Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
File:                     8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json)
Hash identifier:          LPFFFGewcs6uULchIC+wUZfialHIJdPvfN8TjeIypIo=
Subject key identifier:   98:D5:EC:40:0D:3E:E8:1A:8B:60:3D:B9:25:BD:7C:B7:47:4B:14:0A
Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
Certificate issuer:       /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Certificate serial:       01A001DD7ACE2261BBFCC065B7C395226A1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
Manifest number:          1A03
Signing time:             Fri 14 Aug 2026 20:01:27 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:27 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:27 +0000
Files and hashes:         1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: YWZOlCQvgf3tnQErt/qNFz1YWZNAqlHGl/us+YnpZI8=)
                          2: UFHh3vV19ELev_hBQqmjdsJvdRk.roa (hash: xSmonOfsBVxyyfdFAzmkSxeWMqfBkDOi/XXRvC/iB2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:7a:ce:22:61:bb:fc:c0:65:b7:c3:95:22:6a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
        Validity
            Not Before: Aug 14 20:01:27 2026 GMT
            Not After : Aug 15 20:01:27 2026 GMT
        Subject: CN=98d5ec400d3ee81a8b603db925bd7cb7474b140a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:bc:1e:d3:89:68:4d:c8:7a:0c:5d:71:97:e1:
                    ab:ab:94:9b:11:05:d1:e8:e9:cc:c9:06:b1:5b:e4:
                    6b:37:b7:c4:94:f7:86:37:66:75:66:91:17:d1:94:
                    f6:3f:17:61:c2:fb:5b:46:1a:52:6c:a9:b6:73:9e:
                    80:f3:dd:f6:c4:64:40:5d:e6:47:e3:13:f0:97:97:
                    b9:a6:a5:0e:b6:35:a7:90:e1:d7:79:0c:b6:f5:31:
                    92:fb:b7:01:1d:3d:1b:ab:09:1f:c5:c1:c1:fd:b4:
                    89:ca:f5:f4:6e:e8:9b:2c:8f:2b:6b:2f:bb:3c:6d:
                    bb:b6:f6:30:3b:81:38:ca:72:fe:ae:59:80:26:78:
                    03:9b:03:0b:fb:ba:9e:c0:11:0e:1c:14:f9:f4:0c:
                    b4:ae:8a:98:e4:5a:e3:41:63:bc:0f:46:bd:95:1a:
                    98:ef:d3:c4:c8:ca:00:c4:fa:97:7b:5e:d4:76:cd:
                    80:67:c6:1d:01:ff:eb:3b:78:d3:31:f1:69:fa:c6:
                    68:ed:e8:85:de:60:6b:06:86:bf:a7:59:51:96:f0:
                    ed:bc:ce:20:73:99:9f:a1:2f:6f:5a:cc:36:7b:b8:
                    47:89:41:e8:27:2f:dd:59:11:54:3b:ba:07:f5:d3:
                    2d:ae:03:8c:3c:fa:1b:b7:6f:e6:88:a1:26:aa:d2:
                    c3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D5:EC:40:0D:3E:E8:1A:8B:60:3D:B9:25:BD:7C:B7:47:4B:14:0A
            X509v3 Authority Key Identifier:
                keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:05:27:23:56:70:d0:93:ca:93:5b:fb:9b:bc:a8:9d:5a:96:
         d9:dc:d7:7e:6d:d4:70:29:26:ea:da:41:51:0f:27:e2:d0:cf:
         4b:a6:39:1d:50:45:a5:ea:29:e6:1e:f8:bc:3a:c3:ad:b3:65:
         0b:37:8c:47:bf:f8:30:ed:1d:2e:c2:99:a5:89:4a:4a:8b:fb:
         bb:5d:a2:dd:27:63:0d:a7:5a:2d:1c:b8:6f:58:68:fe:53:30:
         d9:47:29:56:15:3f:02:ea:1d:a3:bd:c3:40:b5:02:ec:90:68:
         5c:a1:99:0c:79:b5:13:c9:72:3d:a1:31:3d:26:eb:b8:90:56:
         50:33:bc:7a:61:d1:b1:75:a6:e6:78:06:28:52:6a:ad:7e:79:
         40:24:3e:02:81:47:68:20:d2:a9:cd:24:fb:1e:fd:d6:9d:0a:
         7d:20:9a:0e:0f:71:50:0e:71:69:b5:d9:0a:15:f6:3a:e4:ef:
         d4:d9:b3:87:ba:d5:ef:c7:a2:3e:80:c8:f8:3c:cc:a6:f4:8d:
         d6:75:e4:24:24:1c:4d:00:8c:70:e2:62:56:64:b8:02:7a:5c:
         98:a1:b8:7f:a1:f3:5f:41:d9:4e:98:2a:4b:4b:6a:fb:13:08:
         a9:02:29:f5:7d:5c:29:70:fc:0b:c3:55:f0:5b:26:dc:c8:94:
         67:e3:47:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:11:03 2026 by rpki-client