Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
File:                     8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft (raw, json)
Hash identifier:          mD6sYsab8YVucbDwpgSc3CQPqVq5BV7uA//I4gTIzeM=
Subject key identifier:   8A:62:F8:04:80:85:90:35:D0:86:BD:CF:F0:B7:9C:2B:42:B6:33:9E
Authority key identifier: F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
Certificate issuer:       /CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Certificate serial:       01A0C2FBB87F0C6C97F094EFB021695C6903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
Manifest number:          1144
Signing time:             Mon 21 Sep 2026 08:01:11 +0000
Manifest this update:     Mon 21 Sep 2026 08:01:11 +0000
Manifest next update:     Tue 22 Sep 2026 08:01:11 +0000
Files and hashes:         1: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl (hash: wzoJQsszmpz+A9W4quhSku9BLMsUXePolZBLwcJNOZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:fb:b8:7f:0c:6c:97:f0:94:ef:b0:21:69:5c:69:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
        Validity
            Not Before: Sep 21 08:01:11 2026 GMT
            Not After : Sep 22 08:01:11 2026 GMT
        Subject: CN=8a62f80480859035d086bdcff0b79c2b42b6339e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5b:0a:5f:a4:e1:08:90:18:b3:7d:ef:98:3d:
                    66:11:4d:b6:16:0b:e1:7d:a5:83:e7:d0:09:a7:fc:
                    9b:e6:26:b4:c5:fe:85:a0:60:a2:d0:fc:3c:22:41:
                    2b:01:7a:8a:03:92:14:3a:68:bb:1d:5a:ab:48:b1:
                    88:f4:27:11:94:ac:52:f4:8d:9e:eb:e2:f1:97:ff:
                    c3:1c:4d:14:4e:96:b7:75:de:e1:52:fc:a1:ba:84:
                    d0:ff:5c:2f:1d:9a:2f:07:01:4c:a4:0b:ce:d3:f7:
                    ed:fd:27:1d:8e:5a:1c:6f:a7:a7:67:b3:4a:82:99:
                    01:8d:2b:dc:2b:21:ee:97:dc:91:8e:c8:bc:34:83:
                    a5:05:8c:f3:9c:1d:50:6e:b8:ab:62:8f:c8:84:1d:
                    0d:29:e1:85:7c:86:f2:fa:84:5a:1a:01:01:e0:d9:
                    b5:f3:4d:27:d0:0a:42:d7:a0:c2:1f:60:29:27:4e:
                    fe:e5:66:40:1d:1b:36:d8:f5:f4:2b:93:9a:87:31:
                    78:8b:97:6f:1d:cb:e7:23:21:77:76:cf:d3:46:d7:
                    da:69:92:2f:83:56:dd:ea:6a:f9:27:07:6f:e2:6e:
                    18:cc:d9:61:ea:52:8f:ff:f7:88:4c:4a:0e:79:89:
                    20:2e:23:bd:ac:4a:2f:1b:38:6b:fc:a9:d9:db:fe:
                    47:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:62:F8:04:80:85:90:35:D0:86:BD:CF:F0:B7:9C:2B:42:B6:33:9E
            X509v3 Authority Key Identifier:
                keyid:F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d3:83:8d:d2:08:18:48:db:e1:11:6d:b7:4f:28:1d:42:42:
         4c:57:90:56:9f:9a:1e:80:e1:98:b6:2e:47:86:47:ff:69:98:
         e9:f2:29:85:78:5e:5b:2b:6e:75:85:f1:e3:d8:7a:da:de:2f:
         c7:ce:01:70:d3:08:14:29:aa:0d:0a:cb:bb:be:ed:d2:1e:9f:
         a1:ac:1c:8a:50:b6:46:68:39:2a:1e:52:e0:1f:d5:f6:25:d2:
         b2:8d:9a:20:fa:6c:5c:7e:25:f4:fb:e3:e4:10:a2:54:a7:9b:
         59:de:28:af:85:6e:09:7a:50:7e:05:52:08:82:a4:4d:7b:d4:
         df:54:84:45:15:69:fe:7e:14:fc:cc:74:18:3e:fb:7a:49:3b:
         b7:1e:09:6f:6d:3c:53:bf:3d:af:a9:31:56:f3:d5:11:7b:cc:
         c4:c6:bb:02:6c:57:96:7d:48:29:4f:cb:bd:19:e4:75:37:ea:
         29:55:a5:36:e9:38:80:e6:4d:4f:a4:d5:cc:6d:ab:78:27:7f:
         ce:eb:42:b1:6a:8e:1d:3b:dc:70:b8:7e:8f:81:82:0c:d4:7c:
         97:4c:95:db:18:bc:94:52:36:02:0f:ea:69:c8:5c:46:9c:f1:
         37:c2:db:0e:d2:ff:ed:d5:9e:9f:87:ed:8a:84:70:81:8f:71:
         09:eb:0f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:00:03 2026 by rpki-client