Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File:                     08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier:          pF2kk/KbYGghzu35vEMLko4UuSZZzBauvO8fFoNFkmM=
Subject key identifier:   52:16:71:49:48:68:46:C6:FA:C2:98:3B:16:FF:B6:8C:DF:69:DF:4C
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer:       /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial:       01A0009311E20BDC0B1B1622873912EEF53A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 14:00:33 +0000
Manifest this update:     Fri 14 Aug 2026 14:00:33 +0000
Manifest next update:     Sat 15 Aug 2026 14:00:33 +0000
Files and hashes:         1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: 4stOF7HiDX2PckD/DmEWK+vgcW9NGFo4FQ4HslgSDhA=)
                          2: kDYFCwOTqCtWju9awtc-WWDQSp4.roa (hash: niu24Rn9CdcANUXflUaTh1yPPLtTi4dexe3GG8dp0NU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:11:e2:0b:dc:0b:1b:16:22:87:39:12:ee:f5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
        Validity
            Not Before: Aug 14 14:00:33 2026 GMT
            Not After : Aug 15 14:00:33 2026 GMT
        Subject: CN=52167149486846c6fac2983b16ffb68cdf69df4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:08:19:bb:ac:f8:24:71:2f:35:5a:df:6a:a6:
                    75:1d:5f:1e:d6:27:49:a8:11:fd:ae:31:5a:94:ed:
                    a7:83:d4:65:c9:76:bd:7f:f9:c8:d3:f1:c5:25:fa:
                    f7:74:30:7b:52:e3:b1:e9:b3:0e:59:2d:56:d7:76:
                    79:a6:1d:4e:1b:27:06:cf:30:3e:ba:3d:0e:b8:49:
                    2c:70:9d:f2:52:9d:8b:0b:b6:1f:79:59:75:50:a1:
                    14:ef:31:52:c4:3c:c8:3a:26:f8:9c:2a:82:7e:0e:
                    a5:a5:1e:af:a0:fb:c4:64:88:5d:c3:4c:f6:8c:f3:
                    a1:3b:f8:68:79:8a:e2:8f:fe:52:df:d4:ac:77:a5:
                    b1:fc:7a:09:f6:b7:36:f8:da:81:0f:4b:23:6b:a2:
                    10:db:52:d0:2a:c3:f4:57:0f:8f:b2:95:a4:59:1f:
                    e3:9f:bf:88:86:ab:4b:dc:d0:c9:be:3f:67:51:53:
                    a7:8c:f8:a0:88:a0:14:ca:23:2d:29:a7:a0:6d:1f:
                    35:a3:1c:02:5e:0a:31:26:3b:15:55:ba:e7:f8:a0:
                    40:ff:bb:40:95:56:a3:3f:d2:4c:fc:b6:bb:24:b1:
                    fc:27:46:a2:4c:49:6a:8f:e7:f8:cb:26:51:2b:8b:
                    c2:23:37:1f:2f:4c:88:ef:f5:a4:de:a3:b5:60:db:
                    a7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:16:71:49:48:68:46:C6:FA:C2:98:3B:16:FF:B6:8C:DF:69:DF:4C
            X509v3 Authority Key Identifier:
                keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:1e:db:a4:1d:8a:83:45:5f:df:38:13:27:a7:f2:78:13:f6:
         17:9e:05:ca:03:b5:58:52:6e:b7:23:0b:39:3a:f7:12:b4:50:
         8a:2b:09:1d:c7:c4:71:26:f6:c1:93:37:f8:18:1f:a3:25:69:
         64:80:8d:b3:da:d0:ad:42:3b:65:31:9c:13:f2:39:e6:fd:6f:
         e4:3f:aa:df:31:99:8d:62:93:56:c1:34:82:9b:74:42:ad:4a:
         43:e9:c1:05:f6:8c:2f:c1:6e:c9:60:25:0d:29:40:c2:fa:fc:
         d6:62:1c:b4:e5:0b:50:c8:e0:9f:fa:a2:07:16:42:80:ad:cf:
         2f:9b:6e:ef:4e:9f:aa:88:37:3b:4f:be:31:9b:50:ee:b5:48:
         ab:d5:98:36:2d:12:46:21:94:03:a2:53:41:86:0e:b4:ba:1c:
         49:e8:06:1e:9e:5a:32:67:33:d0:2a:1d:29:61:93:e6:f0:0c:
         c3:96:3f:d7:57:e3:f1:6b:63:90:5c:60:a8:0a:6b:07:95:5a:
         05:1c:3a:ac:3e:59:4b:21:b9:cf:a7:b5:0b:d7:b7:d5:1f:b0:
         9e:c9:b1:37:d4:32:3a:b7:b3:9b:d4:da:05:b9:80:86:d9:46:
         e2:fc:ee:b8:e1:f5:23:46:04:08:52:f3:b9:41:1f:45:8b:37:
         38:d0:7b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:20:51 2026 by rpki-client