Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
File:                     80YWUeW-JFCXcpdbqYxw7G7jzXs.mft (raw, json)
Hash identifier:          pdc/QzzOiGqKT+xiNL68iTxYRyPVqiAuZE/qX7hzxnQ=
Subject key identifier:   C3:21:41:82:6F:21:39:57:DD:26:8A:51:1F:9B:0F:68:F4:B7:3C:04
Authority key identifier: F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B
Certificate issuer:       /CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
Certificate serial:       01A03DBA91E615597AA88E05476667C1E237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
Manifest number:          0485
Signing time:             Wed 26 Aug 2026 11:00:32 +0000
Manifest this update:     Wed 26 Aug 2026 11:00:32 +0000
Manifest next update:     Thu 27 Aug 2026 11:00:32 +0000
Files and hashes:         1: 80YWUeW-JFCXcpdbqYxw7G7jzXs.crl (hash: FjXln3Apau+g5kHBXlVK0psaI21dsi3SOsOGadh5c5Q=)
                          2: Qtc_zuFzRUz7J07L37X5qvUUnhs.roa (hash: D6SdWG5JeosyZFAglIkmKFjIaBi039zmz2skeCVDiYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3d:ba:91:e6:15:59:7a:a8:8e:05:47:66:67:c1:e2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
        Validity
            Not Before: Aug 26 11:00:32 2026 GMT
            Not After : Aug 27 11:00:32 2026 GMT
        Subject: CN=c32141826f213957dd268a511f9b0f68f4b73c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3a:e0:80:d6:9a:83:82:c4:88:8b:be:4c:6d:
                    ba:9f:05:b4:6c:96:f3:aa:f6:a8:c0:87:5d:01:7b:
                    27:26:f1:a3:bb:3c:34:29:96:ba:63:73:16:12:66:
                    2b:18:7e:c7:89:81:4a:94:b8:e8:5c:b0:a3:28:b8:
                    f3:b9:3d:48:07:35:22:ad:8c:92:20:1c:98:c8:5f:
                    59:50:64:6a:3b:18:78:7a:82:c7:6d:63:42:ab:72:
                    40:29:eb:d7:3b:1e:66:7a:bd:93:46:af:fb:f4:a6:
                    c1:cf:aa:ee:61:2a:fb:ee:39:82:62:59:69:e7:fd:
                    3c:b7:77:44:12:19:52:69:19:64:e9:f5:65:69:89:
                    f6:2e:4c:6d:43:fb:48:fa:36:63:71:28:85:08:81:
                    e1:8d:e3:a2:6a:ea:5c:99:27:6d:05:62:7a:be:64:
                    18:b3:05:8e:1c:ce:77:93:28:3d:2e:fd:ec:0c:a2:
                    24:31:d3:81:6c:c2:31:a8:e9:4c:72:19:3e:9c:7c:
                    53:af:25:4e:b5:fd:49:50:e0:99:57:3f:22:1f:5f:
                    e0:4e:bb:6e:f6:32:a1:03:4b:da:37:7b:d0:7a:d7:
                    7a:4a:93:13:5f:36:c0:93:1a:53:6c:38:6f:7b:09:
                    5d:de:1b:83:e3:d4:07:49:d0:ac:b4:60:69:70:95:
                    69:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:21:41:82:6F:21:39:57:DD:26:8A:51:1F:9B:0F:68:F4:B7:3C:04
            X509v3 Authority Key Identifier:
                keyid:F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:fd:6f:af:50:44:6b:22:5e:a0:76:76:e5:b4:ff:55:f5:df:
         77:20:2e:8d:2e:9a:bd:f3:63:c1:68:3a:78:3a:27:4d:e8:e7:
         e2:8a:e2:49:39:aa:79:d1:f7:95:08:01:f7:5b:50:6a:9b:a8:
         bf:e2:75:da:04:8c:37:fa:74:5b:04:ea:38:c7:50:f4:6a:d5:
         88:83:33:b2:bb:be:6a:fa:b1:4c:d7:9f:2b:42:83:cf:b4:ce:
         4e:01:18:27:2c:70:38:1c:8d:8b:66:d7:b3:bc:66:00:20:eb:
         04:33:9e:5f:33:32:f5:5e:94:a9:0f:46:b2:1a:3f:b6:1f:55:
         af:e0:73:73:33:b2:c0:87:97:5c:cc:5e:27:6c:a8:c7:4b:28:
         c9:66:09:f1:d5:9f:bc:20:4d:42:37:08:d5:85:63:cd:2a:e5:
         5a:31:f1:57:ae:de:dc:34:b2:3f:20:07:b9:12:a1:cb:5f:22:
         ac:be:ce:f5:61:14:20:7e:2e:98:be:71:f7:a8:86:40:da:43:
         ff:f6:7f:77:9e:ef:9e:b3:6b:d2:83:45:f4:1d:46:98:fd:0d:
         16:eb:9e:68:74:3d:ce:3a:03:5d:53:1a:55:20:ac:9f:e2:a6:
         97:fd:67:8f:b4:6a:2c:a1:ca:2f:45:1e:f3:8c:5b:c9:d0:62:
         1e:39:c5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:09:52 2026 by rpki-client