Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
File:                     9lFtfyjNvos_VddTcqrU07EL4J8.mft (raw, json)
Hash identifier:          lpM+gJzYBjY71k/iCbjed3M5tctK6NeASxi9PpusJR0=
Subject key identifier:   B1:7C:65:F3:57:D0:28:78:15:68:A2:17:C0:EB:31:56:E7:2F:5D:79
Authority key identifier: F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F
Certificate issuer:       /CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f
Certificate serial:       01A00025829880AF6695BC4B2313F86C97EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
Manifest number:          0CFA
Signing time:             Fri 14 Aug 2026 12:00:53 +0000
Manifest this update:     Fri 14 Aug 2026 12:00:53 +0000
Manifest next update:     Sat 15 Aug 2026 12:00:53 +0000
Files and hashes:         1: 99vNYm11Abb46yGkbIvnhElSUKk.roa (hash: kaM8j0/7vV6OtesnBvSal75AKpJWv23ajsp4aKhWL4M=)
                          2: 9lFtfyjNvos_VddTcqrU07EL4J8.crl (hash: dSoDM36gwEVcny2xT9o1eiU93T9yBLFl1P9QV/4AboA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:25:82:98:80:af:66:95:bc:4b:23:13:f8:6c:97:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f
        Validity
            Not Before: Aug 14 12:00:53 2026 GMT
            Not After : Aug 15 12:00:53 2026 GMT
        Subject: CN=b17c65f357d028781568a217c0eb3156e72f5d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6b:90:9a:ed:91:09:17:f8:f5:95:a7:b9:a6:
                    c4:8e:26:49:4b:8f:e8:23:e2:56:99:0c:0b:77:af:
                    e2:d5:2a:24:c3:31:7d:ee:f1:ea:2d:cf:bb:be:ad:
                    a8:8a:97:20:7d:09:63:49:a2:07:2f:7b:b3:71:15:
                    e7:b1:24:58:c3:ca:47:b5:b2:c2:ac:32:bc:0c:64:
                    d0:0c:e0:40:27:d4:00:2e:82:b2:91:ee:e7:8e:13:
                    74:af:8a:4d:d6:e3:27:aa:4a:8d:12:f9:5b:9d:04:
                    38:c9:e8:83:6d:f3:34:02:06:80:13:cb:5c:97:fc:
                    9d:24:ff:04:dc:8d:ac:b0:7b:3e:35:04:a3:b9:f7:
                    af:d7:3f:6e:5b:95:75:1a:2d:ae:27:9b:e4:ad:44:
                    13:6d:c5:2a:02:4b:fe:2e:bd:4e:3b:62:03:9d:fa:
                    1b:53:cc:60:df:a2:2a:85:49:ab:73:2a:14:83:de:
                    47:8e:ec:18:bb:89:b1:d4:18:22:99:9f:3e:12:c3:
                    d9:1d:43:54:41:97:bb:7a:b9:a7:f5:73:98:f1:48:
                    8c:e3:d2:2f:45:19:0e:3e:a2:36:62:6c:b3:ce:b3:
                    ce:3c:78:e7:0c:81:c1:79:1d:5f:fc:8c:07:3b:b6:
                    8f:17:6b:8a:b3:a4:6d:13:62:b9:c8:d2:b9:81:f4:
                    fd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7C:65:F3:57:D0:28:78:15:68:A2:17:C0:EB:31:56:E7:2F:5D:79
            X509v3 Authority Key Identifier:
                keyid:F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:29:e2:d9:28:e7:85:41:2f:69:2d:73:ba:bd:41:9c:0a:d5:
         d5:69:0a:ad:12:3d:6a:b6:f4:bd:47:49:f0:db:e6:e0:84:4f:
         24:94:22:c2:5b:50:6f:03:12:4f:43:66:9d:e6:89:55:4b:50:
         3a:92:d4:40:61:07:de:5a:50:56:e5:c0:63:4b:01:e8:bc:86:
         15:a7:ff:fe:50:a4:54:58:11:42:60:b0:e5:e3:e8:9f:30:79:
         f4:d2:4f:ab:e7:7f:59:fa:2d:33:cd:df:07:2a:d7:ac:e1:24:
         76:33:58:dd:99:56:6a:61:32:94:61:27:7a:df:97:16:4e:42:
         30:12:63:57:e2:fb:bd:30:99:12:fd:c8:9f:73:22:f2:d2:31:
         0f:20:a8:14:b3:2a:f6:71:19:e8:2c:54:ae:d2:65:62:e6:ff:
         d9:81:0a:1c:6e:c5:6d:5b:d3:f6:b2:1e:4c:7a:dd:57:e4:b9:
         39:5b:e0:47:d6:6c:45:79:8b:45:70:5e:ce:10:46:74:7a:56:
         71:89:4f:ca:28:aa:25:b8:22:cb:5c:ea:cb:f6:e0:8f:0e:d4:
         0d:50:5c:e4:3d:a3:1a:93:cd:14:ed:81:68:4d:a1:aa:6a:08:
         fd:45:24:ca:a4:e2:88:c6:c3:fe:13:ad:8a:f2:93:a6:61:72:
         b2:5a:c7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:04 2026 by rpki-client