Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
File:                     1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json)
Hash identifier:          T9uFtN5ccekWkJXilomb0hvmKAmLm8E/pfksK1T6jmQ=
Subject key identifier:   F0:54:7D:53:5E:66:D4:87:14:E7:59:B3:E4:83:71:47:0C:75:10:F5
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Certificate issuer:       /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial:       01A0009324F3514839E7F15C98437F67BA60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
Manifest number:          0F21
Signing time:             Fri 14 Aug 2026 14:00:38 +0000
Manifest this update:     Fri 14 Aug 2026 14:00:38 +0000
Manifest next update:     Sat 15 Aug 2026 14:00:38 +0000
Files and hashes:         1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: l5e1E7VFaullCMmFofFe1wQv0a/t2fV+3XXEnwxGZtM=)
                          2: TD7LcMa8g07SO6E6QEZXj5yZzM0.roa (hash: cD2AwS1X+5qcgIE9W2blNIYEjQyz6ExsjggeZZ5KKps=)
                          3: ggOW3o-MbvU8qrixzLewXEOW-dA.roa (hash: l2JHFaXh36mxZ4Wh5hSlzL5jEoUquwv+npOClo9uaVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:24:f3:51:48:39:e7:f1:5c:98:43:7f:67:ba:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
        Validity
            Not Before: Aug 14 14:00:38 2026 GMT
            Not After : Aug 15 14:00:38 2026 GMT
        Subject: CN=f0547d535e66d48714e759b3e48371470c7510f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:84:ea:45:8b:ec:e9:06:f4:fb:cf:ee:20:87:
                    d8:40:04:f8:b4:cb:51:4e:96:87:c9:34:7b:4a:4c:
                    f8:f8:24:1f:03:e4:bd:60:c4:9c:f0:32:77:70:a8:
                    ac:68:4a:51:f2:59:29:7f:89:1f:08:e9:a5:97:2b:
                    72:ac:10:52:9c:a4:6b:c7:6b:45:6d:27:e3:db:cb:
                    05:fa:63:36:3c:53:89:e7:ae:56:e6:28:05:73:ad:
                    92:18:2f:01:2f:0c:3d:15:5a:06:8c:2f:2f:ab:2c:
                    b3:0a:d7:dd:a5:93:00:10:78:7e:b9:1c:14:59:c8:
                    4d:01:85:df:a9:b5:fb:ed:b5:3c:f8:61:83:48:53:
                    5b:6f:53:a4:d2:cf:44:6c:3f:f3:b2:8e:23:51:87:
                    14:85:73:c2:a9:a6:bd:05:ed:d8:9e:b3:4b:da:c7:
                    5d:24:ff:8f:5f:47:bf:08:2d:f2:11:89:ce:4c:4b:
                    56:93:aa:f3:af:73:d3:42:f3:16:80:a3:0d:76:77:
                    95:97:b2:e8:68:a9:b7:5a:3f:1e:6a:d8:21:29:1c:
                    63:54:38:6f:c0:2e:20:03:dd:ff:e1:62:17:45:7e:
                    db:a8:e8:21:2e:c3:a4:9b:7a:a6:98:dc:61:a7:d5:
                    44:e8:68:d9:1a:6c:98:90:1d:5f:b5:76:ea:41:91:
                    1c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:54:7D:53:5E:66:D4:87:14:E7:59:B3:E4:83:71:47:0C:75:10:F5
            X509v3 Authority Key Identifier:
                keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:04:42:b0:d9:00:e3:8e:56:44:27:23:98:11:60:f6:41:db:
         56:e2:cb:ab:60:dc:e1:11:95:fc:a8:3e:47:9a:80:cc:03:85:
         4c:5c:e1:d5:ec:16:79:6f:c7:91:78:a8:62:89:da:30:ef:28:
         61:21:38:90:ba:8b:cf:35:7d:90:5a:f1:8e:11:5e:b8:32:67:
         9e:09:15:b2:41:2b:a1:dd:2f:57:43:e7:55:25:4d:c2:63:2b:
         9b:1c:32:d9:73:69:bc:37:3a:39:69:3f:c9:0d:f4:65:be:c9:
         b9:c3:57:97:ac:26:bd:1d:f2:c8:25:11:e5:58:be:b2:cf:1b:
         72:31:20:a1:97:eb:28:2f:65:2d:06:d1:3a:25:ae:ad:43:a8:
         ee:5c:c4:7d:bc:9c:1b:76:e7:46:a1:4c:cc:2d:78:3f:3b:41:
         8f:a6:48:92:60:36:06:75:4b:9d:5d:1e:57:f0:c9:17:b8:77:
         df:74:0f:51:ba:98:e2:d0:e1:2d:6f:e5:e4:02:0c:23:88:4f:
         94:16:30:96:9e:15:3f:c3:92:b9:b4:14:82:44:ac:24:fb:af:
         1d:2a:dc:42:41:cf:7f:c8:a0:96:b4:17:8b:07:8b:63:3d:ba:
         8a:e5:0c:96:d2:a3:09:55:65:bd:48:78:83:b8:70:7e:c1:4b:
         88:ab:48:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:02 2026 by rpki-client