Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
File:                     8FoX3TvrjchI--dikGHWCAFB59Q.mft (raw, json)
Hash identifier:          m68MT2E+Wyt/YMihpZ97mHn+XLVKr3RrSBu4feiwEBk=
Subject key identifier:   74:B4:EC:B0:95:DA:07:24:9C:6B:2D:00:22:71:68:77:89:D1:5A:0D
Authority key identifier: F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4
Certificate issuer:       /CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
Certificate serial:       01A0C4E92728637BD66DAC851D3EA236E8FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
Manifest number:          03B7
Signing time:             Mon 21 Sep 2026 17:00:09 +0000
Manifest this update:     Mon 21 Sep 2026 17:00:09 +0000
Manifest next update:     Tue 22 Sep 2026 17:00:09 +0000
Files and hashes:         1: 8FoX3TvrjchI--dikGHWCAFB59Q.crl (hash: nGjUgeQlUqByu9xQSG2aRuSbeaiYHmLkM03lu72MhaI=)
                          2: _CKH0NPKePgQmfkQwBAqF7isKR0.roa (hash: ghaupre6oze0hToZ8lc6XJoP3I8j3iyx30t5QLH2zrM=)
                          3: bfhtOfbmRaUK0zavR6RwBXeIQ-w.roa (hash: r7Sj8QDfOv47ukm7JPjkhOqWA6IS83uFm5HbMPx38z8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:e9:27:28:63:7b:d6:6d:ac:85:1d:3e:a2:36:e8:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4
        Validity
            Not Before: Sep 21 17:00:09 2026 GMT
            Not After : Sep 22 17:00:09 2026 GMT
        Subject: CN=74b4ecb095da07249c6b2d002271687789d15a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2a:fe:99:ba:9b:35:ba:8a:79:ce:14:44:53:
                    35:57:79:9d:a1:0d:80:ac:2a:04:8b:76:7e:54:a8:
                    72:32:c6:f6:47:07:f3:b6:6d:e5:22:b8:61:d5:fa:
                    bc:73:ae:15:63:63:a5:22:39:b8:f8:7c:29:ed:af:
                    62:04:ee:40:67:65:ce:fe:c1:87:d9:fe:6f:d5:22:
                    0d:d3:e0:e7:21:c9:c4:ba:1b:6b:4a:4b:1f:08:56:
                    ee:9b:78:17:01:bf:b9:30:7d:b8:c7:8e:f8:66:70:
                    a7:52:16:01:f7:ce:a7:c7:cd:36:01:05:ee:70:df:
                    4e:f3:fb:6b:2c:fc:c2:7d:f1:a3:d5:05:5c:da:f7:
                    59:07:c0:0b:be:1e:df:cb:56:7f:9b:91:c0:d7:32:
                    43:f9:dc:19:fb:1e:d0:a2:54:02:a8:91:34:a4:cd:
                    27:da:36:0f:6c:00:a4:b5:8c:cb:cf:af:bb:47:98:
                    8b:c7:4d:be:7d:67:a1:bd:31:1b:d9:2d:7b:35:c6:
                    49:ab:cc:1a:7d:54:cd:fa:88:a3:d5:cb:d6:07:59:
                    b9:8b:a1:e3:0c:2b:a5:70:d8:53:b9:36:20:fa:35:
                    f8:47:ce:46:60:b2:dc:eb:07:ec:58:98:bc:f8:55:
                    ce:43:ff:0c:04:65:07:3a:f8:b9:8a:89:25:9b:9d:
                    89:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B4:EC:B0:95:DA:07:24:9C:6B:2D:00:22:71:68:77:89:D1:5A:0D
            X509v3 Authority Key Identifier:
                keyid:F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:fe:d7:3d:df:fc:71:4d:a7:cd:65:30:b3:52:02:60:ee:c8:
         34:34:6f:aa:a5:5c:4f:08:92:6d:de:29:7d:c7:43:08:0a:ae:
         3f:c1:83:8e:fd:23:80:eb:7c:e5:8b:ed:9f:54:4e:53:1c:fd:
         e9:7a:a0:2e:fb:e7:7e:e1:f7:40:ee:de:2c:0b:8c:87:14:3a:
         09:2c:f3:e0:15:71:6a:b6:d1:25:f8:f5:d9:75:16:c8:21:1d:
         76:1c:06:dd:80:cc:aa:79:1d:83:59:57:0b:27:57:73:b9:40:
         7b:5c:53:c8:97:c3:ba:6a:35:c4:9b:75:9f:26:5f:2e:16:53:
         4e:d6:af:75:1a:96:0c:db:74:31:b2:79:a7:b7:b8:35:b4:da:
         c6:93:f6:8b:60:f7:ed:d7:d8:5f:45:a8:4d:69:cf:d1:5b:f4:
         bd:9e:50:8f:3e:87:8a:1a:c7:10:e0:b0:2e:bb:96:74:be:dc:
         b2:2c:91:9d:1b:2a:96:62:1e:11:54:43:ff:4a:8d:76:90:3f:
         0f:58:22:a1:36:73:d4:da:f3:46:a3:c5:24:22:c8:8a:81:5c:
         4b:d1:de:b6:9e:6c:3d:3e:96:e0:5d:7c:f6:0d:b0:e7:2a:c9:
         9e:29:fc:91:0b:98:1b:3a:a7:ba:7d:eb:79:44:d3:d3:17:18:
         bf:9d:f0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:13:28 2026 by rpki-client