Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
File:                     1DsiEwqpp3NCVHaewTv-Fx-h4os.mft (raw, json)
Hash identifier:          4GKCCDAcIVaBc1OVqH/pMErNIJs4yA06CUxIBeYlQIY=
Subject key identifier:   BF:8D:54:B7:E0:0E:D1:51:FF:CC:FD:CF:88:D8:2A:52:56:71:02:3B
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Certificate issuer:       /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial:       01A000CAA6CE00EBBCE9EB37F2F5B1930BB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
Manifest number:          0F0F
Signing time:             Fri 14 Aug 2026 15:01:15 +0000
Manifest this update:     Fri 14 Aug 2026 15:01:15 +0000
Manifest next update:     Sat 15 Aug 2026 15:01:15 +0000
Files and hashes:         1: 1DsiEwqpp3NCVHaewTv-Fx-h4os.crl (hash: 6q33dnfsfOJpWnAuwUnknJcbdamXc3be2+WuKgE5TTI=)
                          2: 3SGaIwhtWysQLWn0sQ-j25aYWzk.roa (hash: 6nFcHI9+JyUVi2ufE9HEixwgDofNaQHxTSquSnDsJV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:a6:ce:00:eb:bc:e9:eb:37:f2:f5:b1:93:0b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
        Validity
            Not Before: Aug 14 15:01:15 2026 GMT
            Not After : Aug 15 15:01:15 2026 GMT
        Subject: CN=bf8d54b7e00ed151ffccfdcf88d82a525671023b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:df:65:d8:e5:99:bd:ba:85:fa:3a:72:d6:23:
                    0b:a3:3e:05:2e:47:6b:fa:4f:a5:0a:82:9a:6c:6c:
                    ce:f6:dc:01:35:aa:54:5e:35:d4:b1:10:b2:85:72:
                    d8:64:9a:c5:d0:eb:75:58:61:b1:85:3f:b3:3a:d9:
                    bf:02:17:a0:89:78:ef:01:c3:5b:60:d8:0e:16:21:
                    bd:8a:cb:79:47:90:2b:40:db:47:66:e4:40:36:5d:
                    ac:81:18:44:f9:6f:d1:fd:70:3c:93:13:65:19:83:
                    c2:29:7e:3f:44:16:0b:7b:cb:94:c4:26:b5:6c:62:
                    e0:70:b3:83:5e:01:52:f5:f6:3b:f9:f7:ae:4b:25:
                    22:29:9a:be:50:8e:49:60:df:d8:21:56:2d:4c:7a:
                    ed:ee:c4:12:ab:e5:de:b5:ea:95:6f:c4:e8:64:62:
                    0d:18:55:76:c5:65:84:c5:69:81:ea:7a:ed:59:fd:
                    78:31:39:a6:0f:84:74:95:c8:02:9e:e0:49:20:bf:
                    42:2b:9d:e0:bc:44:40:5b:0a:1b:51:3e:5d:99:a9:
                    67:0e:18:e9:1b:7c:e2:69:f8:d0:4c:ef:ca:e8:75:
                    80:8b:6d:bb:c0:ac:16:1f:3f:b8:6a:8e:c6:a5:2b:
                    03:a5:39:91:17:86:ce:d0:a9:8a:05:9e:b2:64:ff:
                    d7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8D:54:B7:E0:0E:D1:51:FF:CC:FD:CF:88:D8:2A:52:56:71:02:3B
            X509v3 Authority Key Identifier:
                keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:43:df:8d:62:b6:5a:3d:aa:15:78:db:31:78:46:85:e1:1d:
         7f:7b:37:b8:92:37:f5:4e:c0:c5:d5:fb:e1:8f:44:45:b9:7a:
         2c:f9:fe:3d:2b:28:f1:ed:76:09:34:a1:66:64:68:03:21:39:
         49:9b:9c:be:2e:f7:55:91:28:32:38:c7:f1:0e:7c:76:5a:f7:
         f0:9f:63:92:68:1f:5d:9b:c9:dd:96:19:89:d5:75:3d:1b:02:
         70:c6:f6:48:1c:2e:b5:3b:71:9f:1c:12:eb:34:0b:7c:33:60:
         7b:03:88:df:37:80:b0:9e:2f:95:5a:d1:29:97:f0:ab:ff:3a:
         9d:b3:84:f7:0f:7e:cc:a2:57:28:44:4b:17:9d:e6:38:8d:73:
         7f:1d:c5:f9:2b:c0:9d:1d:d0:ea:71:af:48:d5:68:32:7b:cc:
         56:71:fe:38:b9:96:d9:58:b7:40:83:36:0d:1d:d9:f7:fd:da:
         33:45:70:3a:65:2a:64:f2:7f:cf:94:2e:27:5f:b9:59:26:bd:
         3a:b4:7e:51:e0:54:7b:15:87:01:84:fe:48:10:34:40:52:aa:
         ce:0d:1c:43:9b:0f:10:af:93:06:ed:37:06:b4:2c:ab:34:41:
         6b:1f:83:83:16:2e:66:8a:28:49:5b:bd:b1:9d:65:1e:7b:69:
         73:09:2a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:37 2026 by rpki-client