Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
File:                     1-v3j2ZJau-IPw8bZGEx99nBH-54.mft (raw, json)
Hash identifier:          oSq9O3d6NTwViRTXSdAQMTzWRZNFO4S+JPYO+o6Lg1s=
Subject key identifier:   A6:F6:AB:70:82:70:D4:84:C2:16:47:AF:BF:F6:09:7F:68:25:1F:D6
Authority key identifier: FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E
Certificate issuer:       /CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e
Certificate serial:       01A03F72258804BB086A5A80C0D4B397D47A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
Manifest number:          0373
Signing time:             Wed 26 Aug 2026 19:00:40 +0000
Manifest this update:     Wed 26 Aug 2026 19:00:40 +0000
Manifest next update:     Thu 27 Aug 2026 19:00:40 +0000
Files and hashes:         1: 1-v3j2ZJau-IPw8bZGEx99nBH-54.crl (hash: f8YqbKuLkrK2HjFAUOATK7m1X+C9Kwb/B3Enhk+Jtlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 19:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:72:25:88:04:bb:08:6a:5a:80:c0:d4:b3:97:d4:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e
        Validity
            Not Before: Aug 26 19:00:40 2026 GMT
            Not After : Aug 27 19:00:40 2026 GMT
        Subject: CN=a6f6ab708270d484c21647afbff6097f68251fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ae:15:ab:d0:51:35:38:97:88:83:77:5d:32:
                    73:c1:b3:db:cc:50:b1:54:c0:c1:00:46:33:22:8a:
                    6c:fb:2f:1b:19:9e:2f:eb:16:f1:53:0e:79:f7:f6:
                    49:a8:ef:ac:e0:92:6b:79:4d:74:ec:68:07:e2:c1:
                    cb:c0:4b:5a:a3:1b:e9:10:d4:b5:07:6a:cd:df:35:
                    f4:03:07:2f:c3:2b:92:a8:03:c8:80:bd:a2:e8:d0:
                    80:41:ed:cd:47:91:74:5c:80:8e:76:b4:01:ac:21:
                    72:ff:54:14:96:af:7e:c4:f1:b2:70:30:ce:4c:76:
                    02:fc:b3:9a:19:c2:08:60:6a:3b:7d:96:d6:78:bd:
                    ed:41:71:1a:ea:0e:e1:de:24:b3:62:8d:b5:26:6b:
                    7f:7c:b4:8c:73:1d:9d:ca:2e:aa:da:38:29:64:5a:
                    12:a6:0a:63:cf:5f:3c:9c:eb:46:b6:16:ff:99:b3:
                    c1:fb:6a:ce:7e:c1:d9:e2:cd:6c:c1:65:99:04:15:
                    22:88:da:59:a9:51:72:d2:c2:11:e0:e4:18:52:a2:
                    37:f6:3a:1c:da:8f:f6:db:d0:a4:53:f9:6d:d6:4d:
                    5b:52:0a:95:92:54:ca:65:48:51:d4:33:56:a2:11:
                    1f:ef:d9:53:2a:35:e1:20:a8:45:3c:55:d8:79:a2:
                    b1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F6:AB:70:82:70:D4:84:C2:16:47:AF:BF:F6:09:7F:68:25:1F:D6
            X509v3 Authority Key Identifier:
                keyid:FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ad:f8:7d:9e:ce:6f:06:74:3b:3d:3d:a3:05:47:cd:11:96:
         04:38:48:1a:b6:a0:c3:8f:b9:a8:d0:58:b0:cf:50:66:e6:d8:
         4e:d0:78:47:9e:b4:e5:1b:3a:eb:09:d3:f2:4d:f7:1a:7a:9a:
         a2:11:5f:c6:83:4e:b7:23:bb:fa:85:11:c2:4d:a9:69:77:47:
         7d:e4:91:40:d4:7d:5b:2f:7e:00:dc:c8:21:28:3e:01:76:73:
         b2:9f:40:bf:d6:0f:f0:bf:e4:e0:89:a1:b3:ae:61:c9:9d:1c:
         89:c1:68:ee:e5:b6:52:d1:c3:cf:a1:a5:66:0d:81:f5:67:70:
         50:47:92:d0:28:36:4e:74:aa:52:3f:d0:4e:70:70:9a:77:f8:
         b7:c3:cc:23:52:37:59:3a:51:5e:45:83:55:97:b2:7f:75:bd:
         df:3e:d2:26:15:2b:08:e5:c5:bc:5a:ae:e3:16:1d:2d:a1:3e:
         77:a4:34:1e:67:98:8f:27:0b:0f:f0:e5:f7:f9:2b:90:cb:71:
         6a:39:b5:3e:98:31:eb:5c:1a:51:2d:4c:89:69:d8:93:6e:a9:
         26:89:bd:69:80:37:c0:9e:b8:08:45:28:a5:79:ea:bc:e6:84:
         18:38:35:59:d3:98:01:f4:ad:97:89:18:1b:19:9e:ad:7d:ce:
         76:11:c2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:54:04 2026 by rpki-client