Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File:                     8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier:          lMM5lM8chAv0LbrhNmIwykqzpOD5bpFRsPssdm/FW34=
Subject key identifier:   27:F7:8F:76:B4:21:9C:D8:69:E7:BC:FC:1D:91:E6:F1:FD:2C:54:2D
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer:       /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial:       01A001018D9EA7F3BD3729F9D6EEB835EEEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number:          1736
Signing time:             Fri 14 Aug 2026 16:01:13 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:13 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:13 +0000
Files and hashes:         1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: iK60/HsVmqYJ8fr1dpLucfuc2BRTFrnNmVWYRCDmwYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:8d:9e:a7:f3:bd:37:29:f9:d6:ee:b8:35:ee:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
        Validity
            Not Before: Aug 14 16:01:13 2026 GMT
            Not After : Aug 15 16:01:13 2026 GMT
        Subject: CN=27f78f76b4219cd869e7bcfc1d91e6f1fd2c542d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:30:c8:da:40:3d:04:c3:4a:f5:9f:c3:b2:
                    64:2c:3a:4c:7e:3c:4c:12:82:41:29:be:b7:ca:c9:
                    e1:1f:4d:b9:c9:e3:b4:f8:bc:c6:89:c3:67:c0:72:
                    a3:66:32:8f:42:73:02:7f:63:a6:c3:d5:9a:a9:36:
                    9e:33:77:a0:d1:34:55:89:d1:06:55:12:8a:1f:bb:
                    a4:75:7c:2e:78:81:05:12:1d:13:7a:d5:34:a0:18:
                    54:4f:ea:05:04:3f:c9:d2:dc:fe:7d:62:64:02:96:
                    ba:bd:5d:be:f3:61:8d:d5:82:36:08:75:b5:28:d0:
                    77:0c:98:71:62:c9:75:d2:e7:19:44:04:a5:34:86:
                    44:51:a7:68:ba:2d:08:1d:8c:a4:c0:5f:90:58:7f:
                    af:10:05:b1:b2:c1:3a:2d:a3:3f:55:f0:d5:d3:2b:
                    68:9e:f4:0d:43:ec:ad:9c:58:fb:42:46:61:f2:5f:
                    79:2d:45:60:e8:65:22:f6:72:25:5e:a7:09:ba:62:
                    2a:5e:7b:3b:82:13:cc:66:7d:f6:d8:0c:47:23:b2:
                    4d:c5:df:93:60:38:52:42:e2:8f:57:ea:7f:40:5e:
                    ec:9e:8d:48:ea:71:9a:b5:c3:58:18:d1:ae:6b:f1:
                    d9:5f:81:d8:b0:4b:1b:f4:ba:9f:d4:ec:e2:fd:a8:
                    c6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F7:8F:76:B4:21:9C:D8:69:E7:BC:FC:1D:91:E6:F1:FD:2C:54:2D
            X509v3 Authority Key Identifier:
                keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:bb:e3:57:b5:83:a5:eb:16:82:c2:8c:eb:b0:42:6e:8b:32:
         95:37:81:1c:eb:b8:9b:a5:86:b4:fb:f3:ac:e7:2b:ed:8e:bb:
         87:8d:ca:7b:33:2b:e4:85:70:46:aa:f5:f0:66:f3:6f:23:d5:
         58:a5:c1:be:94:b1:ac:cc:09:9c:c4:2c:11:a5:0c:96:67:6e:
         41:be:3c:18:3e:a6:2f:31:66:95:46:c4:f2:04:5f:b4:27:42:
         a0:74:2d:bc:8d:92:8d:e8:11:49:13:47:d6:d2:e0:81:87:2b:
         1a:f9:28:70:98:a7:1b:4b:3d:9b:f3:2b:e5:13:d7:84:64:81:
         b8:65:ec:2c:43:33:1a:6a:c3:4e:aa:f5:e1:ed:a8:c8:98:f4:
         09:33:e6:0c:19:3f:a9:36:d5:85:37:fd:ea:af:2b:be:02:0c:
         15:65:a5:48:a2:e1:7f:8c:4b:b8:ff:21:f3:b7:c2:37:fc:e2:
         6b:e9:06:09:74:42:7a:1c:53:29:1c:02:b2:34:89:f7:03:da:
         43:9d:ff:12:0b:1d:24:79:12:29:fd:1c:f2:0d:83:75:0c:d2:
         75:ef:b0:0d:02:2d:52:32:7a:ee:68:03:fb:e5:3f:98:10:8a:
         6a:7c:59:9b:b1:56:69:83:ec:02:87:41:75:6b:2a:4f:85:1e:
         de:f5:2c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:59 2026 by rpki-client