Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
File:                     0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft (raw, json)
Hash identifier:          MMnFBN5abkSAkaUxkJJvrz/sCbaw31Tp1a0/1yuV7Wg=
Subject key identifier:   54:08:0A:86:A9:B2:06:A1:C0:DD:D3:B3:B2:F1:9D:96:40:61:36:81
Authority key identifier: D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
Certificate issuer:       /CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Certificate serial:       01A001020F6B2573915A2210CCDAA2B997ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
Manifest number:          16CF
Signing time:             Fri 14 Aug 2026 16:01:47 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:47 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:47 +0000
Files and hashes:         1: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl (hash: 9DQOxBUqT05gdH2v4QWQ8EF6vRCW9iT0RQIXMdfUSfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:02:0f:6b:25:73:91:5a:22:10:cc:da:a2:b9:97:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
        Validity
            Not Before: Aug 14 16:01:47 2026 GMT
            Not After : Aug 15 16:01:47 2026 GMT
        Subject: CN=54080a86a9b206a1c0ddd3b3b2f19d9640613681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:29:e6:49:2e:c4:a6:f1:d8:bb:1b:16:98:2f:
                    4a:0c:b1:bc:60:21:6a:53:0b:ef:d7:4d:82:6f:d0:
                    2f:21:9f:22:dd:b6:05:0a:9e:d2:bc:cf:f4:8b:3c:
                    cd:34:e7:11:75:99:b0:39:ed:82:73:aa:4f:51:48:
                    3b:b5:00:e9:46:ec:96:e5:9f:bf:39:71:3e:5a:91:
                    fb:88:a1:60:2a:fa:71:f3:0b:f3:22:0f:40:37:06:
                    41:a8:4c:80:85:7d:4b:de:82:af:e6:2a:90:4f:7b:
                    6a:a5:3f:87:35:c5:e7:db:48:06:0c:6a:62:e7:59:
                    be:5c:bc:69:c9:2d:d4:e6:c5:60:80:00:88:b7:62:
                    bc:87:77:fc:48:c8:a6:5d:f1:6b:3f:4c:9c:bb:66:
                    c3:b9:5a:e7:a2:10:1f:ea:16:3d:e9:7e:b0:7f:96:
                    a5:7d:47:06:99:d5:e3:11:62:4d:44:87:68:90:3f:
                    f2:50:4f:5a:65:db:92:0f:e2:81:46:a5:6e:70:cd:
                    ed:24:87:4d:2c:ae:78:53:6d:a4:8c:54:5b:8a:2c:
                    9a:b5:26:a2:bb:27:1d:b7:4b:1b:f3:74:93:3d:d7:
                    eb:ad:f1:f2:1f:b8:b1:de:5c:2b:6e:20:25:2c:26:
                    94:9a:e2:43:54:39:0d:c8:c3:b4:2e:91:f1:7f:8e:
                    31:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:08:0A:86:A9:B2:06:A1:C0:DD:D3:B3:B2:F1:9D:96:40:61:36:81
            X509v3 Authority Key Identifier:
                keyid:D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:28:16:40:df:a7:39:b9:43:04:45:58:85:c9:71:19:c1:57:
         4f:dc:40:a9:e4:c3:47:25:9d:6b:c1:a0:a4:85:52:4f:62:8b:
         1c:7b:f6:6f:90:85:f4:ea:68:33:18:f6:80:89:ec:c6:43:aa:
         51:1a:a9:d8:75:ef:df:a3:77:4c:b4:ce:37:85:e6:b0:d0:67:
         9d:f3:d0:b6:f4:b7:41:67:ad:d3:a3:03:ea:88:0f:6f:78:0e:
         75:8a:cd:af:a3:fd:94:a0:aa:b3:63:e7:2f:80:f3:55:16:d0:
         90:b5:12:94:54:99:4a:83:14:42:48:d6:fd:af:26:22:b7:1f:
         f9:01:e6:85:42:b5:1b:a5:be:33:ef:f0:48:31:24:ee:af:c1:
         e2:60:34:52:61:fc:7c:9e:a3:f7:38:df:36:58:16:1d:bc:84:
         1f:8c:8e:2c:37:17:d4:24:fe:6d:39:ba:92:9b:ea:41:a6:1b:
         81:e5:39:0f:39:bb:7b:85:fe:a2:e3:cc:79:dc:17:02:26:7a:
         41:43:c6:de:d4:b6:be:e6:4b:57:9a:48:52:93:bc:02:82:ff:
         20:7d:f3:c6:30:eb:a5:79:91:e9:2b:16:80:9b:91:28:a6:99:
         e4:00:0c:7f:d1:55:cf:bf:ca:4c:d2:66:24:e2:3f:ec:21:f6:
         36:dc:3a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:04 2026 by rpki-client