Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File:                     8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier:          dMD3+bnyrObFLI9eMDsCVmUkUsBrOifm9j98tTEFmFc=
Subject key identifier:   98:F6:F6:59:30:57:5E:39:CB:CC:81:23:99:52:2D:97:43:26:8E:9A
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer:       /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial:       01A0024B03380A19534542D781E2016526A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number:          0981
Signing time:             Fri 14 Aug 2026 22:01:05 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:05 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:05 +0000
Files and hashes:         1: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: vT7qt7WjfLELMJanbJhWUN5AE9guz4JCoU93haJqyzY=)
                          2: wn5elTtGmUxo3vgmfjZchTK_VTo.roa (hash: fkotHNjPjFd/IcwShz9KIRbGoJkmT3yrX5z9oh73hjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:03:38:0a:19:53:45:42:d7:81:e2:01:65:26:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
        Validity
            Not Before: Aug 14 22:01:05 2026 GMT
            Not After : Aug 15 22:01:05 2026 GMT
        Subject: CN=98f6f65930575e39cbcc812399522d9743268e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bf:aa:a3:8b:f6:8e:e5:2f:38:7a:54:ff:4d:
                    89:8b:e7:00:91:5e:cd:b9:ee:a8:f8:9c:c4:e0:96:
                    70:3c:40:48:64:01:82:c1:66:a0:98:91:57:f7:89:
                    57:fd:ff:dd:01:bf:e9:95:3f:1b:5e:cd:19:f6:24:
                    6d:d1:2c:6d:52:66:28:45:ed:71:04:f6:37:8a:93:
                    99:62:97:51:de:2a:35:35:bd:6b:9c:5c:ef:e5:5a:
                    7c:39:85:09:96:97:cd:9f:6d:92:6a:27:b1:71:d4:
                    e4:ba:45:61:c3:0b:53:80:31:58:8c:61:b2:0b:55:
                    72:9e:d7:57:79:03:cb:8b:0e:4b:96:5d:2d:40:ec:
                    23:61:c0:f6:e0:30:78:ff:73:9b:ee:a7:4f:3e:fb:
                    e1:8d:bf:92:a3:18:4a:da:37:b4:b5:64:5b:4d:8b:
                    2c:6a:1c:fd:ac:9f:1b:c2:af:d7:f0:19:71:d7:36:
                    9a:7d:7e:57:b4:f4:13:39:b3:a5:09:84:2a:5d:15:
                    cd:48:00:37:93:0c:cd:11:0f:20:21:93:8e:a8:43:
                    7d:8d:66:9c:74:25:e3:4e:83:9b:c4:f9:1a:17:53:
                    38:24:72:8a:ab:39:99:9b:39:4f:c3:52:2e:ca:64:
                    33:cf:2f:e0:e2:8b:cb:be:73:c7:66:e9:66:ea:3f:
                    b5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F6:F6:59:30:57:5E:39:CB:CC:81:23:99:52:2D:97:43:26:8E:9A
            X509v3 Authority Key Identifier:
                keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:4a:64:70:09:e4:86:2b:75:36:5b:66:65:ea:7f:91:06:e4:
         ff:1d:e4:ff:9a:94:1a:2d:65:be:dd:5c:93:5f:b9:c8:8b:ee:
         79:a8:f9:79:9c:20:20:8d:77:0d:81:0d:b9:32:2f:8b:d7:ce:
         4a:d6:7d:ad:a9:32:4e:7a:2f:44:85:9a:ee:a8:5f:8b:b8:a0:
         24:3b:ca:13:91:4d:5f:24:5d:9e:a9:df:a8:68:04:2e:b0:af:
         37:3d:f0:8f:65:48:e9:f6:93:84:98:71:2f:f7:a7:51:f3:8d:
         f0:61:b7:9b:e2:41:a7:9a:df:80:1e:bf:11:54:3e:bb:63:fa:
         3e:a1:05:73:28:52:f4:15:ec:a7:f0:b8:58:19:a4:5a:53:f4:
         ed:8b:87:53:25:7f:9d:ac:b7:04:d6:e9:2d:65:22:13:c6:1a:
         23:c0:6a:dc:51:99:28:e2:b7:1c:0f:6e:6b:ee:6d:65:08:3b:
         6b:be:7d:b1:37:3a:a4:c2:a6:0c:84:30:53:65:6f:2e:fd:a1:
         22:f9:b9:64:3a:f9:08:09:57:77:a2:a9:05:c3:e7:f4:a7:7e:
         32:72:c6:6c:86:fe:0c:30:34:14:62:37:01:b8:cd:7e:86:d7:
         67:cd:75:5f:8d:be:bb:7b:b9:8a:38:a1:3c:87:6c:07:e9:8b:
         85:52:e1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:07 2026 by rpki-client