Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
File:                     8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft (raw, json)
Hash identifier:          HIjpe5GR0EBiXOdwCbbHrsAvHZ9gttNqAu5aLlv2q0Q=
Subject key identifier:   CB:07:5A:55:E5:77:96:ED:92:B3:3B:95:09:3E:83:C4:33:59:A1:22
Authority key identifier: F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C
Certificate issuer:       /CN=f2bffa2742563265037029a78f9317339053009c
Certificate serial:       01A0D426BE74AA4C34690C2146D9C1FA77F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
Manifest number:          0A4E
Signing time:             Thu 24 Sep 2026 16:01:43 +0000
Manifest this update:     Thu 24 Sep 2026 16:01:43 +0000
Manifest next update:     Fri 25 Sep 2026 16:01:43 +0000
Files and hashes:         1: 8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl (hash: Dp+HFEk/uy5v+gp96hkn19oR/mZL41cBHH8bDQ3ssyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:be:74:aa:4c:34:69:0c:21:46:d9:c1:fa:77:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bffa2742563265037029a78f9317339053009c
        Validity
            Not Before: Sep 24 16:01:43 2026 GMT
            Not After : Sep 25 16:01:43 2026 GMT
        Subject: CN=cb075a55e57796ed92b33b95093e83c43359a122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:94:f1:69:5e:ed:f9:68:f3:ea:76:67:4f:df:
                    89:a4:14:99:17:e8:62:46:82:a5:56:6d:82:43:b5:
                    22:d7:89:51:65:de:d9:ed:5d:f2:d7:5d:72:89:4d:
                    69:49:41:5a:a7:c6:cd:74:0e:35:d4:84:74:c0:b3:
                    74:94:17:7f:21:cf:0e:cf:45:47:27:82:ba:b8:03:
                    0c:9d:76:9e:96:7a:2b:5d:57:91:4b:7f:7b:92:ba:
                    f0:7f:56:b5:86:06:98:4b:68:57:46:4e:06:68:04:
                    bb:d7:fd:09:57:3d:b3:52:a5:75:8a:bb:a9:ce:f0:
                    ae:83:78:96:46:70:4a:a8:f1:79:98:ac:90:7d:9a:
                    2a:94:96:07:70:19:e2:43:8a:4f:ea:d8:15:bb:70:
                    cc:5a:99:6c:ef:f3:56:1e:46:f1:17:a8:47:a8:73:
                    98:2e:a2:0c:1a:29:a7:df:e3:69:b1:a6:ad:0c:2b:
                    fe:e9:65:5e:aa:a3:da:bd:9e:d9:bf:d0:5a:1a:e4:
                    c9:a8:db:54:ff:e8:fc:e0:58:87:eb:cc:57:c3:97:
                    64:cb:15:16:56:5b:13:06:af:5f:9b:ee:bd:b9:c5:
                    b7:a9:ec:da:f4:0e:45:bb:ee:ad:83:31:9c:f3:11:
                    ba:46:46:89:f4:83:56:bc:c3:60:c3:4f:1e:96:39:
                    48:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:07:5A:55:E5:77:96:ED:92:B3:3B:95:09:3E:83:C4:33:59:A1:22
            X509v3 Authority Key Identifier:
                keyid:F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:78:5f:12:d0:53:3f:be:44:54:78:4c:42:cf:5b:52:40:21:
         99:9f:86:af:c4:db:e5:a7:f8:9f:93:ed:8e:17:f6:19:04:f6:
         5e:3c:2a:f5:2f:4a:ff:97:f5:b1:91:ae:fd:76:cc:df:59:fa:
         c2:53:5d:39:53:17:2d:38:b1:ea:f4:5a:b8:20:1b:98:e6:f3:
         be:2d:8b:07:ac:85:df:59:4b:4d:b5:4c:c8:1a:89:bf:fa:66:
         ec:dc:73:8d:21:57:2d:bc:44:a6:aa:e0:fa:19:be:c3:e3:58:
         8e:62:a4:1e:49:7f:76:ef:02:80:35:b8:39:e6:57:f5:c9:f3:
         2a:b7:f8:60:ac:82:47:18:19:40:be:0d:33:5f:0e:14:10:35:
         5e:06:79:e4:d1:5c:51:36:51:bd:cd:41:eb:bc:02:87:bb:d5:
         f6:76:fa:4e:a5:ce:db:d2:0b:6c:a8:a7:be:9b:53:83:d1:68:
         eb:0f:2d:d6:e3:e3:3f:e9:ed:e7:de:9a:8f:b4:67:48:bb:0f:
         7d:9d:84:cc:cf:57:fc:b0:64:92:2b:8e:3a:5c:6e:34:93:2d:
         3c:83:40:0a:8e:25:4f:be:a2:85:bd:80:0e:8b:8d:f5:fe:fc:
         93:72:74:54:1a:cb:26:6a:6e:f2:bb:d3:ab:e1:99:02:9d:dd:
         30:f0:1b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:03:16 2026 by rpki-client