Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
File:                     8M0rO57YMSbUXboSAD1sbjWms4A.mft (raw, json)
Hash identifier:          bXblggibnY9/q2KWxSI7JdlKR+Isn7k9wq8pHQjbXjk=
Subject key identifier:   5E:7F:7F:C0:83:FF:14:99:19:14:31:6F:B6:BA:BF:B3:24:CE:3D:FB
Authority key identifier: F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
Certificate issuer:       /CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Certificate serial:       01A0C2FBA35AEE6BF55056D5C937F2AFA6B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
Manifest number:          178B
Signing time:             Mon 21 Sep 2026 08:01:06 +0000
Manifest this update:     Mon 21 Sep 2026 08:01:06 +0000
Manifest next update:     Tue 22 Sep 2026 08:01:06 +0000
Files and hashes:         1: 8M0rO57YMSbUXboSAD1sbjWms4A.crl (hash: pENofs1RYo6Uosr4vYapwkcs94NFdsZlCzOSx3OAm1o=)
                          2: ddIfNiRppOj1v3M6aJwVqmijL0I.roa (hash: EfC5UqZXOZKbq7DWkiDFRsm66HUflEVOFO98FL8DAwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:fb:a3:5a:ee:6b:f5:50:56:d5:c9:37:f2:af:a6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
        Validity
            Not Before: Sep 21 08:01:06 2026 GMT
            Not After : Sep 22 08:01:06 2026 GMT
        Subject: CN=5e7f7fc083ff14991914316fb6babfb324ce3dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:77:ee:4e:80:1b:0a:8d:7f:d9:04:02:98:9e:
                    d9:cc:03:9e:33:80:94:70:06:d4:31:8d:51:c3:d6:
                    75:47:09:6d:08:90:e5:ca:29:d0:06:e9:e2:bc:c9:
                    0b:74:d4:ae:a9:61:de:64:fa:b9:df:d6:1a:a2:f3:
                    5f:6d:4f:fd:1e:e9:9c:e3:c8:c6:7f:7d:41:d1:19:
                    14:50:78:61:d7:14:33:93:49:75:fa:f5:cb:1e:4c:
                    70:df:aa:cd:4a:21:39:da:13:c1:64:0f:e5:15:b8:
                    e0:90:b3:fa:79:de:6f:3c:3d:9c:21:c5:f2:64:07:
                    bd:12:9a:c4:3a:4f:4b:45:bc:a0:a3:a9:0b:cc:59:
                    6c:6a:fc:0f:81:dd:13:c2:13:0c:81:25:42:eb:6e:
                    7f:e8:ef:05:62:15:b8:b2:42:dd:3a:8e:6c:1d:fd:
                    96:f6:cd:19:91:2b:2d:8a:38:b1:1f:4c:e4:3f:ca:
                    b2:98:95:77:b7:17:0c:20:68:d6:90:f2:85:c8:d3:
                    38:d7:4e:6c:93:12:eb:30:62:c6:47:1b:68:89:17:
                    78:e3:d3:91:62:34:6e:9b:40:dc:9d:b6:98:2b:c7:
                    e6:f9:69:71:fd:b5:0c:c2:6a:29:53:17:c0:38:0a:
                    60:27:4b:17:d8:86:f8:a3:13:8b:9c:b5:1e:11:37:
                    fc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7F:7F:C0:83:FF:14:99:19:14:31:6F:B6:BA:BF:B3:24:CE:3D:FB
            X509v3 Authority Key Identifier:
                keyid:F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:31:ac:99:60:0d:20:df:32:1a:3b:64:71:06:9e:8c:70:46:
         e4:74:ec:1d:f8:57:d2:12:8c:66:14:95:8c:2d:50:ca:3b:68:
         0e:ea:41:63:7f:33:36:5e:ca:d7:1b:84:8a:b0:70:76:fe:7c:
         67:1f:3f:6a:57:12:5d:a3:19:32:be:1b:7d:dd:1f:df:f3:34:
         df:bc:65:50:c2:54:d0:a9:bc:28:40:24:2c:4f:ef:b0:97:a8:
         6e:18:8f:6f:da:23:0c:4e:04:d2:b1:80:33:f7:2f:98:20:48:
         ba:e2:a9:b7:93:7c:55:bc:c6:e1:9a:68:e2:1b:1e:cb:b0:1b:
         7a:30:57:8f:62:ba:23:49:bc:31:b2:58:aa:62:99:18:1b:1c:
         8f:92:76:a5:fc:b2:f8:d4:eb:35:d4:ec:b9:43:44:95:dd:60:
         74:08:2f:26:65:00:f0:d2:93:0a:7b:9a:8c:0a:a8:37:e7:4a:
         99:5b:ed:e5:9c:6e:c7:a4:49:24:d2:d7:dc:d6:19:a5:5f:ea:
         28:83:17:c5:e9:96:03:d8:8c:c4:b2:ba:7d:88:16:52:18:5a:
         4a:ab:23:f1:6b:31:ea:46:bb:ea:31:a5:6d:dc:85:39:b0:de:
         34:50:be:4c:70:73:ec:de:db:63:a4:9d:48:e4:08:d2:38:73:
         26:ef:56:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDC+6Na7mv1UFbVyTfyr6a3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwY2QyYjNiOWVkODMxMjZkNDVkYmExMjAwM2Q2YzZlMzVh
NmIzODAwHhcNMjYwOTIxMDgwMTA2WhcNMjYwOTIyMDgwMTA2WjAzMTEwLwYDVQQD
Eyg1ZTdmN2ZjMDgzZmYxNDk5MTkxNDMxNmZiNmJhYmZiMzI0Y2UzZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHfuToAbCo1/2QQCmJ7ZzAOeM4CU
cAbUMY1Rw9Z1RwltCJDlyinQBunivMkLdNSuqWHeZPq539YaovNfbU/9Humc48jG
f31B0RkUUHhh1xQzk0l1+vXLHkxw36rNSiE52hPBZA/lFbjgkLP6ed5vPD2cIcXy
ZAe9EprEOk9LRbygo6kLzFlsavwPgd0TwhMMgSVC625/6O8FYhW4skLdOo5sHf2W
9s0ZkSstijixH0zkP8qymJV3txcMIGjWkPKFyNM4105skxLrMGLGRxtoiRd449OR
YjRum0DcnbaYK8fm+Wlx/bUMwmopUxfAOApgJ0sX2Ib4oxOLnLUeETf8lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5/f8CD/xSZGRQxb7a6v7Mkzj37MB8GA1UdIwQY
MBaAFPDNKzue2DEm1F26EgA9bG41prOAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNDc5ODItMzdkZS00ZTcwLWJlYmQt
N2M5ZTEwNTE3YzI1LzEvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wNDc5ODItMzdkZS00ZTcwLWJlYmQtN2M5ZTEwNTE3YzI1
LzEvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjGsmWAN
IN8yGjtkcQaejHBG5HTsHfhX0hKMZhSVjC1QyjtoDupBY38zNl7K1xuEirBwdv58
Zx8/alcSXaMZMr4bfd0f3/M037xlUMJU0Km8KEAkLE/vsJeobhiPb9ojDE4E0rGA
M/cvmCBIuuKpt5N8VbzG4Zpo4hsey7AbejBXj2K6I0m8MbJYqmKZGBscj5J2pfyy
+NTrNdTsuUNEld1gdAgvJmUA8NKTCnuajAqoN+dKmVvt5Zxux6RJJNLX3NYZpV/q
KIMXxemWA9iMxLK6fYgWUhhaSqsj8Wsx6ka76jGlbdyFObDeNFC+THBz7N7bY6Sd
SOQI0jhzJu9WwA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:16:24 2026 by rpki-client