Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
File:                     8SEJSHr0AKY-PLARo9VJ51H9LBg.mft (raw, json)
Hash identifier:          bGAT+t4xlgDUO4NcccvhBPl20+Mwh6SWqjf5iwu5Nas=
Subject key identifier:   01:B9:25:89:72:9C:0F:86:66:70:B0:75:46:0B:58:BF:94:BE:9F:45
Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
Certificate issuer:       /CN=f12109487af400a63e3cb011a3d549e751fd2c18
Certificate serial:       01A127D5B3F30770FBB1B3056E6D6777A903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
Manifest number:          117B
Signing time:             Sat 10 Oct 2026 22:01:18 +0000
Manifest this update:     Sat 10 Oct 2026 22:01:18 +0000
Manifest next update:     Sun 11 Oct 2026 22:01:18 +0000
Files and hashes:         1: 8SEJSHr0AKY-PLARo9VJ51H9LBg.crl (hash: ugTCf19m6OSD/leaAMKIqOWdg9VYOWeJqyCw5CnaIIs=)
                          2: FpQImozb1WQPa7ynxxGnFSr06JI.roa (hash: ifQklYq1Q4YF5Y36wrzWjlvtYcLa+HxFkFPijteQsCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 22:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:27:d5:b3:f3:07:70:fb:b1:b3:05:6e:6d:67:77:a9:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18
        Validity
            Not Before: Oct 10 22:01:18 2026 GMT
            Not After : Oct 11 22:01:18 2026 GMT
        Subject: CN=01b92589729c0f866670b075460b58bf94be9f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:61:78:c6:e1:de:cf:fd:7e:07:24:f2:6c:
                    0b:02:87:2e:46:f8:0f:dc:e0:c2:ae:84:3a:7e:38:
                    c7:60:82:84:c1:67:94:9c:9e:4a:6e:7d:f3:3b:6b:
                    32:0c:22:e1:14:d1:2d:e6:45:21:4f:07:0d:4c:b2:
                    3e:43:a9:8e:73:45:4d:70:90:d8:6d:8c:00:fc:25:
                    90:fd:65:0a:97:0a:13:d4:30:92:dc:ea:a5:1a:b7:
                    a9:2c:b1:15:e8:fb:48:0e:07:42:19:f2:d7:95:ff:
                    8a:33:4d:e1:b0:66:c9:08:6d:72:a2:09:83:f5:69:
                    9a:bf:bc:82:90:76:59:e0:09:3c:d4:3f:9f:6c:29:
                    9c:2e:13:da:5e:9e:44:a2:ad:4a:57:6d:35:ac:69:
                    fc:17:4b:21:97:c8:88:c4:85:79:3c:05:24:45:44:
                    54:f0:8b:16:34:3e:49:45:03:75:ca:ce:8c:e9:b7:
                    07:65:b3:95:bf:07:c1:08:1a:fe:ce:64:df:3b:79:
                    7c:2d:b1:3e:9c:eb:03:d8:5c:eb:b5:e7:41:d5:56:
                    3e:1b:cd:95:74:8b:42:24:63:c5:08:dd:d8:cf:e4:
                    f2:15:80:fb:b9:94:11:31:b9:6c:2c:81:ab:1f:6b:
                    46:bb:82:34:73:4b:84:0d:b7:4c:85:1b:6c:e5:db:
                    c5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B9:25:89:72:9C:0F:86:66:70:B0:75:46:0B:58:BF:94:BE:9F:45
            X509v3 Authority Key Identifier:
                keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:b2:c4:53:b9:9f:38:d5:fe:0d:49:2e:7d:1e:37:91:88:a7:
         58:00:24:be:21:1e:42:b6:f5:a0:35:e0:c3:f2:61:83:31:c7:
         42:01:c9:04:36:08:1c:58:76:55:b0:32:9b:90:91:87:8b:61:
         86:84:9f:8f:49:e9:62:d8:34:0d:75:d6:e0:f7:3b:e6:8e:21:
         e9:ed:4d:88:4b:88:5a:81:9d:22:85:2a:e7:66:a0:96:3a:fb:
         80:f8:84:33:7d:88:a7:73:48:1f:17:52:76:b9:7e:e0:df:88:
         75:6b:e9:93:78:2c:74:26:47:70:59:eb:3c:e2:aa:16:50:31:
         1c:b3:08:14:bd:92:c6:3e:1c:53:1f:d8:37:fc:e2:24:2d:f0:
         f5:a9:69:9c:87:46:a2:f3:ed:12:7c:10:90:06:2c:69:16:d7:
         d0:92:2e:bb:40:19:b9:23:30:6f:11:47:df:6f:c1:4b:2e:63:
         eb:8b:68:98:0c:f3:0b:12:7b:13:e5:b9:be:7a:95:d1:55:81:
         40:18:73:fa:d8:fb:86:9a:9c:97:de:ab:f7:e5:ad:81:63:e0:
         75:df:23:2e:97:cb:f0:33:93:40:29:3b:e8:86:b2:8e:cc:fd:
         d8:ed:f3:10:bb:a4:e6:91:f8:5f:3d:d4:ab:db:2a:84:19:a3:
         07:70:c2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:50:39 2026 by rpki-client