Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File:                     8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier:          m0bqPygAfOYceqTsH1ca1isq1N6bXgtjbiFXqv01Qx8=
Subject key identifier:   61:68:AD:E7:59:77:5C:A5:24:8C:E5:CA:5D:79:92:17:9B:CB:F0:42
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer:       /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial:       01A00137CB35BBC993C6688D81FD6C0DD202
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number:          1414
Signing time:             Fri 14 Aug 2026 17:00:28 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:28 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:28 +0000
Files and hashes:         1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: 240pE1Urf0Deo1BE6bYuk7YmZaPQmb7zEmY8DUcE/DQ=)
                          2: po4crTaA95m-lSpTh_du9PtU6gY.roa (hash: SJ7n/VopAoAzW1zSv/V6X7AVtWxebx5P9AXUE5osTUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:37:cb:35:bb:c9:93:c6:68:8d:81:fd:6c:0d:d2:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
        Validity
            Not Before: Aug 14 17:00:28 2026 GMT
            Not After : Aug 15 17:00:28 2026 GMT
        Subject: CN=6168ade759775ca5248ce5ca5d7992179bcbf042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c2:f2:7d:2a:c2:75:40:e6:df:c8:7c:81:fa:
                    f6:fb:27:4d:ba:d8:02:d9:77:8c:68:7b:22:d1:00:
                    e4:e3:6b:80:df:df:df:79:53:e5:d3:94:57:96:fb:
                    fc:f5:28:61:5b:62:5b:e4:7b:41:fb:ea:97:9d:aa:
                    3b:a5:e1:fe:3d:99:bf:20:61:60:65:8a:5f:9a:79:
                    5d:75:e3:d0:c9:f4:f8:d1:3d:f3:6b:cc:38:bd:96:
                    4e:76:ea:49:82:06:18:5f:2b:7d:e9:87:dc:e9:82:
                    c4:1b:da:4d:b6:93:35:54:26:c1:53:82:23:aa:e5:
                    53:86:14:1b:77:2c:0e:f8:2a:df:7f:a7:23:98:42:
                    b2:11:c5:5a:2a:63:b8:1e:8e:0b:2e:8c:a4:2c:d2:
                    7e:82:79:03:75:7a:12:97:4c:6c:b9:67:17:95:4b:
                    43:30:37:1c:ac:9f:f6:65:ec:b2:f8:bc:2c:a2:9e:
                    a3:fc:81:53:25:1d:f7:1f:10:df:87:70:83:54:81:
                    a0:55:b8:b1:e3:60:ab:74:cf:03:04:91:cd:57:fc:
                    a8:a5:77:74:8e:2a:b5:94:e8:3a:b0:71:42:ad:46:
                    35:70:99:bd:6a:e7:75:03:95:28:88:35:7a:7b:71:
                    1c:10:b5:20:eb:5d:bc:f0:22:17:81:c4:df:23:d1:
                    e5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:68:AD:E7:59:77:5C:A5:24:8C:E5:CA:5D:79:92:17:9B:CB:F0:42
            X509v3 Authority Key Identifier:
                keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:e5:2f:9f:71:80:52:20:35:e8:a2:ac:63:04:df:4d:b8:a5:
         c8:99:ad:32:d6:3b:20:ce:5f:cf:e0:3a:70:10:ee:ea:13:a3:
         b8:52:4e:99:cf:e2:a4:8d:6d:0d:79:e4:09:c6:23:8b:e9:8d:
         03:ae:41:1f:56:eb:83:9b:18:fb:7e:88:ae:27:71:62:f1:03:
         e7:af:76:73:8b:51:9c:b4:8b:1a:78:98:a7:a8:7b:9d:64:cb:
         82:aa:77:a2:6d:de:c7:42:69:f0:35:38:de:89:ca:82:ed:0b:
         32:60:6a:e7:d9:8c:6b:b0:9e:d2:51:3b:45:68:1d:81:d0:5c:
         de:d2:3a:5c:0e:91:0f:34:cc:64:04:98:6e:0d:3b:31:e6:8b:
         00:88:47:ab:c9:c6:2d:98:4e:85:4b:62:98:26:a1:02:a8:6d:
         d4:ef:e1:26:af:67:5e:85:30:86:4b:01:87:4b:97:9e:4c:3c:
         dd:fa:b7:e3:51:d7:3e:f6:03:f0:58:f7:58:79:11:77:5b:70:
         d0:49:74:61:19:f9:4a:d5:af:f9:d0:64:b0:f3:01:fc:0a:6d:
         ea:de:37:7d:29:29:0a:d7:71:18:d9:3e:8c:ed:67:ed:35:24:
         59:17:4c:7c:c1:bf:7f:48:3b:45:b6:b5:56:f9:5d:1a:43:08:
         75:d9:75:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:20 2026 by rpki-client