Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
File:                     68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft (raw, json)
Hash identifier:          3UlBvbbquDIXmV2cnEvsNhaeA4E70PdZu6BPIiD6FXM=
Subject key identifier:   9F:8D:8F:A2:49:37:44:7A:E9:44:CC:A5:C4:1B:1C:78:90:B3:2F:97
Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
Certificate issuer:       /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Certificate serial:       01A0005C9C23FD730A93872381BD06946187
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
Manifest number:          19FF
Signing time:             Fri 14 Aug 2026 13:01:04 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:04 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:04 +0000
Files and hashes:         1: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl (hash: XpQZgMvcsLtqM79WOEVjhlb2WMNfWnY6wxKtKTZxPeY=)
                          2: G4a9H5UHMlOF2anZRkuQjAXLX4M.roa (hash: rQpuKOb5jMaJjw/2N1tUEol0BJNqAbDDuFn8EFF/SWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:9c:23:fd:73:0a:93:87:23:81:bd:06:94:61:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
        Validity
            Not Before: Aug 14 13:01:04 2026 GMT
            Not After : Aug 15 13:01:04 2026 GMT
        Subject: CN=9f8d8fa24937447ae944cca5c41b1c7890b32f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:97:85:b0:e3:bd:82:b3:8f:2c:be:98:50:39:
                    d7:30:fa:a1:79:40:4f:76:84:f1:ad:4a:2a:ab:7f:
                    a8:ff:0a:5e:a5:c2:1f:c6:b8:73:c0:81:0c:fa:92:
                    50:bb:28:61:50:2a:71:c0:79:13:ba:00:b9:b3:6a:
                    73:e9:44:e4:6d:a4:0e:17:3d:6e:d0:d7:cc:41:21:
                    c9:97:87:9c:18:19:dd:a6:5f:0f:29:a3:1a:69:a7:
                    72:e8:36:d5:50:58:51:15:d7:57:76:39:26:40:44:
                    ad:ed:d7:7e:0b:91:de:43:49:65:ca:50:65:1c:78:
                    46:01:87:24:a6:da:a1:32:f4:75:66:ce:b4:ec:98:
                    99:6d:13:45:75:e1:50:5b:38:8e:2b:0e:13:d6:f8:
                    b0:36:81:ce:a1:e3:ca:a6:c1:18:b9:c7:d3:66:79:
                    3e:4f:b5:7d:36:a2:d7:a8:78:c9:36:f1:08:09:20:
                    39:b4:15:59:29:94:60:dd:ce:2f:15:b9:86:8c:b6:
                    db:1a:b4:e1:90:f9:2c:96:ea:af:27:6c:84:21:ea:
                    88:d2:98:51:11:34:60:35:10:73:d3:30:38:77:ae:
                    fd:b4:19:ab:c7:c7:ae:26:73:fd:6f:e0:37:0c:16:
                    de:6e:16:46:3f:f5:5a:e3:48:a2:e9:cb:38:26:04:
                    79:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8D:8F:A2:49:37:44:7A:E9:44:CC:A5:C4:1B:1C:78:90:B3:2F:97
            X509v3 Authority Key Identifier:
                keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c4:70:63:a3:fc:1d:95:32:14:23:18:a5:6d:b3:f6:d4:46:
         9d:6d:4b:29:ed:0b:b1:b2:5d:5a:47:89:ea:10:36:6c:92:35:
         d8:21:34:7c:1c:c2:88:d1:dc:10:a0:b6:c2:0b:0b:89:a2:6b:
         f1:9d:fc:67:ee:88:66:9e:d3:43:75:73:b5:9e:d0:38:e4:f6:
         78:ef:33:9f:57:0d:a1:0b:1a:87:92:7e:bb:90:6b:57:88:06:
         76:f2:cd:9c:51:55:c9:f8:f4:34:7c:be:29:f2:13:96:39:08:
         1c:13:8a:65:06:1c:5c:18:35:04:ae:93:64:48:d7:1d:95:b2:
         2e:73:f6:0e:94:be:a4:30:d2:6d:c7:b2:e0:89:1e:d4:32:0c:
         c0:c3:ec:45:cd:a7:ec:75:d6:c8:7e:c6:ae:40:8d:61:24:c3:
         a1:1f:66:01:4c:92:fd:60:48:d6:c2:10:12:40:c0:76:bb:f8:
         78:fe:6b:e0:76:8b:27:71:72:17:8f:9b:13:51:79:95:27:fe:
         dd:35:5f:3b:c9:4e:b8:54:f3:01:0a:65:27:95:44:8d:3f:bb:
         ca:a2:ce:27:cd:5e:23:f7:23:42:78:da:23:a8:ff:42:86:ee:
         35:bb:43:fa:db:be:4a:48:a2:84:22:bd:32:a5:cb:8e:aa:ea:
         59:8d:ec:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:48 2026 by rpki-client