Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
File:                     02vm8HVADTBaFt3mkOJcvZRkXL4.mft (raw, json)
Hash identifier:          QzSzWYqudXxsYjcBQYpW8E9Jj1+/hQGxM++GPtPRXCI=
Subject key identifier:   BA:95:23:F3:21:9B:9E:A4:59:F9:65:B8:DA:67:10:A8:48:D8:60:F7
Authority key identifier: D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
Certificate issuer:       /CN=d36be6f075400d305a16dde690e25cbd94645cbe
Certificate serial:       01A0016F2F203C659D0981FDBCC4DAB6B8C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
Manifest number:          1952
Signing time:             Fri 14 Aug 2026 18:00:58 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:58 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:58 +0000
Files and hashes:         1: 02vm8HVADTBaFt3mkOJcvZRkXL4.crl (hash: 1V6NQxOpvGmogVZRkfbZCjHrut4bCYazkb57s2YMHLc=)
                          2: tfcGfm5inMTt9cfihgrBHcgLBeA.roa (hash: wAYHYoqlbuhkIu13qc05BEwhuRgD+rXRGSKUOssyz4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:2f:20:3c:65:9d:09:81:fd:bc:c4:da:b6:b8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36be6f075400d305a16dde690e25cbd94645cbe
        Validity
            Not Before: Aug 14 18:00:58 2026 GMT
            Not After : Aug 15 18:00:58 2026 GMT
        Subject: CN=ba9523f3219b9ea459f965b8da6710a848d860f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ac:98:48:a9:ab:33:ef:a4:37:cd:bc:c0:16:
                    d7:23:c5:ce:72:62:4b:73:bb:45:30:6c:08:9e:12:
                    b1:8c:f4:63:6b:c6:16:e2:80:5b:58:f6:94:01:a3:
                    0d:56:8c:ed:80:94:99:03:ef:d8:76:03:2d:9e:36:
                    88:88:dc:e8:f5:10:07:c6:aa:40:de:be:da:55:4b:
                    dd:e7:2c:e6:15:d6:fd:e8:ee:ed:4c:21:91:b5:ff:
                    90:3d:36:cc:13:74:45:12:50:38:bb:12:ed:27:ca:
                    29:8d:79:c5:88:27:92:aa:05:bc:89:43:cb:50:37:
                    d6:c7:1f:19:08:38:63:03:05:a4:92:81:79:b3:0e:
                    b8:b1:e5:df:66:7b:da:72:20:01:45:17:35:9f:d8:
                    26:de:a4:53:93:e6:8f:38:c1:c2:2e:a6:dd:bd:41:
                    8e:32:50:97:a7:f6:74:b6:5a:05:ef:7e:95:68:38:
                    5a:0d:a9:49:44:af:cd:70:16:4b:b2:4d:51:bc:3d:
                    7e:20:96:32:eb:04:25:fb:a7:eb:ef:70:cf:a4:50:
                    5e:84:d4:75:1d:56:d1:f0:23:c3:15:ef:91:cc:4b:
                    ac:4f:e1:15:a9:8f:e0:9c:04:96:ce:32:21:ee:4c:
                    81:65:8a:9e:a5:7c:e3:fe:35:fa:29:d0:d6:da:75:
                    84:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:95:23:F3:21:9B:9E:A4:59:F9:65:B8:DA:67:10:A8:48:D8:60:F7
            X509v3 Authority Key Identifier:
                keyid:D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:52:31:75:a1:cf:a0:91:15:cf:14:9a:08:cd:4b:d1:5d:36:
         ea:23:71:51:dc:87:cf:0f:d6:a8:d3:22:0d:f1:29:5c:82:ce:
         51:f1:24:de:a5:ed:5c:bd:a8:b3:1e:b6:79:3b:ed:4a:08:04:
         70:e7:46:a1:9b:34:8a:b4:b9:2e:8f:49:04:fb:63:69:80:14:
         89:df:d2:75:8d:72:4e:95:83:72:74:94:81:4e:a4:c7:00:60:
         f4:39:a8:2c:67:f0:87:ae:1a:9e:b8:90:b3:2a:72:16:24:dd:
         59:37:48:24:c1:7a:57:41:e0:58:6e:19:2b:ee:0a:07:6b:b7:
         4c:e3:47:29:99:36:2e:15:3d:30:3e:4b:9c:ed:ee:d4:2d:ab:
         6d:d8:72:a5:24:c9:ae:65:c2:ca:36:61:1d:5d:80:f8:78:46:
         77:32:67:9e:2f:1d:f7:48:e8:ce:ef:99:ef:23:81:7f:28:6d:
         52:57:e0:4b:f6:1b:2b:e5:b0:05:25:af:d6:30:1a:6b:bb:e8:
         6a:c8:95:d7:58:8e:3b:a6:15:6c:6d:24:ba:d5:c1:23:48:5f:
         df:01:0e:a6:05:3a:66:55:e9:56:3c:d4:2e:8e:e4:19:16:3a:
         53:7f:06:cd:f5:86:9a:57:f3:c1:cb:70:bb:ed:4e:57:a8:82:
         f2:2a:56:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:26 2026 by rpki-client