Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
File:                     8l2dskSP6XudF6RL5dZEhI-gGOE.mft (raw, json)
Hash identifier:          oytEy/2PGh5gE5pFsOn8te9oZxhtV9R5HO0v6jPeAIw=
Subject key identifier:   2F:E5:F1:26:D5:4B:0E:F1:6B:69:4C:8F:46:94:3A:FC:7C:55:BA:FF
Authority key identifier: F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
Certificate issuer:       /CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Certificate serial:       01A0C1E85F3084898564F583EA648395ED08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
Manifest number:          1A65
Signing time:             Mon 21 Sep 2026 03:00:26 +0000
Manifest this update:     Mon 21 Sep 2026 03:00:26 +0000
Manifest next update:     Tue 22 Sep 2026 03:00:26 +0000
Files and hashes:         1: 8l2dskSP6XudF6RL5dZEhI-gGOE.crl (hash: pIj9G7hkrLUoKmPYy8aYh1GeQc+BvppgTaka2bRDwTw=)
                          2: SmR3reVpg9Oftt2wG6VeqB7WbmE.roa (hash: 0SJZoaTugeFDErq1aPzr3jWd7TCUqCyvEDw1XhqHPJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 03:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:e8:5f:30:84:89:85:64:f5:83:ea:64:83:95:ed:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
        Validity
            Not Before: Sep 21 03:00:26 2026 GMT
            Not After : Sep 22 03:00:26 2026 GMT
        Subject: CN=2fe5f126d54b0ef16b694c8f46943afc7c55baff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3c:48:95:ca:2c:16:de:f8:46:9a:4c:ab:4c:
                    63:f8:14:8f:1c:3f:58:60:19:c1:a4:4b:80:3a:81:
                    89:80:89:05:ee:0b:87:56:6b:ee:da:28:f8:f9:d5:
                    c2:d2:c4:bc:68:21:09:3a:d5:7d:f2:2a:44:0b:38:
                    85:10:03:55:e9:6f:b8:90:49:02:aa:39:13:93:41:
                    7d:aa:e6:74:cf:94:52:f6:e2:4c:90:77:25:29:65:
                    71:08:94:f9:24:ab:b6:e3:b0:6a:4d:c0:c2:f4:bf:
                    2f:de:cf:e7:d2:91:93:a1:ff:8f:b5:69:a8:97:71:
                    5a:06:70:e5:c0:55:e4:41:4d:ab:d5:74:de:78:01:
                    b7:ec:37:68:89:51:ef:ae:05:a9:15:93:f8:31:23:
                    45:93:40:fb:8e:05:8a:75:13:9f:0d:c8:1a:34:b2:
                    ce:b2:42:98:72:c1:4e:57:6b:27:5c:76:b9:3c:e7:
                    96:25:77:f9:4f:b4:27:69:9a:67:e4:90:2c:2a:12:
                    32:72:42:e7:0c:aa:0d:35:d3:22:bf:35:9f:74:1b:
                    45:d5:62:b3:23:23:6a:14:26:ca:82:3e:a5:bf:19:
                    1b:6f:5a:1e:52:f3:2f:6f:e8:1b:d1:e8:20:82:f3:
                    88:18:94:09:84:01:f0:7d:d4:68:fd:c0:d4:37:65:
                    3d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E5:F1:26:D5:4B:0E:F1:6B:69:4C:8F:46:94:3A:FC:7C:55:BA:FF
            X509v3 Authority Key Identifier:
                keyid:F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:45:5d:49:df:4b:1c:60:f1:e5:25:7b:8f:f4:84:b3:48:0b:
         31:4d:c5:57:9e:b0:68:00:a0:49:00:07:8f:36:35:88:ae:6e:
         c8:c5:44:97:bc:11:8e:a6:6b:05:16:10:bb:48:ee:21:26:fd:
         9a:c2:90:4f:2c:60:cf:e7:ad:6e:0e:6c:31:1e:f2:f9:02:4a:
         5e:0c:84:91:c4:d4:48:0f:2e:ab:d2:18:a4:e3:bd:5b:55:87:
         89:50:0f:0a:4e:f3:55:ae:20:9f:a5:3e:4b:77:f5:9d:da:e9:
         72:01:08:42:4c:04:bb:a7:b6:b7:25:12:da:95:5d:16:81:15:
         f3:42:2d:19:95:98:a2:04:7e:d1:b0:68:22:33:27:97:00:c8:
         29:50:97:f8:fc:1d:88:74:04:18:20:09:e0:8d:db:7e:4a:a7:
         ef:0c:e1:8c:87:21:1b:5d:91:83:53:8d:1b:be:00:e0:99:29:
         16:b4:10:3e:48:36:99:28:d7:8a:32:a8:ae:76:34:bf:e3:5b:
         da:bb:73:12:0a:d5:bb:76:ff:b9:64:cb:a2:79:96:11:28:f1:
         57:ca:c2:4b:53:c7:de:d6:bc:37:03:46:d5:64:42:d3:11:b8:
         9c:ea:86:78:d0:aa:47:96:a5:5a:18:c2:59:b7:c2:c2:0f:b7:
         f6:4b:66:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:27:50 2026 by rpki-client