQ2dCd2RLXFaZqKXeQ=)
                          3: T6_UDLgOp2Kr0SqLbwdbPGeDTkA.roa (hash: gTWxLHMemzdxPWumDbDMhn2BGfQjWXuVToW8lRVJiYA=)
                          4: W1ZhWsdodClad0dJ8wh53Ch0fp8.roa (hash: VKkRvsz7R9Hk3QEeT4dAIBuH8DXYchOllD8/vRJTJCI=)
                          5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: jwoN/zJKK5K2puuKjQU1MmgRzqWoVYLyM2Wq7yAFW9k=)
                          6: iafYMwA1CChI3CF3y86ruCA7o6I.roa (hash: tTSoeaNC29Xke1fF6xeZHo/CiLM3GLD82IygoT7IYr4=)
                          7: iioQdMFsttIkzLsks2Jp19kCC1I.roa (hash: 8e3WC7/8HWnnhrJ3InF3EeTww9JbZ0JooKgafOgwKoI=)
                          8: yHbHdVra8JQS6bdIo32Jx7OYffk.roa (hash: ScC+mBQJVOrQxUSi9bIaW+yLlmfLXJYJdtutIzPb38o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:c5:11:57:8b:44:17:c3:97:f2:06:2d:df:10:53:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
        Validity
            Not Before: Sep 21 21:00:21 2026 GMT
            Not After : Sep 22 21:00:21 2026 GMT
        Subject: CN=8729c58105e773a92de14781279d1eb738ee2126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:84:59:d6:96:a3:2b:aa:65:da:53:ea:0a:b1:
                    04:c6:2c:7a:50:3d:ef:3b:56:cc:ec:12:f3:14:32:
                    80:f0:fc:6f:79:86:8d:a2:ee:bd:81:f8:a2:66:5d:
                    31:bc:3d:c6:cd:8b:f3:8d:ee:74:0f:a7:fc:a5:ad:
                    ea:06:ab:0c:46:33:5d:f8:73:28:6a:fd:83:1f:6a:
                    bf:e0:14:ac:ea:ef:2e:6d:de:6d:ba:45:1f:e0:f1:
                    c1:94:d4:13:1a:b3:f0:fb:7d:4f:21:81:74:0b:9c:
                    e3:6c:9f:af:75:4b:f9:7c:8c:82:ef:74:de:01:fb:
                    8f:18:e2:10:8e:08:49:91:99:53:62:c9:65:3e:2a:
                    3e:45:c2:1c:0b:9e:87:ed:13:92:2b:25:17:c2:7e:
                    7e:a6:a4:d7:7b:52:3f:28:7b:6f:57:9e:fb:85:bf:
                    42:4c:9e:0a:5e:96:f8:11:d6:ea:13:2f:91:3f:22:
                    42:2b:c7:4a:94:09:b8:16:af:68:36:c3:4b:11:3c:
                    d2:a0:fc:da:b3:55:03:c6:62:78:c5:4b:8f:5e:0c:
                    1c:0e:ef:4c:17:59:52:f5:20:48:ca:cf:96:d8:03:
                    a4:cc:f9:9f:47:b0:cf:b5:d6:cf:d1:ca:d5:7e:45:
                    3c:cd:08:31:1b:49:ff:74:e0:c0:7b:c8:28:ef:30:
                    2c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:29:C5:81:05:E7:73:A9:2D:E1:47:81:27:9D:1E:B7:38:EE:21:26
            X509v3 Authority Key Identifier:
                keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:03:c8:8f:fe:07:4e:fa:7e:5f:c0:5f:dd:44:54:af:4f:22:
         d5:c4:29:9c:01:37:21:e3:25:60:dd:76:3e:f7:6d:11:a6:22:
         04:0c:ea:4f:18:b8:1d:df:a8:21:5f:42:ca:ab:fc:c1:e5:26:
         e3:cf:43:ba:97:05:43:09:f8:94:a4:01:0b:f2:13:1e:d3:b7:
         fd:9e:4e:13:71:f6:f8:82:07:da:56:56:ce:71:ea:9e:64:ad:
         19:03:26:89:be:90:63:ec:ed:3c:31:ff:90:c4:d2:41:7f:2f:
         e1:33:cc:ca:27:cd:45:72:7b:04:ae:7b:08:99:fb:48:fe:ac:
         51:bb:1d:ee:23:91:93:80:38:44:cd:55:f7:8e:ea:4f:30:a2:
         fb:d2:ec:e3:54:ca:c8:ca:58:e8:41:49:e0:3a:35:5a:9a:d5:
         33:6e:00:23:c5:0f:22:51:34:9d:97:84:69:27:f1:0e:ec:81:
         76:6c:84:7d:85:d1:8f:7b:84:c3:f2:c2:6d:cd:c9:01:14:ba:
         6a:96:c7:9a:f8:c6:43:d3:a3:9b:2e:fb:c9:d1:41:a9:a3:bd:
         d6:07:76:9c:21:94:47:f0:d0:d6:39:5b:28:91:e0:cd:84:d8:
         85:83:97:af:f9:79:e0:2b:a0:04:2e:0c:0a:62:e0:39:75:17:
         86:bd:51:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:23:45 2026 by rpki-client