Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
File:                     Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft (raw, json)
Hash identifier:          27WEdak7VEPkz01VnLbvu2pZ8MXRln6/Mq9IlYnh/jg=
Subject key identifier:   71:59:A6:47:0F:9B:E3:EC:F5:B5:96:17:44:69:36:91:E6:FD:6C:6C
Authority key identifier: 49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71
Certificate issuer:       /CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
Certificate serial:       01A00281C6D0A24AC59E0AACC037793B6905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
Manifest number:          1238
Signing time:             Fri 14 Aug 2026 23:00:54 +0000
Manifest this update:     Fri 14 Aug 2026 23:00:54 +0000
Manifest next update:     Sat 15 Aug 2026 23:00:54 +0000
Files and hashes:         1: Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl (hash: uFJjMZFvpWKzWzFDQNktm/ZCuXTLoEkajVT2PNmHJZ8=)
                          2: zuvfz_qQwxwSkAdtG0Js-khyYL4.roa (hash: xagvaZCpPwHCxyMBtZK7vMyfxxV2ODbD7qNizvfSRvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:c6:d0:a2:4a:c5:9e:0a:ac:c0:37:79:3b:69:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
        Validity
            Not Before: Aug 14 23:00:54 2026 GMT
            Not After : Aug 15 23:00:54 2026 GMT
        Subject: CN=7159a6470f9be3ecf5b5961744693691e6fd6c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d5:83:46:17:b1:90:97:83:cb:2a:03:45:00:
                    ef:b3:93:19:fd:6c:76:5b:26:ff:a2:9e:4f:ad:66:
                    b7:be:0c:6b:81:4c:14:e7:e8:e0:f1:b6:e2:64:ae:
                    32:59:a3:ec:98:dc:81:d7:b4:33:4c:2f:40:1b:2f:
                    1f:33:3a:6d:11:e0:23:ab:c5:cb:8e:cb:e7:99:b9:
                    f9:da:a5:79:fc:10:70:dc:bd:1e:61:9d:0e:0d:c8:
                    f1:5e:7a:98:a6:e8:69:8a:ca:5b:dc:9d:98:73:5a:
                    f1:a5:df:83:fb:8d:d2:23:04:9c:3a:a1:61:72:f5:
                    3d:70:8f:f2:35:3e:24:04:e2:d8:6b:c1:98:5b:0d:
                    14:75:1c:a4:c2:3b:fd:00:c0:bb:e1:a1:0a:92:07:
                    98:be:89:ec:41:2a:2d:cc:a8:c0:cd:a4:f2:e2:a6:
                    80:82:4d:28:66:b1:f7:7a:a9:80:ca:c1:bb:b7:56:
                    d7:ac:f6:20:81:b8:4e:db:55:dd:88:65:60:ec:b7:
                    d4:32:5f:bf:68:72:3f:41:7f:0f:c2:a7:35:18:fe:
                    6f:c4:f3:e8:5e:da:fd:df:eb:96:13:3b:8c:05:4c:
                    34:b9:c8:7e:ce:c7:05:ad:50:39:51:c1:b0:f0:2f:
                    ef:9d:84:cb:45:eb:a4:5b:ff:e7:a9:38:de:df:2b:
                    5c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:59:A6:47:0F:9B:E3:EC:F5:B5:96:17:44:69:36:91:E6:FD:6C:6C
            X509v3 Authority Key Identifier:
                keyid:49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:e9:d6:1d:b7:00:a8:fa:06:35:d1:1b:cf:5d:b9:37:d5:94:
         ef:31:0c:d1:e9:9e:c3:57:b8:ef:1d:23:ad:ca:bb:f6:52:8c:
         f4:80:61:31:cc:4c:79:f9:e1:80:a3:a3:83:3e:29:f9:c6:02:
         44:82:51:ba:90:d3:33:0c:31:70:3d:a6:31:34:ad:66:c0:de:
         45:c2:02:76:84:04:65:ad:b5:64:43:d1:8b:2d:da:a6:74:dd:
         65:47:9a:91:96:1c:86:f6:ce:4a:17:bc:66:51:c3:c0:ec:9a:
         de:71:99:15:d2:06:db:0c:2f:1b:27:b4:f2:d6:8b:65:a7:2b:
         0d:6d:ea:4a:a7:f3:d4:2c:b7:dc:31:ec:f2:dd:3c:fc:a3:5e:
         33:45:75:03:48:2d:18:81:a5:1d:84:fe:09:15:b9:ed:24:b0:
         43:66:67:4b:34:b4:9e:1e:c4:ee:d8:3f:7a:20:b5:b2:ef:67:
         75:7d:0f:1a:24:bb:41:36:25:4a:0b:6c:c1:dd:ee:26:66:86:
         1a:02:b0:89:63:f6:7c:0e:f3:14:eb:5c:de:64:07:b9:32:2b:
         33:a0:ab:8e:3c:b4:4d:bc:50:be:0d:b9:53:bf:3c:7a:cf:bf:
         c1:ad:52:fb:af:16:54:2b:49:1c:a1:4d:db:b1:5c:c8:31:9f:
         e7:ca:7c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:30:25 2026 by rpki-client