Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
File:                     08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json)
Hash identifier:          IA8b6o3Bx/AqIPCpaca/0SJXonNY7IGEGmKi8gZKb9U=
Subject key identifier:   A5:9B:6D:7D:45:9E:37:8E:34:05:CE:ED:58:D2:D6:5D:B1:41:98:6D
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Certificate issuer:       /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial:       01A0005D1714478E039E1EBE76B63E3A54D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
Manifest number:          1311
Signing time:             Fri 14 Aug 2026 13:01:35 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:35 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:35 +0000
Files and hashes:         1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: 6Dp52UCtgagQdaQBqI8IMB7vx+7oFJLqHnIM90q1xRI=)
                          2: 8iiGHlsOJWwsrr4dYEu2DAJmDu4.roa (hash: 8N8stGdhMpNHOzJEakrzgY5qXFCD32clBj0A+s284Zo=)
                          3: AFteCS1Hd7e6qi02RMRsgw9AZFI.roa (hash: gi5cvPOf8jzBgqQP0MjAWXH2Iw3GEPq9YJDLxWTBGA8=)
                          4: EsIWvzYNxFeMPUFmjBH6kTpjbB0.roa (hash: 9ZtPQ0L/4UvcfpXOzs0mWSnfUX+7UiuSsVqPpiFMuzI=)
                          5: NYre9NG9YeEOV-9DADYBR1_ANFc.roa (hash: SGio3sReojeOyDGlNC4y1GQcfv+IKwO1tdbB5z6Ax9c=)
                          6: ilxsUka29LSmxhagYYgOUwx9G1M.roa (hash: Z+faE599Aw5TvsDGU85PKGJH3ruym0pUbib3gVDAVFE=)
                          7: ur620Y0Jnk61OHeYYoTBq--EZKE.roa (hash: OtNM19zTl3crChLyF+XGQsp+urHf9QrZvH/kX/2ejmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5d:17:14:47:8e:03:9e:1e:be:76:b6:3e:3a:54:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
        Validity
            Not Before: Aug 14 13:01:35 2026 GMT
            Not After : Aug 15 13:01:35 2026 GMT
        Subject: CN=a59b6d7d459e378e3405ceed58d2d65db141986d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a7:2c:4f:6e:d3:3f:a9:a6:8b:a5:14:5b:2c:
                    d2:b7:d8:de:4c:31:63:44:28:96:2c:ef:e2:1e:db:
                    ae:d7:7f:00:a7:4c:cd:f6:91:24:97:8c:b3:6a:da:
                    32:bf:92:d1:1a:e2:a7:d8:a4:a5:0a:25:8f:0b:b3:
                    40:f2:fb:04:30:df:f4:39:6d:62:d9:a9:1a:c0:d9:
                    27:bc:e3:89:de:3f:9b:a8:5f:86:50:75:6b:3b:28:
                    b9:19:95:df:4e:33:98:b8:aa:57:ba:e7:61:5f:be:
                    37:7f:76:fc:3f:a1:0c:55:5a:79:04:99:25:5c:bd:
                    df:d6:4f:09:97:41:53:f4:63:ec:55:eb:6f:21:14:
                    e5:26:09:e3:eb:77:5c:7b:85:ef:93:94:cf:19:9a:
                    0a:8b:7c:dd:43:a5:f6:84:e8:11:e4:da:dd:11:8f:
                    c5:18:9a:6c:ff:55:53:3a:db:6b:ca:34:4f:fd:89:
                    b6:21:a3:a3:3b:49:44:45:e6:69:dc:94:8b:bd:13:
                    26:64:b0:6f:e3:b1:b6:c7:58:da:95:c3:4c:0d:95:
                    dd:c7:90:fd:19:de:60:5e:67:31:dc:49:43:28:8b:
                    16:d7:4a:fd:f5:0c:d7:c1:be:64:ca:8c:ab:12:69:
                    27:25:43:47:d2:9f:8d:4c:c9:6d:74:7e:5f:e6:f5:
                    b8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9B:6D:7D:45:9E:37:8E:34:05:CE:ED:58:D2:D6:5D:B1:41:98:6D
            X509v3 Authority Key Identifier:
                keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:69:3d:99:7d:ec:10:14:ce:fc:0c:64:0d:e5:56:21:1c:d0:
         a9:73:32:b5:32:e6:97:f2:c1:0d:b0:0b:c0:9d:bd:a0:a2:d9:
         0a:25:49:1a:6d:d7:28:5b:26:81:a8:ba:7a:2c:e7:80:de:a7:
         5a:a8:77:d0:e3:65:1d:85:bd:a9:29:89:4e:cc:98:1a:a6:f7:
         95:c8:9b:96:3e:15:50:06:4f:46:30:81:ab:fa:32:de:66:66:
         3b:d8:52:34:27:60:d6:a7:07:ed:23:56:1a:d9:32:0d:83:de:
         c8:70:e2:51:fb:42:65:e1:f2:32:3b:85:6d:99:4b:f6:86:76:
         98:2f:b2:ba:c8:8e:30:bb:61:36:a1:75:fc:38:7a:99:6b:e9:
         74:8d:f2:60:93:2c:7a:34:0d:f8:c1:2c:2b:b1:49:88:d2:8b:
         ac:9d:f1:f5:62:a3:d1:a3:ce:26:8d:78:94:49:83:eb:98:3d:
         da:d1:98:81:e7:72:23:13:00:b1:d5:78:70:26:d9:fb:c1:57:
         60:58:0d:59:dd:d7:00:8f:15:6c:da:2b:07:e0:ff:eb:07:a4:
         45:82:eb:af:15:f5:38:c6:a0:89:63:e7:02:7a:ad:87:42:cc:
         41:9f:df:b0:48:f8:28:b0:cf:ad:91:59:9e:2a:16:c8:fc:b7:
         da:c6:a1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:27 2026 by rpki-client