Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
File:                     8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json)
Hash identifier:          8zR3UtgbsMkkHtZQiDlTdA8jZ+t8OD4XmUxE4MrXEeU=
Subject key identifier:   E1:7B:D9:AC:2A:7E:01:03:6E:8D:71:C9:B8:CA:1A:1C:DA:91:14:69
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Certificate issuer:       /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial:       01A0C369AFB513D38067E030F91016838268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
Manifest number:          0BD7
Signing time:             Mon 21 Sep 2026 10:01:18 +0000
Manifest this update:     Mon 21 Sep 2026 10:01:18 +0000
Manifest next update:     Tue 22 Sep 2026 10:01:18 +0000
Files and hashes:         1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: EX4dw7BNP7x4aDCVsZLuCnBmDn5TRsynAPAE118IBr8=)
                          2: Wwk325SN1Dr-hmbxjFq8uNHcOyo.roa (hash: 7U3vqi/fr/x9T5oXLoF5tZC73nYigGo0Lh9WQ9j33Bo=)
                          3: qbe4uY_Zb00t6Fakyro4OJNWkR0.asa (hash: Fz5EM5TghKPWk/7L/NMHjc78c10XDzIwyQrhrF+eGDI=)
                          4: yfnXQNQR6qwLfnS_9inVuunPhTE.roa (hash: 6X/o1qnSnBUFZ+wmM2iXaRxxmfNZALk6TxkSNYTjhH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:69:af:b5:13:d3:80:67:e0:30:f9:10:16:83:82:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
        Validity
            Not Before: Sep 21 10:01:18 2026 GMT
            Not After : Sep 22 10:01:18 2026 GMT
        Subject: CN=e17bd9ac2a7e01036e8d71c9b8ca1a1cda911469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f7:1d:35:2f:61:ec:cd:47:6a:38:bf:43:9d:
                    0c:e8:6a:8b:87:0c:fd:3a:a3:e6:c1:04:34:cd:26:
                    ad:ac:61:e8:9d:94:25:df:1f:dc:78:5a:2d:33:ca:
                    b0:b0:37:aa:8f:74:83:e3:25:c0:4a:50:01:3c:e0:
                    cb:9c:d0:11:37:eb:83:76:a4:20:45:1a:cb:e0:a1:
                    da:02:eb:b9:d1:ae:6e:b3:03:46:17:b3:de:54:ca:
                    60:7f:6d:95:df:45:81:1e:71:23:54:a8:0a:f4:11:
                    2c:15:54:4c:c9:ea:57:9a:47:1d:42:d5:8d:cf:9a:
                    f9:4e:ea:61:4a:fb:39:4e:7e:23:2f:12:59:64:db:
                    34:0f:f7:75:b7:17:b9:7f:7d:3b:b4:d3:29:70:1b:
                    af:d0:2d:69:11:60:18:30:e3:62:f6:cb:ec:2c:41:
                    c4:b6:e3:0d:7a:7f:b0:62:10:75:ea:26:95:6e:b5:
                    f6:32:ec:b8:fe:bf:cf:4d:f4:b5:25:e5:f1:ad:c2:
                    1b:83:e4:4c:5f:56:71:b2:72:ad:e0:36:b3:0a:df:
                    80:d0:66:21:40:51:1a:9e:2c:b8:fc:d8:3f:34:2a:
                    16:97:db:3f:a1:63:3d:0f:19:59:17:73:ae:ba:32:
                    1c:b2:d7:1d:d8:15:2e:77:59:fe:1a:12:60:c3:61:
                    a6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7B:D9:AC:2A:7E:01:03:6E:8D:71:C9:B8:CA:1A:1C:DA:91:14:69
            X509v3 Authority Key Identifier:
                keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ef:50:66:2d:a2:9e:0d:f4:87:87:4b:dc:3d:c7:6f:0f:26:
         7b:d5:b7:22:77:d8:33:4d:db:80:63:cf:0b:b1:4b:f5:68:11:
         2b:ec:42:a5:94:74:09:e0:2f:99:a0:81:dd:21:36:f9:05:47:
         b3:18:74:e2:50:b6:47:bb:17:2a:cb:52:29:ff:20:90:12:94:
         19:73:37:cd:52:e1:84:5e:e1:c6:30:0d:74:5a:b9:6c:80:6a:
         70:94:9f:d7:18:55:96:25:6c:65:a8:69:68:b7:d6:23:4e:f4:
         1a:36:92:46:dc:3b:ef:4c:f4:df:20:b1:47:b9:cb:9c:71:13:
         86:59:de:09:5d:5d:d9:34:1a:9c:09:f5:31:bc:43:c0:e3:18:
         20:d2:31:e6:41:15:56:77:b7:f4:63:fd:95:15:cf:3d:f9:83:
         f8:e0:e0:ea:17:b5:12:42:a5:08:84:19:05:4f:4e:cc:1d:d2:
         31:46:46:fc:fe:57:7d:6c:35:7e:11:3a:de:67:3f:cb:af:4f:
         45:b2:ca:d1:e8:f7:a2:f9:d4:d6:98:bc:0e:d3:6a:3e:5d:56:
         69:0d:c6:f1:64:56:82:b6:aa:a8:e7:e3:05:fc:14:1c:ab:cd:
         02:35:48:39:e1:87:29:79:63:f4:ab:2d:1a:1b:6b:3b:94:f6:
         80:6a:77:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:57:03 2026 by rpki-client