Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
File:                     8W6j8DMLITLQ33UvUfDgv-89G64.mft (raw, json)
Hash identifier:          FGoOfM1+f9FJ+CLZZdkq4UcTk0AJr31JgglMOq6xuEw=
Subject key identifier:   45:3B:8D:6F:F9:4F:18:3C:F2:16:95:35:EF:0B:D5:44:78:DA:68:4B
Authority key identifier: F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
Certificate issuer:       /CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
Certificate serial:       01A000CA0E34E9DF9D560D645EAF41715F91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
Manifest number:          1A02
Signing time:             Fri 14 Aug 2026 15:00:36 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:36 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:36 +0000
Files and hashes:         1: 8W6j8DMLITLQ33UvUfDgv-89G64.crl (hash: GBlI6EezRhsV/6Q40m0icWE+yfrQ84XSX/WdNpICz1I=)
                          2: wwgOSiyDJCbc4Dd25-hiHFFVydI.roa (hash: 5sAIyPhih2yo/oCUdeqXVJ32SO2GS5hm7rjgamDiLJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:0e:34:e9:df:9d:56:0d:64:5e:af:41:71:5f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
        Validity
            Not Before: Aug 14 15:00:36 2026 GMT
            Not After : Aug 15 15:00:36 2026 GMT
        Subject: CN=453b8d6ff94f183cf2169535ef0bd54478da684b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:aa:db:50:f8:90:a3:b6:4e:94:cc:4c:84:
                    67:5f:24:38:e1:c0:f2:18:b6:79:bd:3c:1a:66:11:
                    41:98:12:62:e6:9c:44:1e:1e:d1:c8:a1:9a:6c:c1:
                    2e:d0:80:5d:44:19:b6:4a:4e:15:f3:ef:82:e1:eb:
                    23:a4:8f:01:33:8e:60:1b:bb:ed:5b:f9:ea:a2:d4:
                    e9:3c:9b:54:f9:ce:d7:df:8b:78:ca:ee:2f:e5:f7:
                    c3:6f:d7:50:5c:1a:c5:f4:fa:64:a8:42:5e:f0:65:
                    81:79:b9:2c:e7:aa:33:63:63:98:a9:95:be:0a:f5:
                    d0:29:3e:e0:a1:8b:8c:d4:a7:fd:8f:35:64:52:1d:
                    93:72:b7:5e:b7:aa:db:1b:0f:a9:86:06:dd:d4:80:
                    0f:62:b5:1c:15:7e:4f:9c:99:48:5b:c7:ee:37:d3:
                    82:d1:d0:fa:6a:7c:3a:48:b6:71:60:84:80:df:f0:
                    88:26:1f:25:df:54:f2:29:5a:49:1e:f9:e4:fc:20:
                    3e:3b:dd:47:be:74:04:f3:fd:74:0a:ad:25:76:79:
                    ba:9b:e3:4e:da:3d:50:f5:9a:ed:f9:e9:74:63:02:
                    70:a6:4a:ee:17:65:07:89:a2:35:d4:b7:65:83:56:
                    cc:c9:95:b5:40:70:ce:db:b0:49:36:ef:06:e2:3d:
                    01:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3B:8D:6F:F9:4F:18:3C:F2:16:95:35:EF:0B:D5:44:78:DA:68:4B
            X509v3 Authority Key Identifier:
                keyid:F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d7:7c:48:fa:3c:72:ce:97:91:33:94:f7:9d:d2:71:4b:1a:
         4c:27:6f:eb:ee:4a:dc:cf:46:9e:aa:15:43:18:e6:1a:5c:6b:
         67:84:77:c5:32:4e:db:46:9f:a9:99:08:d9:d9:68:d3:c1:2b:
         72:dd:bc:d9:3d:8e:dc:00:f5:15:e1:0b:cf:0e:f6:e9:3f:e1:
         5f:12:30:9f:ff:c6:37:e6:ae:aa:05:ad:af:de:53:73:f2:93:
         14:d5:61:fd:70:da:62:a0:1f:7f:d1:b9:92:10:91:c7:bb:5f:
         85:79:05:54:ea:2a:18:fe:8a:58:0c:7f:e5:81:f7:44:e2:1a:
         14:ec:ef:b8:e3:a8:71:aa:ac:48:6d:a0:56:3f:36:17:67:c5:
         bd:cf:71:30:b8:c5:ce:79:f3:87:9d:b2:9a:07:32:2a:32:a3:
         56:04:7e:8d:ae:e4:35:6b:f0:9c:20:48:e8:fb:f1:4e:06:38:
         14:a4:e9:5a:fb:49:b3:06:95:50:d9:a3:80:03:ad:af:41:db:
         80:09:55:a7:63:a7:d2:d7:43:48:67:22:90:7f:69:a4:47:a5:
         43:0f:d3:4c:f9:e0:71:b7:1a:61:51:32:3d:af:12:5f:ff:14:
         c2:6a:b8:e2:23:c6:ee:f4:18:e0:be:f7:34:8a:f7:be:f7:c9:
         6f:3d:d2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:43 2026 by rpki-client