Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
File:                     9h0r7udUOkGpCKGgHs_AqHJqOuI.mft (raw, json)
Hash identifier:          j4iEImCfsy4kO7gJrUwB2Nx7fqrnOuif+557X5HUrqQ=
Subject key identifier:   97:E2:A1:37:54:53:E0:CA:43:67:BB:26:F2:C9:5E:B2:82:C4:C6:66
Authority key identifier: F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
Certificate issuer:       /CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Certificate serial:       01A00213C0F9F0B52BCA7C9A1FA2ECABA74D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
Manifest number:          0EA2
Signing time:             Fri 14 Aug 2026 21:00:44 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:44 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:44 +0000
Files and hashes:         1: 9h0r7udUOkGpCKGgHs_AqHJqOuI.crl (hash: swpX1leXNZGvCGHaEFc5ZezVuUY9L37GKIAqClvbTvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:c0:f9:f0:b5:2b:ca:7c:9a:1f:a2:ec:ab:a7:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
        Validity
            Not Before: Aug 14 21:00:44 2026 GMT
            Not After : Aug 15 21:00:44 2026 GMT
        Subject: CN=97e2a1375453e0ca4367bb26f2c95eb282c4c666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:66:fe:8a:5d:33:f7:60:f9:26:43:f3:84:83:
                    fd:93:ec:d6:5e:98:2a:26:b2:96:d7:e9:cf:b5:b6:
                    f0:22:06:d3:e2:2f:6e:5e:59:c5:98:0e:18:d2:7f:
                    d2:51:7d:a8:85:0a:c7:cd:ab:3e:98:21:8d:a3:16:
                    18:e3:e2:82:74:3d:b6:33:d7:59:43:c3:fc:1a:c3:
                    6e:cc:22:79:72:99:38:d4:d1:a5:00:c0:aa:c6:be:
                    ff:6d:78:ea:4d:55:39:cb:e2:61:d5:31:24:3f:8d:
                    e3:83:fe:48:4a:ba:58:2e:a6:39:cc:33:fd:6b:3e:
                    5b:56:85:56:7c:12:a3:fa:89:42:f3:ed:d7:e3:44:
                    36:8b:59:70:5f:13:a2:81:2b:51:fa:3f:3d:5c:90:
                    11:63:6d:43:54:0e:a4:eb:e1:95:6f:c8:45:c1:98:
                    91:37:54:ba:31:b8:dc:2b:95:df:57:51:dc:51:7a:
                    18:8d:98:dd:ec:d5:10:9a:ad:ec:8c:46:a0:05:f2:
                    af:ee:7b:3c:18:58:33:13:6b:45:f3:85:21:66:76:
                    7c:e0:95:83:52:ca:8e:08:d0:5e:64:4e:22:50:aa:
                    a7:1f:84:cf:b8:fc:88:a7:a4:7c:e7:09:58:fc:d1:
                    db:ed:53:a3:39:cc:32:b9:d2:f9:52:74:3c:17:7a:
                    3a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E2:A1:37:54:53:E0:CA:43:67:BB:26:F2:C9:5E:B2:82:C4:C6:66
            X509v3 Authority Key Identifier:
                keyid:F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:17:3e:a9:d5:3f:bc:78:96:a4:9e:ce:9c:08:74:af:73:b7:
         d1:fe:3f:0f:c7:f7:d8:bc:b8:fe:bf:02:99:f5:07:b0:0a:ab:
         8f:6e:38:da:f8:44:45:f3:78:e2:12:cd:8d:f8:d5:62:fe:e5:
         1f:d7:8c:63:11:d8:02:01:df:f5:e8:c5:9e:48:8d:68:f1:df:
         b6:60:12:ea:29:9f:dd:59:59:e3:89:d0:d9:c4:23:fa:10:2d:
         e4:9b:dc:c8:b8:5d:2b:39:7e:eb:7e:1d:e6:ce:b1:88:13:e0:
         0c:97:b9:53:8c:ae:31:a4:16:4e:16:de:5c:fd:8e:62:ed:4c:
         46:3b:60:36:60:62:19:27:8e:be:ce:ef:2d:51:61:32:a6:4c:
         a5:fb:e4:16:c6:f5:5b:ac:6c:0d:c2:d8:d6:39:92:80:83:4e:
         5b:24:22:75:00:18:f4:ac:a1:07:49:7e:c5:8e:4d:0c:51:3c:
         3c:33:6d:5c:eb:4f:9f:1b:aa:87:03:0c:cd:58:57:6e:d6:9b:
         c7:e5:23:90:44:ff:4b:b5:1d:26:79:38:bb:26:a2:34:14:9a:
         fc:a8:16:56:28:fc:46:77:07:db:be:af:26:01:9d:db:12:06:
         c8:20:9e:34:a7:1b:c2:12:3a:4f:43:b2:5f:b1:82:04:1b:cb:
         9d:4a:92:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:01 2026 by rpki-client