Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
File:                     8ppplYAYXWUQAV4dLKGe_0NkHtw.mft (raw, json)
Hash identifier:          96nHjkCoQh25f2GSwOFy+c+spxq99OWHa4ERDv6o+eQ=
Subject key identifier:   F8:32:71:64:1E:0C:40:97:E0:37:25:0D:B7:8B:87:79:65:07:C2:72
Authority key identifier: F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
Certificate issuer:       /CN=f29a699580185d6510015e1d2ca19eff43641edc
Certificate serial:       01A00093F644DCF5141059672ED1095DC531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
Manifest number:          0C3C
Signing time:             Fri 14 Aug 2026 14:01:31 +0000
Manifest this update:     Fri 14 Aug 2026 14:01:31 +0000
Manifest next update:     Sat 15 Aug 2026 14:01:31 +0000
Files and hashes:         1: 8ppplYAYXWUQAV4dLKGe_0NkHtw.crl (hash: ODSteQlwop1Iga1RQ7ZGJnYqw1BYNw1cWoiumfOz5Sc=)
                          2: Y3IZ9qCwUd5F2pR3sNX6lIyY6Pw.roa (hash: LV0AUIrFJfTCffSGhCZkNnJY82iWH8kCbOJwGo9wRiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:f6:44:dc:f5:14:10:59:67:2e:d1:09:5d:c5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29a699580185d6510015e1d2ca19eff43641edc
        Validity
            Not Before: Aug 14 14:01:31 2026 GMT
            Not After : Aug 15 14:01:31 2026 GMT
        Subject: CN=f83271641e0c4097e037250db78b87796507c272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:24:cd:85:56:20:04:4b:8f:01:a7:73:19:10:
                    b6:c4:04:23:15:5c:90:b5:23:ad:a5:df:62:9e:e3:
                    96:aa:09:08:ed:c3:f0:0a:7d:59:9d:1a:19:a8:1d:
                    4d:ab:f4:a6:bc:df:ab:6e:c4:02:1f:f1:49:99:30:
                    bc:cc:ba:73:22:ee:aa:55:31:45:3c:41:3c:5f:10:
                    f4:da:d7:9f:62:c5:b8:32:08:ca:ee:14:fb:ff:6e:
                    58:89:c9:98:be:ae:b5:4e:33:c6:26:b2:0e:1a:af:
                    28:9f:f2:f2:a6:a8:a7:1e:d9:9a:8b:76:4c:8c:99:
                    c1:82:a1:b8:de:4b:db:fe:ad:1b:d5:3d:94:16:36:
                    db:aa:84:4b:f1:c7:17:b2:25:7e:dd:bb:d5:9a:99:
                    8a:4f:6a:38:72:0a:32:55:b1:2a:bc:a4:7f:1c:cf:
                    e8:4a:44:43:be:78:0b:67:7b:06:7a:8a:b8:38:95:
                    03:44:63:a2:82:74:c9:3c:96:6a:85:cc:67:52:b5:
                    43:39:8d:57:8c:f7:95:b7:13:a2:84:97:ac:9f:cd:
                    ba:3d:2e:5a:75:fe:b1:d6:1d:1f:70:0a:ad:86:69:
                    93:3e:47:fd:38:82:9b:98:5f:67:3f:41:b5:8f:e9:
                    b1:22:17:99:ff:6b:33:e9:39:1b:94:14:f0:b2:4c:
                    63:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:32:71:64:1E:0C:40:97:E0:37:25:0D:B7:8B:87:79:65:07:C2:72
            X509v3 Authority Key Identifier:
                keyid:F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d7:06:df:07:db:87:36:89:9c:78:04:4f:28:1d:b8:00:ce:
         1d:18:b1:58:66:d6:4e:d8:86:c8:3b:b1:80:af:2c:b0:09:60:
         24:62:1e:fe:d7:d0:e3:3e:35:f6:4f:ad:32:dd:6e:1a:56:01:
         a6:fd:2b:d4:c4:67:3f:55:0f:14:be:86:07:ed:50:40:14:ce:
         aa:1c:0e:cc:b3:0c:2b:3d:4e:7c:34:66:42:b8:64:04:d6:b2:
         8a:b3:7f:51:7e:41:14:3b:43:7a:91:91:91:48:dd:6e:05:29:
         2d:5a:60:b9:cc:a0:1d:f8:d7:73:92:f7:49:bf:51:31:1a:0a:
         09:98:08:30:a2:bc:16:b6:5b:39:eb:4a:23:be:c9:4e:90:39:
         7a:e5:43:6f:30:64:40:93:a9:ae:d8:8d:f5:87:cc:da:51:50:
         ac:71:96:fd:d3:ed:2e:51:f7:7a:22:43:ad:a2:ca:eb:1c:dc:
         40:75:8b:bd:96:15:9f:71:d1:27:58:c3:dd:b6:4e:e5:50:ae:
         c2:5c:a0:bf:bf:b0:1f:fb:a6:30:9c:b3:e5:06:e3:0f:33:70:
         ce:9e:67:da:fd:bd:38:b8:e7:b6:d4:6d:b2:bc:a9:34:9c:9b:
         7b:34:4c:d5:89:83:87:18:ef:a1:b7:3c:63:ab:fe:dc:a5:22:
         d0:2c:5c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:21 2026 by rpki-client