Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
File:                     D_jpPzRy6mvljz_rdElUcAlaF30.mft (raw, json)
Hash identifier:          3z7/2jvx87GMm+5it1S2TDIojqSVo2KzMGBcTdGft5k=
Subject key identifier:   C6:01:E7:FB:FF:5D:F8:49:6D:F1:8F:A3:F9:29:F3:51:EA:56:0D:90
Authority key identifier: 0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D
Certificate issuer:       /CN=0ff8e93f3472ea6be58f3feb74495470095a177d
Certificate serial:       01A0017029A0CBB429359DC751015B151DF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 18:02:02 +0000
Manifest this update:     Fri 14 Aug 2026 18:02:02 +0000
Manifest next update:     Sat 15 Aug 2026 18:02:02 +0000
Files and hashes:         1: D_jpPzRy6mvljz_rdElUcAlaF30.crl (hash: PdHO4is0gAck9Rt9zul6ZNC0c1GAYRJM5il4JVFe3Vs=)
                          2: Lacc-4_5zErIhaLObDnS5evETUo.roa (hash: E1jD2Nnvra6sUfCdyofjtOGms4KS2srmXM/6u5x0Za4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:70:29:a0:cb:b4:29:35:9d:c7:51:01:5b:15:1d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff8e93f3472ea6be58f3feb74495470095a177d
        Validity
            Not Before: Aug 14 18:02:02 2026 GMT
            Not After : Aug 15 18:02:02 2026 GMT
        Subject: CN=c601e7fbff5df8496df18fa3f929f351ea560d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a8:37:db:6e:6d:45:88:69:e0:00:bf:b7:66:
                    4f:66:20:88:7e:75:be:8a:94:d3:90:ba:8b:fb:f9:
                    20:5e:29:07:65:aa:f2:1d:88:fe:93:c5:c8:f6:7d:
                    2d:f7:e4:63:3b:93:b1:ed:72:c6:5c:12:52:26:ae:
                    cb:ca:f8:a1:f1:ee:dd:b7:bf:73:1f:16:62:1c:34:
                    a3:9d:0a:36:81:06:e7:e1:b4:64:41:0a:32:1d:69:
                    35:d2:d2:17:df:51:ce:5b:60:d9:ab:23:a4:80:e8:
                    22:6c:64:dd:0b:eb:e1:9a:d3:7f:39:3c:ca:f2:65:
                    66:1b:44:b4:b0:b5:3b:39:a1:d7:69:19:b4:eb:dd:
                    ab:77:aa:78:10:af:9d:76:30:71:cc:46:a5:99:3d:
                    c5:a9:c7:0d:d1:7d:8c:c4:e2:df:af:6b:c9:b2:bc:
                    f3:c8:26:fd:38:69:76:3f:ff:f7:e6:d2:a1:07:7d:
                    cb:1e:61:e0:db:a1:f7:74:19:99:4d:c3:e7:6a:da:
                    2b:b2:21:45:05:bf:87:9b:82:e0:46:24:bd:41:ad:
                    4f:94:42:34:5b:f0:cc:ec:7a:20:76:c8:4a:b3:81:
                    d8:3e:59:9e:9c:0e:0a:64:9f:4f:23:2d:b2:8b:77:
                    60:08:74:94:06:d5:f2:df:db:26:81:2f:f2:6d:0e:
                    ad:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:01:E7:FB:FF:5D:F8:49:6D:F1:8F:A3:F9:29:F3:51:EA:56:0D:90
            X509v3 Authority Key Identifier:
                keyid:0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:64:53:a9:3b:72:84:21:ec:ff:47:da:1c:b4:7b:d6:78:51:
         25:76:85:01:88:69:7e:41:2a:e3:82:ae:c0:c0:d3:fa:25:53:
         50:60:22:76:f3:70:81:e0:66:e5:a3:c7:ab:69:4f:70:f5:3b:
         75:3b:80:18:d8:22:24:41:c9:f9:a1:f9:23:91:34:96:f5:7f:
         24:c3:bc:45:f7:fd:f4:07:1d:31:02:be:2d:7f:80:cd:ff:3a:
         00:64:c7:ae:01:5e:0e:06:71:a6:d4:ec:62:c2:63:ab:02:15:
         b6:9b:83:fc:9d:8d:d0:c5:92:56:a1:3c:b0:b5:da:b6:96:22:
         b4:4d:c6:ab:fb:e2:cb:fe:43:8a:a2:02:d5:a5:8e:1f:d9:b2:
         a2:37:97:69:c2:b9:56:b4:8c:b2:49:77:96:9d:72:22:dc:0e:
         92:07:dd:cd:0d:a4:6b:6d:99:05:0c:20:6e:ae:7c:69:14:ab:
         6c:57:15:9b:97:ee:c9:1c:14:92:ee:b7:cf:6d:94:43:d2:26:
         d7:d2:85:9d:e5:8d:d0:45:29:07:55:8e:72:9b:90:d5:2f:1c:
         f4:e2:36:ed:70:cc:e6:90:ff:b2:c6:49:6f:b5:c8:c0:60:f5:
         e4:44:f9:53:b2:2f:03:a0:41:d0:d8:8a:5a:bc:4f:fd:2e:c4:
         74:97:4f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:13 2026 by rpki-client