Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
File:                     8YBT6n86t5p16Ph1OGd1VR73Vzk.mft (raw, json)
Hash identifier:          OVP0RoCksql11Y0X3PSt+fxAF6LR6XiCbNX5XBBab+w=
Subject key identifier:   2B:C1:41:DD:8A:1F:C2:11:27:C0:76:18:02:31:AD:E0:35:E9:5F:FF
Authority key identifier: F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
Certificate issuer:       /CN=f18053ea7f3ab79a75e8f875386775551ef75739
Certificate serial:       01A001A659AA2A35610A2C7A11A2CDB68647
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 19:01:14 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:14 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:14 +0000
Files and hashes:         1: 8YBT6n86t5p16Ph1OGd1VR73Vzk.crl (hash: XnHE6bsWSqlF62aIqOJafccsCEPhKTEnuA5+WoFzfjU=)
                          2: 9d3478cw58cpVr8RPYg-kVCTW8E.roa (hash: eGWbc7qwVM8x0TUrSQe47h6Dp40094Xn8HVIhZHxbAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:59:aa:2a:35:61:0a:2c:7a:11:a2:cd:b6:86:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f18053ea7f3ab79a75e8f875386775551ef75739
        Validity
            Not Before: Aug 14 19:01:14 2026 GMT
            Not After : Aug 15 19:01:14 2026 GMT
        Subject: CN=2bc141dd8a1fc21127c076180231ade035e95fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d0:8c:f9:58:a9:e3:dc:38:14:ad:b0:26:c6:
                    5b:db:bc:88:da:b5:2d:d7:25:c5:1d:a6:6e:da:08:
                    0a:f2:8a:ad:a8:44:14:d6:78:66:15:25:10:bb:53:
                    59:77:31:1f:a2:9f:24:6d:66:e9:3a:39:53:f7:55:
                    6b:57:05:07:2a:ed:26:00:f6:13:a1:cc:b8:0f:e2:
                    15:ba:02:13:6c:a7:e2:62:e5:31:a2:28:37:0a:2e:
                    13:31:bb:4f:ad:d2:d3:e3:ad:d4:85:90:41:35:03:
                    aa:fb:53:89:e3:50:15:7f:d8:7d:5a:96:c5:ee:47:
                    a0:a6:53:4a:8c:98:d2:b4:3d:e1:7b:5b:ca:ae:10:
                    f2:9e:2b:39:c2:93:3c:68:a6:ba:24:71:2d:78:a3:
                    e4:5f:b4:a5:a5:c2:31:10:e9:1b:eb:31:5d:e7:9b:
                    e2:5b:75:83:b1:57:c7:9d:82:ec:c5:ee:94:df:9d:
                    f9:0c:a5:96:c1:c7:5e:a3:cf:e2:69:9d:92:4d:ce:
                    e8:3d:da:e5:d3:d3:9e:07:7d:70:67:a0:be:a1:43:
                    f2:71:80:87:64:a3:23:62:e7:b0:aa:92:8e:77:a0:
                    d8:97:16:58:d3:11:94:f8:e3:89:25:2b:e2:4e:4a:
                    2a:04:f9:ac:c5:8c:45:50:8e:f2:3f:2a:7c:6e:39:
                    41:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C1:41:DD:8A:1F:C2:11:27:C0:76:18:02:31:AD:E0:35:E9:5F:FF
            X509v3 Authority Key Identifier:
                keyid:F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:cc:a4:6a:45:5b:2f:1c:6f:d7:36:a9:72:20:60:03:5b:ee:
         fc:2f:bf:5e:0b:da:d3:0e:c0:27:e2:7a:42:ad:94:ef:33:8b:
         3d:09:c4:bf:b3:52:bd:32:ed:28:ca:dd:aa:1b:97:1d:f4:39:
         e7:e0:9f:70:2e:0f:52:35:91:35:6a:31:9d:25:ea:3c:88:df:
         90:2c:b6:15:4b:e2:39:0e:44:40:7b:60:2e:0e:30:0f:d9:56:
         7e:b5:6c:1b:a7:cf:32:bc:e0:05:e0:f5:35:ab:bd:8a:94:db:
         1f:03:60:b5:d8:db:9f:37:22:58:c4:20:19:be:b5:33:d8:f4:
         92:df:92:f2:4f:e5:e8:89:76:90:21:d8:40:ca:b8:e8:12:bc:
         f6:a7:e3:f3:2d:2e:04:5d:1a:02:62:b8:d0:02:a4:84:40:fc:
         7a:c4:a2:ca:32:7d:3e:54:20:c8:3f:41:f2:e0:1e:af:5c:07:
         f6:77:00:4b:ad:d7:31:c9:ae:e1:d4:85:93:af:cc:a0:65:f2:
         db:b6:75:6d:0c:f2:00:63:da:e3:fb:11:a6:80:90:0c:4e:54:
         68:e3:fe:99:e9:c3:ce:e9:dc:55:70:01:66:a4:67:8d:51:14:
         5b:80:5e:72:66:7f:84:02:1b:49:f9:19:1d:4d:db:a6:d0:43:
         21:07:ea:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:34:14 2026 by rpki-client