Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File:                     3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier:          9h7jdVt1GvkYbWWVsAKXdGAmob6L/H4JdwgWXnbcb7A=
Subject key identifier:   E8:B9:56:6E:5F:71:DB:9E:4B:C4:D1:CB:20:08:4D:2A:DD:F0:8C:B4
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer:       /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial:       01A001A64FADFF6EF3ED01771F2880BDA1EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number:          15F8
Signing time:             Fri 14 Aug 2026 19:01:11 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:11 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:11 +0000
Files and hashes:         1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: KZq6FsDFd1zcnPStOGQQZjzZpL3xhUezTR4oDx5OGkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:4f:ad:ff:6e:f3:ed:01:77:1f:28:80:bd:a1:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
        Validity
            Not Before: Aug 14 19:01:11 2026 GMT
            Not After : Aug 15 19:01:11 2026 GMT
        Subject: CN=e8b9566e5f71db9e4bc4d1cb20084d2addf08cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c3:80:48:8d:29:b3:1b:32:1d:01:1d:c0:8b:
                    76:f0:cb:7a:6d:32:34:7c:11:3a:02:8b:a8:87:71:
                    c7:7f:b0:11:21:33:00:ef:7d:b1:ac:af:62:2c:6a:
                    dd:35:a2:52:4f:7f:86:a7:10:79:2f:b5:b6:c1:b2:
                    f0:e0:b6:59:ed:bf:5e:b8:32:cd:1a:cf:d7:c3:cd:
                    95:53:79:77:64:70:9f:4c:78:6a:01:60:5a:b6:1b:
                    7c:17:44:51:93:1f:8e:12:6e:9c:20:d8:8c:b8:c6:
                    e5:e9:07:94:d1:96:be:f8:5a:2d:7c:b1:c4:e2:1d:
                    92:14:66:0c:e9:58:d1:37:22:b6:56:6e:3f:f6:4d:
                    2b:78:9b:b2:d9:61:4f:08:33:97:de:75:e9:49:64:
                    6e:ac:ee:17:dd:78:3e:b5:b5:8c:5e:7f:92:e5:a2:
                    48:da:7a:95:16:4e:09:1e:90:63:02:5b:e5:e1:8b:
                    2f:7e:86:5a:8a:8e:5b:10:5e:c1:18:92:65:ad:93:
                    bb:7b:38:2f:c3:3e:ec:cb:c4:32:fb:b4:f5:da:2e:
                    ac:48:c5:ab:5c:82:6b:9a:e7:90:16:f7:4d:e7:bf:
                    5f:7e:16:a4:3e:d4:f1:07:09:3c:5b:7e:ba:79:55:
                    6c:9b:65:80:36:60:14:7a:ec:a4:95:c4:59:ad:c2:
                    f2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B9:56:6E:5F:71:DB:9E:4B:C4:D1:CB:20:08:4D:2A:DD:F0:8C:B4
            X509v3 Authority Key Identifier:
                keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:eb:f4:24:0c:04:e2:e2:3e:07:80:75:39:14:e4:89:b6:8b:
         bc:d9:84:80:98:c2:77:ab:d8:99:62:da:f4:6a:09:88:6e:ad:
         ec:82:3c:2d:ea:aa:8a:11:94:41:d2:ea:ee:b1:89:48:52:fd:
         88:5a:bb:01:99:0a:45:d3:ba:ca:0a:1a:61:f1:0d:40:78:b4:
         f2:6a:1c:36:32:04:e1:60:19:cc:60:f8:d0:6a:bd:c9:36:33:
         f8:57:b1:c0:84:a6:88:c8:a2:71:90:df:43:3a:b4:97:6e:63:
         34:f4:44:16:7b:a9:10:9c:2d:23:de:f1:ad:e2:53:74:63:16:
         88:c2:11:f9:da:e0:c1:54:9c:97:23:d3:63:c3:44:71:64:38:
         93:20:48:da:0a:b3:d2:5d:54:14:38:3a:19:64:3b:f9:0c:72:
         81:79:29:8e:86:16:8a:3e:78:00:f8:0a:29:41:e3:13:8c:d0:
         3a:b8:35:18:b2:55:a0:ba:82:f0:5a:fe:99:f1:b8:f8:e3:c9:
         c3:cf:a4:93:17:1a:66:b7:91:1e:0a:13:d9:cf:bd:51:b4:f8:
         a1:93:6c:7b:c5:e1:83:ca:b3:aa:8f:60:8e:7e:2b:8b:a1:39:
         bb:9e:d2:0e:6d:1f:71:5c:2b:f3:73:26:68:04:e4:14:06:45:
         64:40:3a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:05 2026 by rpki-client