Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
File:                     08YXj7A0kFEwrwzhzSdRVPK1m3g.mft (raw, json)
Hash identifier:          snvvyqRlPwOn8ikGsOY619W99Z4r/pnqcRgjf5HDwmw=
Subject key identifier:   A4:38:9F:27:D4:83:5D:0C:D2:28:31:8D:8F:E4:1D:74:EF:C7:2C:78
Authority key identifier: D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
Certificate issuer:       /CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Certificate serial:       01A001018404DB6A7A2FC60BD50B9D6A5C50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
Manifest number:          1A03
Signing time:             Fri 14 Aug 2026 16:01:11 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:11 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:11 +0000
Files and hashes:         1: 08YXj7A0kFEwrwzhzSdRVPK1m3g.crl (hash: A9g8tilZlNnrBsh617UJOxo+bJr688smINxK6hcPpO4=)
                          2: TkVIENg5yxh_iBn69iwP-Gzs7M0.roa (hash: XN4b40QKJDQSEm8B3f99MTAbjS4H9rL0ddzhBtlCaKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:84:04:db:6a:7a:2f:c6:0b:d5:0b:9d:6a:5c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c6178fb034905130af0ce1cd275154f2b59b78
        Validity
            Not Before: Aug 14 16:01:11 2026 GMT
            Not After : Aug 15 16:01:11 2026 GMT
        Subject: CN=a4389f27d4835d0cd228318d8fe41d74efc72c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:83:bf:2b:4a:90:b1:88:d8:4f:31:76:23:
                    03:71:a1:ea:f4:0d:57:c0:77:81:07:19:1e:32:af:
                    25:90:d1:b0:64:62:25:ea:42:b9:1c:a3:e5:89:1b:
                    b1:3b:94:ec:23:82:df:92:24:49:b4:64:f9:db:5a:
                    94:33:61:fa:d8:5d:f4:06:35:e4:06:71:46:7d:08:
                    4f:80:91:d5:6d:a1:c4:53:33:b6:7c:08:56:f8:b0:
                    78:b3:ac:c8:e3:84:b3:28:11:1c:ee:0c:5e:2a:7a:
                    ab:bb:fa:70:50:94:ff:a5:14:50:b9:5a:4d:5c:13:
                    ce:e1:d7:4c:6a:41:9e:a7:c8:de:1d:7a:46:d5:eb:
                    27:df:58:25:b5:06:88:1a:1e:a4:27:97:81:d3:86:
                    71:a0:f6:de:6b:cb:df:49:73:cf:00:3f:7f:fb:b7:
                    66:83:1f:00:2b:17:b4:da:c0:bc:90:89:52:0e:1d:
                    b9:d5:47:e6:ed:c7:eb:59:b4:ee:72:10:73:3b:c4:
                    a2:c6:8f:8d:68:04:51:09:86:aa:4e:d2:2d:93:2a:
                    fc:96:33:20:40:4a:a3:25:1c:86:a5:7e:24:a2:0a:
                    8d:22:df:0e:72:86:b8:82:72:d2:13:7a:3f:b4:0c:
                    11:96:2c:9c:ef:0d:ed:a0:7b:43:21:ba:92:bc:c0:
                    0d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:38:9F:27:D4:83:5D:0C:D2:28:31:8D:8F:E4:1D:74:EF:C7:2C:78
            X509v3 Authority Key Identifier:
                keyid:D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:8d:de:73:5c:59:c0:d8:97:4e:16:de:4c:6f:17:f7:79:f0:
         8a:97:8f:0a:87:07:25:4f:cc:c8:11:50:af:f7:89:c3:97:f1:
         3e:0c:e2:e4:da:f2:27:40:19:1b:a0:4a:c3:b2:0b:2e:2e:bc:
         cf:aa:47:42:1a:16:af:05:74:8b:92:57:5f:be:79:a0:4b:e9:
         a8:48:d8:16:08:c8:cd:94:66:b6:d0:27:a7:c3:5d:68:aa:e0:
         56:0b:6e:0d:fd:6e:82:64:29:8c:24:80:c6:79:69:5d:d8:56:
         cd:60:28:d0:93:de:89:ad:d1:1c:20:c9:07:d6:7a:a7:fb:6f:
         6a:cd:54:39:b8:4b:08:19:c2:f2:d2:a9:b9:58:fe:72:a9:ca:
         d3:6f:84:91:02:d3:cb:e7:ce:be:0a:4e:40:ad:c9:00:8f:ca:
         26:e7:17:de:73:a6:c1:f8:50:14:af:b6:eb:28:c8:aa:95:15:
         e6:c5:d1:9e:00:7f:57:24:a4:da:b3:ef:16:b6:15:e1:7d:3c:
         a3:6a:e1:a3:62:47:ac:c0:c3:b1:05:6c:99:be:35:9f:5b:5c:
         54:ab:c9:28:a6:77:b5:85:08:38:a3:36:e3:32:96:29:f5:bf:
         c2:6e:83:69:c5:20:7d:b1:4e:45:12:52:9d:2a:6b:c4:75:3f:
         12:55:0d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:40:03 2026 by rpki-client