Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
File:                     0ur89N6SC5zmRdbmlt8IqosFUZs.mft (raw, json)
Hash identifier:          DJG3STCT18eYxzIHux0ZXGXamJKm2nRQdhxLyIHunig=
Subject key identifier:   11:F9:26:33:1E:6F:43:8E:2B:DE:A1:32:75:17:BF:07:8F:DC:B1:B5
Authority key identifier: D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
Certificate issuer:       /CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Certificate serial:       01A001DD69A6B6B90F33DEA6994F74664C7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
Manifest number:          1702
Signing time:             Fri 14 Aug 2026 20:01:22 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:22 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:22 +0000
Files and hashes:         1: 0ur89N6SC5zmRdbmlt8IqosFUZs.crl (hash: +Xh4LzEtSZlmUOIYHL9JNW1ie69skV3rjuFXbdRyt9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:69:a6:b6:b9:0f:33:de:a6:99:4f:74:66:4c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
        Validity
            Not Before: Aug 14 20:01:22 2026 GMT
            Not After : Aug 15 20:01:22 2026 GMT
        Subject: CN=11f926331e6f438e2bdea1327517bf078fdcb1b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7d:36:50:82:a4:75:21:43:46:c2:c5:29:df:
                    31:5d:56:6e:e6:50:54:bc:c2:34:c5:a9:e9:ed:a8:
                    9e:64:05:17:d2:97:e0:0a:b1:bd:03:07:1e:9d:e7:
                    13:73:17:44:13:5d:33:fc:85:ed:c9:3f:39:7e:8c:
                    76:23:d6:7e:71:d9:c2:35:1e:1f:dc:36:67:a4:6d:
                    c5:24:3a:2d:9e:10:31:06:06:9d:f2:84:70:7e:f4:
                    cb:08:25:58:77:b2:6c:8b:46:5e:54:4f:02:28:a7:
                    61:e4:83:7b:f2:4c:5a:f3:7d:19:8b:f0:d7:36:73:
                    41:b6:62:4b:62:4d:bc:4b:27:97:e8:a2:7e:40:38:
                    19:64:fa:db:ea:1c:33:98:d8:32:83:73:9a:38:c0:
                    9d:4d:fa:45:8d:b5:d4:fc:20:eb:bd:08:4e:06:0c:
                    52:59:60:18:e1:53:51:b8:12:f1:06:1c:ed:d6:c6:
                    00:d1:df:9e:8f:6d:39:6f:7a:97:0f:98:f5:97:c2:
                    26:01:2c:d1:94:32:63:f3:e9:cb:b3:33:a7:dc:74:
                    75:74:07:c1:0d:3b:fb:57:03:fd:7c:15:89:44:d7:
                    d8:3e:07:79:5c:45:5b:f3:9b:60:93:06:f7:fe:97:
                    eb:4e:3d:4e:86:8f:b9:c0:9d:9a:00:66:8c:c6:35:
                    80:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F9:26:33:1E:6F:43:8E:2B:DE:A1:32:75:17:BF:07:8F:DC:B1:B5
            X509v3 Authority Key Identifier:
                keyid:D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:6f:a6:6d:92:f6:8a:eb:63:95:1c:a7:15:c2:b1:6a:36:e8:
         e6:89:e4:d2:26:c6:a0:10:8e:ba:33:c2:7f:02:d7:a7:5f:da:
         19:bb:3f:3b:ad:ac:16:d3:12:3a:d6:6f:a1:f6:a9:eb:b9:ed:
         dc:3d:7f:67:70:43:1a:53:aa:40:e6:2a:f8:c8:29:05:64:12:
         cb:cb:9c:02:c4:86:e8:ce:d0:6a:7d:be:67:19:f3:35:43:50:
         62:f0:39:e6:83:8b:21:07:b4:4f:98:e5:d0:a8:e6:28:38:fb:
         5f:fc:b6:99:58:e6:d8:4e:32:02:7d:38:2e:ed:45:01:fa:ca:
         ea:f3:9d:26:6b:43:5a:6d:80:ee:04:0d:20:40:e7:31:29:fe:
         91:92:6e:36:ab:d7:2e:33:a0:cf:f4:d6:fb:c0:ff:ce:13:d0:
         75:0c:03:ea:58:da:f3:42:5a:58:7a:66:04:7b:26:81:9f:08:
         83:74:91:d8:e5:25:2d:c2:d3:e3:f5:21:01:a1:8f:30:8a:cb:
         69:90:b3:b7:3a:b1:b4:78:d0:e1:0a:43:c9:77:b4:65:24:8f:
         e2:d3:23:45:ff:ae:9e:df:c3:8b:a9:ef:28:11:6f:f8:d9:e9:
         1e:da:65:8a:18:4b:73:4a:dc:b4:b4:cc:b6:05:58:0f:5c:9a:
         04:b2:c4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:32 2026 by rpki-client