Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
File:                     8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json)
Hash identifier:          Nf0G6NqJ52GXqTQm7FUzrVrfiPyZEpHpTzoHq1eFEhM=
Subject key identifier:   69:E0:21:D9:A4:69:A3:6B:C8:4E:D9:4F:B7:61:C3:0C:B9:EF:9C:A1
Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Certificate issuer:       /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Certificate serial:       01A0C9D962FD9EA1632D81163E41D4AE5FE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
Manifest number:          1A66
Signing time:             Tue 22 Sep 2026 16:01:02 +0000
Manifest this update:     Tue 22 Sep 2026 16:01:02 +0000
Manifest next update:     Wed 23 Sep 2026 16:01:02 +0000
Files and hashes:         1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: BlYu8eMzVwB42QU4kb0D6IyNBe2Y7hM6yuEeSvC+DCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:d9:62:fd:9e:a1:63:2d:81:16:3e:41:d4:ae:5f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
        Validity
            Not Before: Sep 22 16:01:02 2026 GMT
            Not After : Sep 23 16:01:02 2026 GMT
        Subject: CN=69e021d9a469a36bc84ed94fb761c30cb9ef9ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c9:97:0a:69:01:5b:44:dc:9c:ed:5e:54:d5:
                    e0:87:b8:34:b8:63:ab:46:61:62:64:dd:d3:0e:38:
                    00:ea:30:ae:bf:45:08:16:cc:77:40:4e:a6:7a:ee:
                    a4:42:1d:6e:cb:8a:c5:7c:94:8e:74:e9:10:f8:25:
                    f4:95:ae:83:8c:31:66:5d:e1:5b:8f:56:49:e7:bf:
                    31:5d:ae:8a:7f:1f:c7:52:0d:4d:3a:48:d2:21:20:
                    4f:e7:fd:4b:2a:93:d0:c9:0a:6f:17:5b:96:6e:3b:
                    99:b5:35:59:9a:09:7b:20:ac:ba:2c:09:78:69:6e:
                    ba:02:d7:66:37:1d:83:92:ed:b9:a9:98:ed:05:86:
                    df:a9:39:29:20:78:68:1f:3e:e3:91:d7:f1:4f:d0:
                    d9:76:57:05:3a:3e:00:73:0e:24:e9:7b:53:85:31:
                    b0:08:79:33:95:61:16:2c:45:99:20:a5:60:93:d8:
                    85:0e:76:0d:99:45:1f:39:58:7a:1c:7d:29:2f:bf:
                    4b:d8:12:e9:d8:0b:7f:d5:48:2a:12:a9:de:7f:ab:
                    75:6e:bb:b8:5e:bd:9d:98:18:43:90:00:99:22:29:
                    24:d0:d6:ed:87:34:34:af:7a:ea:8a:71:29:26:2f:
                    36:be:f7:c6:96:c6:58:ce:11:03:fa:6c:42:0f:91:
                    ef:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E0:21:D9:A4:69:A3:6B:C8:4E:D9:4F:B7:61:C3:0C:B9:EF:9C:A1
            X509v3 Authority Key Identifier:
                keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:4a:7a:f5:84:23:f8:19:7d:3a:d1:da:44:0e:42:99:88:15:
         86:40:4e:f3:b5:96:5c:0d:9e:fa:00:ff:8a:8d:a5:6d:06:bf:
         13:91:09:0b:64:aa:33:59:2a:9e:39:df:2f:b1:75:30:01:05:
         10:56:fa:7c:55:6d:b6:1f:02:6f:97:b4:cf:bc:15:00:89:a3:
         e8:4a:47:cb:f0:f2:b2:98:d2:96:80:36:dd:a8:a2:e2:95:47:
         4f:20:ce:1b:35:7c:ad:1d:8b:12:d8:2d:06:ac:e3:36:b3:97:
         3b:66:29:b4:9c:3c:05:45:13:67:eb:7c:92:23:65:8e:fd:af:
         ad:12:e8:67:6f:16:74:08:6b:14:47:cc:72:54:32:17:91:23:
         cf:d4:ec:f4:b2:fa:55:47:38:2a:91:90:50:05:62:b4:c5:a6:
         d6:73:eb:e7:ce:07:52:00:ea:92:88:35:f1:79:7e:c5:0b:cb:
         27:a3:57:da:a7:8a:d0:96:d4:e3:c9:22:e1:6e:28:85:bd:33:
         5e:2b:ff:97:ac:0b:38:e4:b5:38:f6:d9:b1:2c:69:35:01:6e:
         8e:bf:50:a9:8e:54:41:55:bd:1a:a0:3a:32:3b:ee:45:11:b9:
         c7:4a:b0:9e:27:ee:de:85:55:bb:9e:03:c8:20:b7:28:1e:50:
         ab:33:d3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:41:57 2026 by rpki-client